Why it matters
On plain HTTP, anyone between your visitor and your server (café Wi-Fi, an ISP) can read and change the page, including passwords. Every modern host gives you HTTPS for free.
How to check it yourself
Type your address into the browser with http:// in front. If the page loads and the address bar still says http, or shows 'Not secure', visitors can reach your site without encryption.
What the fix involves
Turn on the free certificate your host provides and add a permanent redirect from every http:// address to its https:// twin. On Vercel, Netlify and Cloudflare this is a single setting.
Reference: web.dev
How vibeliq checks it
We load your page the way a visitor's browser would, read what your server sends back, and look at a short list of well-known addresses on your site. If this turns up, your report explains it in plain English and gives you a prompt, written for Claude Code, Cursor, Lovable or whatever built your site, that fixes it in your actual codebase.