Run over 100 checks on your website in under a minute: security holes, SEO mistakes, Google speed scores, accessibility, email spoofing risks and privacy compliance. Get a score, the issues to fix first and a PDF report you can share with your developer.
Security
SSL certificate validity, expiry and key strength, HTTPS redirect, old TLS versions, security headers (HSTS, CSP, clickjacking), cookie flags, mixed content, outdated WordPress core and plugins, and JavaScript libraries with known vulnerabilities.
Speed (Google Lighthouse)
Google's own mobile speed test, real-visitor Core Web Vitals (LCP, INP, CLS), page weight, oversized images, modern image formats, compression, caching, HTTP/2 and missing files.
SEO
Titles, meta descriptions, headings, canonical URLs, noindex mistakes, robots.txt, XML sitemap, structured data validity, social previews, www / non-www setup and broken links.
Accessibility
Colour contrast, form labels, image alt text, heading order, link and button names, page language, iframe titles and pinch-to-zoom.
Domain & Email
Domain expiry date and transfer lock, nameservers, IPv6, SPF (including the 10-lookup limit), DKIM, DMARC, MTA-STS, DNSSEC and CAA.
Privacy & Trust
Tracking and advertising tools, cookie-consent banner, privacy policy and terms, visible contact options, outdated copyright year and how many third-party services your page loads.
Frequently asked questions
Is the website audit really free?
Yes. The quick scan and the short PDF are free and need no sign-up. The detailed report is also free: book a call, we confirm you own or manage the site, and our team runs the deeper scan and walks you through it.
Is the scan safe for my website?
Yes. It is a passive, read-only check: we load your public pages the way a browser or Google does, read standard files like robots.txt and sitemap.xml, and look up public DNS records. We never submit forms, log in, or send attack traffic.
What does the free audit check?
Over 100 checks in six areas: security (SSL, HTTPS, security headers, cookies, outdated WordPress, plugins and JavaScript libraries), SEO (titles, headings, canonical tags, structured data, sitemap, broken links), speed (Google Lighthouse scores, real-visitor Core Web Vitals, page weight, images, caching), accessibility (colour contrast, labels, headings, alt text), domain and email (domain expiry, SPF, DKIM, DMARC, DNSSEC) and privacy and trust (tracking tools, cookie consent, privacy policy, contact details).
Where do the speed scores come from?
From Google itself. We run Google Lighthouse through the PageSpeed Insights service on a simulated mobile phone, and when Google has enough data we also show the real-visitor Core Web Vitals from the Chrome UX Report, which are the numbers Google uses for ranking.
What extra do I get in the detailed report?
The detailed scan examines up to 30 pages of your site (including the pages in your sitemap) instead of just the homepage, tests both mobile and desktop speed, checks external links, finds duplicate titles and descriptions, reviews your homepage content and calls to action, and includes every finding with step-by-step fixes and a prioritised action plan written for your platform.
Why do you verify that I own the site?
The detailed report goes deeper and is shared only with the site's owner or the people who manage it. Our team confirms this on the call, for example through an email address on the same domain or access to the site or its DNS.
How is AI used in the audit?
Our scanner runs the checks; an AI model then turns the results into a plain-English summary and fix plan. Every finding in the report comes from an actual check on your site.