Google’s John Mueller said on Twitter that Google will pick the HTTPS version of your website if it is available with both HTTPS and HTTP. Having both versions isn’t a problem for SEO, but you should fix it for security reasons:
It's not a problem for SEO. We pick them up as we index the web pages, and it sounds like they're on HTTPS, so we'd use the HTTPS versions anyway. It might be worth fixing for security though.
— ? John ? (@JohnMu) September 21, 2020
How to check the security settings of your website
The website audit tool in SEOprofiler checks many things that have an impact on the rankings of your web pages on Google and other search engines. It also checks the security settings of your website:
