HTTP is not redirected to HTTPS

After moving to HTTPS, old HTTP URLs should not stay reachable. They must redirect, or you get two versions of every page.

What it is

This check flags HTTP URLs that respond 200 instead of 301-redirecting to HTTPS.

Why it matters for SEO

Duplicate HTTP and HTTPS URLs split ranking signals and can index the insecure version, undermining the migration.

Example

http://example.com/page   ->  200 OK   (should be 301 to https://)

How to fix

1. Add a site-wide 301 from http:// to https://.
2. Apply it at the server or CDN level for every path.
3. Add HSTS so browsers use HTTPS automatically.
4. Re-crawl to confirm HTTP URLs redirect.

Related checks

• 302 redirect
• 3XX redirect
• HTTP to HTTPS redirect
• Long redirect chain

← Knowledge base