Free Learning Resources

Security & Performance Guides

Learn what every PEKRYON scan checks, what the scores mean, and how to fix each issue —.

🛡 Category A — Security (50 pts)
10 pts · Security
SSL/TLS Certificate
Why the padlock matters, fix expired certs, upgrade to TLS 1.3.
30 pts · Security
Security Headers
All 6 HTTP headers explained — CSP, HSTS, X-Frame-Options and more.
5 pts · Security
HTTP Response Security
Server version disclosure, CORS, security.txt — hide your attack surface.
5 pts · Security
HTTPS Enforcement
301 redirects, HSTS preload, mixed content — enforce HTTPS properly.
⚡ Category B — Performance (20 pts)
20 pts · Performance
Performance Assessment
Response time, Gzip, cache headers, HTTP/2 — all 5 factors explained.
Intel · No score
Infrastructure & CDN
CDN detection, hosting provider, load balancer, server fingerprint.
🔍 Category C — SEO (15 pts)
10 pts · SEO
SEO Core Audit
Title tags, canonical URLs, robots.txt, sitemaps — rank higher on Google.
5 pts · SEO
Social SEO & Structured Data
Open Graph, Twitter Cards, JSON-LD — make links shine on WhatsApp.
Intel · No score
Robots.txt & Sitemap
Crawl directives, sitemap URL count, security.txt analysis.
Intel · Can override score
Information Disclosure
Exposed .git repos, backup files, source maps, and other misconfigurations.
⚙ Category D — Technical (10 pts)
5 pts · Technical
DNS Security
SPF, DMARC, CAA records — stop email spoofing attacks on your domain.
5 pts · Technical
Technical Infrastructure
IPv4/IPv6 resolution, DNS redundancy, MX records.
✅ Category E — Best Practices (5 pts)
5 pts · Best Practices
Website Best Practices
Mobile viewport, broken links, 404 pages, image alt text, lang attribute.
🔎 Intelligence Modules (No score)
Intel
Availability & Uptime
HTTP status codes, redirect chains, response time monitoring.
Intel
URL Validation
URL structure, protocol scheme, redirect chain analysis.
Intel
Domain Intelligence
Nameservers, DNS provider, TLD reputation, SOA record.
Intel
Website Structure
Navigation, internal links, semantic HTML, word count.
Intel
JavaScript Analysis
SRI on external scripts, eval() usage, hardcoded API keys.
Intel
Resource Analysis
Third-party domains, image optimisation, CSS files.
Intel
Forms & UI Inventory
Login, contact, payment form detection and CSRF issues.
Intel
Public Contact Info
Email, phone, address, social media link detection.
Intel
Cookie Security
Secure, HttpOnly, SameSite flags — protecting session tokens.
Intel
Technology Fingerprinting
CMS, JS frameworks, analytics tools, CDN, e-commerce detection.
Intel
Privacy & DPDP Act
Cookie consent, privacy policy, DPDP Act 2023 compliance.
Intel
Accessibility
Alt text, ARIA landmarks, form labels, heading hierarchy.
Intel
Reputation & Blacklists
DNS blacklists, TLD reputation, Google Safe Browsing status.