Website security. It's not just for big corporations. If your website collects any information, you have to make sure it’s secure. DubBot can help you do that with its Website security policy set.
This policy set includes four custom policies designed to check your content, embedded third-party applications, and internet protocols for possible security threats. Let’s look at each one, what it tests for, and why it is an essential policy for your website’s security.
Personal Identification Information (PII) potentially
on a page
The Department of Labor defines PII as "information that can be used to distinguish or trace an individual’s identity, either alone or when combined with other information linked or linkable to a specific individual."
Think names, addresses, emails, phone numbers, even IP addresses. If your site collects any of this, you're holding valuable data. Hackers love valuable data.
Embedded Video / Audio
Embedding third-party apps (like analytics tools, chat widgets, or social media like YouTube) can add great features to your site. But they can also introduce security risks.
Third-party apps may contain vulnerabilities or malicious code that can compromise your system. For example, outdated software from independent developers may be left vulnerable to the latest security threats.
HTTP mixed content on HTTPS pages
Unsecured web pages pose a significant security risk. When resources like images, scripts, or stylesheets are transmitted without encryption (HTTPS), they're vulnerable to interception.
Form present on page
Web forms are relatively exposed compared to other website applications. This, coupled with their frequent handling of sensitive data like payment details and PII, makes them particularly susceptible to security breaches.
Website security is an ongoing process. Be sure to import DubBot’s Website security policy set into your custom policies to include them in every website crawl. Educate your team about website security and foster a culture of vigilance.
If you have questions or need assistance importing any of DubBot's policy sets, please contact our support team at help@dubbot.com or via the blue chat bubble in the lower right corner of your screen.
Resources
- Form Checks with DubBot
- What is mixed content?
- Policy Library Overview
- Security on the Web - Mixed Content
- Policy Set - Website security best practices
- Guidance on the Protection of Personally Identifiable Information (PII)
A human author creates the DubBlog posts. The AI tool Gemini is sometimes used to brainstorm subject ideas, generate blog post outlines, and rephrase certain portions of the content. Our marketing team carefully reviews all final drafts for accuracy and authenticity. The opinions and perspectives expressed remain the sole responsibility of the human author.
