Free tool

Free Website Audit

Run over 100 checks on your website in under a minute: security holes, SEO mistakes, Google speed scores, accessibility, email spoofing risks and privacy compliance. Get a score, the issues to fix first and a PDF report you can share with your developer.

Safe, read-only scan: we only load your public pages and DNS records, the way a browser or Google does.

What we check

Security

SSL certificate validity, expiry and key strength, HTTPS redirect, old TLS versions, security headers (HSTS, CSP, clickjacking), cookie flags, mixed content, outdated WordPress core and plugins, and JavaScript libraries with known vulnerabilities.

Speed (Google Lighthouse)

Google's own mobile speed test, real-visitor Core Web Vitals (LCP, INP, CLS), page weight, oversized images, modern image formats, compression, caching, HTTP/2 and missing files.

SEO

Titles, meta descriptions, headings, canonical URLs, noindex mistakes, robots.txt, XML sitemap, structured data validity, social previews, www / non-www setup and broken links.

Accessibility

Colour contrast, form labels, image alt text, heading order, link and button names, page language, iframe titles and pinch-to-zoom.

Domain & Email

Domain expiry date and transfer lock, nameservers, IPv6, SPF (including the 10-lookup limit), DKIM, DMARC, MTA-STS, DNSSEC and CAA.

Privacy & Trust

Tracking and advertising tools, cookie-consent banner, privacy policy and terms, visible contact options, outdated copyright year and how many third-party services your page loads.

How it works

  1. Enter your website. Our scanner runs over 100 passive checks on your homepage, server and domain, and Google Lighthouse tests its speed on a phone.
  2. Get your score. See your grade, the issues to fix first, and an AI-written summary in plain English. Download it as a PDF.
  3. Book a free call for the detailed report. After we confirm the site is yours, we scan up to 30 pages and give you a complete, prioritised fix plan.

Frequently asked questions

Is the website audit really free?

Yes. The quick scan and the short PDF are free and need no sign-up. The detailed report is also free: book a call, we confirm you own or manage the site, and our team runs the deeper scan and walks you through it.

Is the scan safe for my website?

Yes. It is a passive, read-only check: we load your public pages the way a browser or Google does, read standard files like robots.txt and sitemap.xml, and look up public DNS records. We never submit forms, log in, or send attack traffic.

What does the free audit check?

Over 100 checks in six areas: security (SSL, HTTPS, security headers, cookies, outdated WordPress, plugins and JavaScript libraries), SEO (titles, headings, canonical tags, structured data, sitemap, broken links), speed (Google Lighthouse scores, real-visitor Core Web Vitals, page weight, images, caching), accessibility (colour contrast, labels, headings, alt text), domain and email (domain expiry, SPF, DKIM, DMARC, DNSSEC) and privacy and trust (tracking tools, cookie consent, privacy policy, contact details).

Where do the speed scores come from?

From Google itself. We run Google Lighthouse through the PageSpeed Insights service on a simulated mobile phone, and when Google has enough data we also show the real-visitor Core Web Vitals from the Chrome UX Report, which are the numbers Google uses for ranking.

What extra do I get in the detailed report?

The detailed scan examines up to 30 pages of your site (including the pages in your sitemap) instead of just the homepage, tests both mobile and desktop speed, checks external links, finds duplicate titles and descriptions, reviews your homepage content and calls to action, and includes every finding with step-by-step fixes and a prioritised action plan written for your platform.

Why do you verify that I own the site?

The detailed report goes deeper and is shared only with the site's owner or the people who manage it. Our team confirms this on the call, for example through an email address on the same domain or access to the site or its DNS.

How is AI used in the audit?

Our scanner runs the checks; an AI model then turns the results into a plain-English summary and fix plan. Every finding in the report comes from an actual check on your site.