This is a sample report - data is illustrative, not a real scan. Scan your own site →
← All sample reports

Common Website Security Issues on South African Sites: A Poor Score Example

This sample shows a site scoring below 50 - the kind of result that means visitors and search engines both have reason to distrust it. The security checks here reveal the issues most commonly found on South African SMB sites.

Nel404 Health

bestdeals247.co.za

Scanned 10 May 2026, 09:15 (SAST)
34
Poor
Overall Score
Your site scored 34/100: Poor
We can fix these issues for a flat R1,499. One invoice, no ongoing fees.
Get a free quote →

Priority Action Plan

Top 8 fixes ranked by business impact. Address these first for the fastest improvement.

  1. 1
    Security Headers FAIL 0/100
    Missing security header: Strict-Transport-Security
    Missing headers expose your visitors to clickjacking, XSS, and data injection attacks.
  2. 2
    SSL / Certificate FAIL 20/100
    SSL certificate expires in 8 days. Renew immediately.
    An invalid or expiring certificate triggers browser security warnings and kills user trust instantly.
  3. 3
    SEO Basics FAIL 27/100
    Title tag is too short (18 chars). Aim for 50-60 characters.
    Missing titles, descriptions, or canonical tags reduce click-through rates and search visibility.
  4. 4
    Performance FAIL 28/100
    Performance score is below 50 (poor). Users on mobile will experience slow loads.
    Slow pages lose rankings and conversions - Google penalises sites below Core Web Vital thresholds.
  5. 5
    Broken Links FAIL 60/100
    4 broken link(s) found out of 10 checked.
    Broken links frustrate visitors, damage crawl budget, and signal neglect to search engines.
  6. 6
    Mixed Content FAIL 30/100
    7 mixed content resource(s) found. Browsers may block these, breaking site functionality.
    HTTP assets on an HTTPS page break the padlock and can trigger browser security warnings.
  7. 7
    Response Check WARN 60/100
    Site responded but average response time is 4,210ms (slow).
    Fixing this issue will improve site quality, security, or search visibility.
  8. 8
    WordPress Check WARN 70/100
    WordPress version 5.9.1 detected via generator meta tag. Consider hiding this for security.
    Outdated WordPress core or plugins are the leading cause of site compromises in SA.
Performance
FAIL
28
  • Performance score is below 50 (poor). Users on mobile will experience slow loads.
  • Largest Contentful Paint: 7.4s - critical. Images are likely unoptimised.
  • Total Blocking Time: 1,340ms - too many render-blocking scripts.
  • Cumulative Layout Shift: 0.42 - significant layout instability.
  • Site is on HTTP/1.1. Upgrading to HTTP/2 can improve load times by 10-30% on multi-asset pages.
  • No response compression detected. Enable gzip or brotli to reduce transfer size.
Technical evidence
mobile_score28
LCP7.4 s
CLS0.42
FCP4.1 s
TBT1,340 ms
Speed Index6.8 s
http_version2
encodingnone
Security Headers
FAIL
0
  • Missing security header: Strict-Transport-Security
  • Missing security header: X-Content-Type-Options
  • Missing security header: X-Frame-Options
  • Missing security header: Content-Security-Policy
  • Missing security header: Referrer-Policy
  • Missing security header: Permissions-Policy
Technical evidence
present
missingStrict-Transport-Security, X-Content-Type-Options, X-Frame-Options, Content-Security-Policy, Referrer-Policy, Permissions-Policy
checkedStrict-Transport-Security, X-Content-Type-Options, X-Frame-Options, Content-Security-Policy, Referrer-Policy, Permissions-Policy
SSL / Certificate
FAIL
20
  • SSL certificate expires in 8 days. Renew immediately.
Technical evidence
issuerLet's Encrypt
subjectbestdeals247.co.za
days_left8
expires2026-05-19
sansbestdeals247.co.za
WordPress Check
WARN
70
  • WordPress version 5.9.1 detected via generator meta tag. Consider hiding this for security.
  • 8 plugin(s) detected via stylesheet references. Ensure all plugins are kept updated.
Technical evidence
is_wordpress1
version_exposed5.9.1
plugin_count8
Broken Links
FAIL
60
  • 4 broken link(s) found out of 10 checked.
  • HTTP 404: https://bestdeals247.co.za/specials
  • HTTP 404: https://bestdeals247.co.za/about-us
  • HTTP 500: https://bestdeals247.co.za/contact
  • HTTP 404: https://bestdeals247.co.za/newsletter-signup
Technical evidence
checked10
broken_count4
broken{"url":"https://bestdeals247.co.za/specials","code":404}, {"url":"https://bestdeals247.co.za/about-us","code":404}, {"url":"https://bestdeals247.co.za/contact","code":500}, {"url":"https://bestdeals247.co.za/newsletter-signup","code":404}
ok6
partial
Response Check
WARN
60
  • Site responded but average response time is 4,210ms (slow).
  • Single-point response check from our SA server. Not a substitute for continuous uptime monitoring.
Technical evidence
response_times_ms3980, 4520, 4130
avg_ms4210
errors
SEO Basics
FAIL
27
  • Title tag is too short (18 chars). Aim for 50-60 characters.
  • Missing meta description.
  • 3 H1 headings found. Best practice is one H1 per page.
  • No canonical link tag found.
  • Mobile viewport meta tag is present (good for mobile SEO).
  • No Open Graph tags found. Add og:title, og:description, og:image for better social media previews.
  • No Twitter Card tags found.
  • No Schema.org JSON-LD found.
  • robots.txt found but contains "Disallow: /" which blocks all search engine crawling.
  • sitemap.xml not found (HTTP 404). Create and submit one to Google Search Console.
Technical evidence
titleBest Deals 247
title_length18
meta_description_length0
h1_count3
canonical
viewport1
og_tags_foundnone
twitter_card_tagsnone
schema_ld_json_blocks0
robots_txtfound
sitemap_xmlnot found (HTTP 404)
Mixed Content
FAIL
30
  • 7 mixed content resource(s) found. Browsers may block these, breaking site functionality.
  • [img] http://bestdeals247.co.za/wp-content/uploads/banner.jpg
  • [script] http://tracking.thirdparty.com/pixel.js
  • [img] http://bestdeals247.co.za/wp-content/uploads/promo.png
Technical evidence
insecure_count7
samples{"tag":"img","url":"http://bestdeals247.co.za/wp-content/uploads/banner.jpg"}, {"tag":"script","url":"http://tracking.thirdparty.com/pixel.js"}