Mixed Content

Mixed Content

Mixed content occurs when an HTTPS page loads resources (images, scripts, stylesheets) over insecure HTTP. This can trigger browser warnings and compromise your site's security.

Available on: Pro, Business, and Enterprise plans Default frequency: Every 72 hours

How it works

Pulsewise crawls your HTTPS pages and inspects all loaded resources. Any resource loaded over HTTP on an HTTPS page is flagged as mixed content.

The crawler follows internal links to discover pages across your site, checking each page for insecure resource references.

Types of mixed content

  • Active mixed content — Scripts, stylesheets, and iframes loaded over HTTP. Browsers typically block these outright.
  • Passive mixed content — Images, audio, and video loaded over HTTP. Browsers may display a warning icon.

Reviewing results

The mixed content page lists all detected issues with:

  • The page URL where the mixed content was found
  • The insecure resource URL
  • The type of resource (image, script, stylesheet, etc.)

Notifications

Notification Severity When
Mixed Content Found Critical Insecure resources detected on your HTTPS pages
Mixed Content Partially Resolved Warning Some but not all mixed content issues fixed
Mixed Content Resolved Info All mixed content issues have been fixed

Fixing mixed content

To fix mixed content issues:

  1. Update resource URLs from http:// to https://
  2. Use protocol-relative URLs (//example.com/resource.js)
  3. Ensure all CDNs and third-party resources support HTTPS

Pulsewise will automatically clear resolved issues on the next scan.