Covers the metrics clients care about, the ones they should, and the security holes most scanners miss.
01
Performance
Google PageSpeed score, LCP, CLS, TBT, FCP. Mobile-first.
02
Security Headers
HSTS, X-Content-Type-Options, X-Frame-Options, CSP, Referrer-Policy.
03
SSL Health
Issuer, expiry date, days until renewal, TLS version.
04
WordPress Check
Detects WP, flags outdated core vs WP.org, user-enum, xmlrpc brute-force surface, plugin count.
05
Broken Links
Crawls the homepage, checks internal links for 4xx/5xx, flags malformed/concatenated URLs.
06
Response Speed
3 pings from our SA server. Average response time. Slow = flagged.
07
SEO Basics
Title, meta desc, H1, canonical, Open Graph, Schema.org, sitemap.
08
Mixed Content
HTTPS pages serving HTTP assets - breaks browser security.
09
Email & DNS Hygiene
SPF, DKIM, DMARC, MX records. Catches spoofable domains before clients get phished.
10
Tech Stack & CVEs
Identifies CMS, framework, server, exposed versions. Flags software with known vulnerabilities.
11
Structured Data
JSON-LD, microdata. Validates schema.org markup for rich results.
12
Social Share Preview
Open Graph + Twitter Card tags + preview image. So links look right in WhatsApp, LinkedIn, X.
13
Accessibility (WCAG-lite)
Alt text, heading order, language tag, contrast hints, form labels. Catches common a11y gaps.
14
Site-wide Audit
Parses the sitemap, audits a representative sample of pages for TTFB and errors.
15
Exposed Files & Listings
Probes for .env, .git, wp-config backups, and open directory listings - the stuff that leaks credentials.
16
Mobile Responsiveness
Viewport meta tag, CSS media queries, and fixed-width table detection. Flags sites that break on phones.
17
Heading Hierarchy
Counts H1-H6 tags in document order. Flags missing H1, multiple H1s, and skipped heading levels.
18
Image Weight
HEAD-requests up to 10 images. Flags anything over 200 KB. Avg size drives the score.
19
Duplicate Content
Tests http/https + www/apex variants. Checks all 4 converge to one canonical URL via 301.
20
Indexing Status
Checks robots.txt, meta noindex, X-Robots-Tag header, and sitemap presence. Flags anything blocking search engine discovery.