AI broke my SSL. How do I check HTTPS?

Updated 2026-10-17

Short answer: check whether every version of your address loads over HTTPS without a warning, and whether http sends visitors to https.

AI coding tools check that the code runs. They don't check what the live site serves. So a change can pass every test and still break the site, and the AI reports the job as done.

How to check it yourself

  1. Open your site with https, with and without www. Look for a certificate warning.
  2. Open it with http. It should send you to https.
  3. Open the browser console and look for mixed content: files loaded over http on an https page.
  4. If you use Cloudflare, check its SSL mode didn't change.

What Preventionlabs shows

Preventionlabs checks HTTPS and redirects on every version of your address, insecure files across your pages, and the security headers that keep visitors on HTTPS. Each report lists problems first, with the evidence and what to do, and shows what changed since the last report.

The certificate's expiry date shows when you connect a read-only Cloudflare token.

Give your AI agent the Preventionlabs MCP server and it runs the same check itself after it deploys.

Price

First report free, no card needed. Then A$50 a month, up to 10 domains.

Run your first report free

More questions it answers