Knowledge Base
Understand your scan results, harden your stack, and follow the same practices our engineers apply on 28,691 monitored websites.
Live Secret Verification: Are Detected Credentials Still Active?
How 2MNY live-verifies detected API keys and tokens against their issuing provider with read-only checks — escalating confirmed-active credentials to critical and marking provider-rejected ones as rotated.
Scan Depth Tiers Explained: Quick, Deep and Super-Deep
What actually changes between a Quick scan (63 scanners), a Deep scan (228 scanners) and a Super-Deep scan (all 232) — and when to use each.
Evidence-Verified Findings: How 2MNY Confirms Vulnerabilities Are Real
Every critical and high finding is re-checked live after the scan: the platform re-fetches the evidence and labels each finding Verified Live, Remediated, Unreachable or Not Machine-Verifiable.
Reading the Ransomware Leak-Site Check Result
What the 2MNY ransomware leak-site check means: critical match semantics, the no-match assurance finding, dataset freshness, and the incident-response steps a listing should trigger.
Securing Your Website Cookies
Configure secure cookies with HttpOnly, Secure, and SameSite attributes.
Content Security Policy (CSP) Configuration Guide
CSP prevents XSS and data injection attacks.
HSTS: HTTP Strict Transport Security
HSTS forces browsers to use HTTPS, preventing downgrade attacks.
DKIM Setup Guide for Email Security
DKIM adds a digital signature to your emails.
How to Move wp-config.php for Security
Moving wp-config.php outside the web root improves WordPress security.
WordPress Security Hardening Checklist
Follow this checklist to secure your WordPress website against common attacks.
How to Renew an Expired SSL Certificate
Step-by-step guide to renewing an expired SSL certificate using Let's Encrypt.
Understanding SSL Certificates
Learn what SSL certificates are and why they are essential for your website.
See how your own site scores
Reading is step one. A free scan shows exactly which of these issues your website has today.