64 checks across 5 areas

Free website check

Fifty checks. One score. A report you can hand to your developer.

Free, no account. Up to 5 checks a day per visitor.

6 sites checked this week

Type your address. We read the page the way a browser, a search engine and an attacker would, and tell you what each of them finds — speed, security, search visibility, accessibility and mobile — in a few seconds.

How it works

1

We fetch your home page from our servers, exactly as a visitor's browser would — no login, no cookies, nothing submitted.

2

Each check reads the page, its headers, its files and its DNS, and says what it found and how to fix it.

3

You get a scored report with a permanent link and a badge. If you want it fixed, one button turns it into a quote.

What we look at

Security

30%

What the site tells an attacker, and what it lets a browser do.

  • Served over HTTPS
  • TLS certificate
  • HTTP Strict Transport Security
  • Content Security Policy
  • Clickjacking protection
  • MIME sniffing disabled
  • Referrer policy
  • Mixed content
  • Cookie flags
  • Server version disclosure
  • Forms submit over HTTPS
  • Outdated JavaScript libraries
  • CMS exposure
  • Exposed sensitive files
  • Directory listing
  • Email authentication (SPF, DMARC)

Performance

25%

How fast the server answers and how much it asks the browser to load.

  • Server response time
  • HTTP/2 or HTTP/3
  • Text compression
  • HTML size
  • Redirect chain
  • Number of requests
  • Render-blocking scripts
  • Lazy-loaded images
  • Browser caching
  • Minified CSS and JavaScript
  • Image optimisation
  • Largest Contentful Paint
  • First Contentful Paint
  • Cumulative Layout Shift
  • Total Blocking Time
  • Total page weight
  • Third-party load
  • JavaScript errors

Search visibility

25%

What a search engine reads: titles, descriptions, links, sitemaps.

  • Page title
  • Meta description
  • Main heading (H1)
  • Indexable
  • Canonical URL
  • Social sharing tags
  • Structured data (JSON-LD)
  • Favicon
  • robots.txt
  • XML sitemap
  • www and non-www
  • Broken links
  • Content without JavaScript
  • Broken resources

Accessibility

10%

Whether a screen reader and a keyboard can use the page.

  • Page language
  • Image alt text
  • Form labels
  • Descriptive link text
  • Heading order
  • Page landmarks
  • Button names

Mobile

10%

Whether a phone gets a page made for a phone.

  • Viewport meta tag
  • Responsive images
  • Home screen icon
  • Fits the phone screen
  • Readable text on mobile
  • Tap target size

We only read what a public visitor could. Nothing is submitted to your site and no vulnerability is exploited — findings are what your site shows, not what we tried.