Skip to content

Web standards

Semantic HTML, SEO and security headers.

From seo-audit ↗ and security-best-practices ↗ by Corey Haines, supercent-io

21 principles

01

Write titles that fit the SERP

02

Write a meta description

03

One H1, no skipped levels

04

Describe and optimize images

05

Readable, hyphenated URLs

06

One canonical URL

07

Keep key pages indexable

08

Key pages within 3 clicks

09

Pass Core Web Vitals

10

Mobile is the real page

11

Answer first

12

Strip AI writing tells

13

Serve everything over HTTPS

14

Content security policy

15

Escape output, never innerHTML

16

Validate, then parameterize

17

Require CSRF tokens

18

Rate-limit the API

19

Keep secrets out of code

20

Short-lived, rotating tokens

21

Least privilege, every request