Scan and secure the site
Follow and action all of these:
- https://securityheaders.com/
- https://observatory.mozilla.org/
- https://www.ssllabs.com/ssltest/index.html
- https://hstspreload.org/
Read up on these and action if necessary:
This issue may need breaking up into further, smaller issues.
Edited by Jonathan Mason