Performance
Server response time, compression, HTML size, scripts and CSS, caching, CDN, lazy loading. Then Google PageSpeed on mobile: LCP, CLS, TBT, page weight and real Chrome user data where available.
Free tool
Check your website in 30 seconds
Speed, security, technical SEO and email, measured in seconds, with an explanation for every point. Free, no account.
What we check
Five categories, over 40 points, the same ones we track monthly for our clients
Security
Enforced HTTPS, certificate and TLS version, the six security headers, version leaks, XML-RPC, user enumeration, readme.html and the login page on WordPress.
Technical SEO
Title, meta description, H1, canonical, meta robots, viewport, lang attribute, Open Graph, JSON-LD structured data, robots.txt, XML sitemap, favicon and images without alt text.
Platform
CMS, theme and builder, the plugins visible in the HTML and how many files they load on the homepage. On WordPress, the exposed version and the classic entry points for automated attacks.
MX, SPF and DMARC for the domain. Without them your emails land in spam, and the domain can be used by others for phishing in your name.
What we do not check
We do not log in anywhere, do not try passwords, do not submit forms and only access public addresses: the requested page, a few standard files (robots.txt, sitemap, favicon) and, on WordPress, the well-known endpoints, one request each. We do not store your page content, only the results.
Frequently asked questions
What exactly does the tool check?
Over 40 points in five categories: performance (server response time, compression, HTML size, number of scripts and CSS files, caching, CDN, plus Google PageSpeed on mobile with Core Web Vitals), security (enforced HTTPS, certificate and TLS version, security headers, XML-RPC, user enumeration, exposed WordPress version, login page), technical SEO (title, meta description, H1, canonical, indexing, viewport, Open Graph, structured data, robots.txt, sitemap, favicon), platform (CMS, theme, visible plugins) and email (MX, SPF, DMARC).
Is it free? Do I have to leave my email?
Yes, completely free and with no obligation. Email is optional: the report appears right on the page and has a permanent link you can copy. If you want, you also get it by email, with the scores, the list of problems and PageSpeed, to forward to your team or your current provider.
What do you do with my email, if I leave it?
We send you the report, including the PageSpeed part if it was not ready yet, and we may contact you once if you want to discuss the results. We do not subscribe you to anything and we do not pass the address on.
Do you check any site or only WordPress?
Any public website. The WordPress checks (XML-RPC, user enumeration, version, plugins) only appear if we detect WordPress; everything else applies to any platform: Shopify, Wix, Webflow, custom stores, web apps.
How accurate is the score?
The score summarises the technical state of the checked page, with heavier weights for serious problems (unencrypted site, expired certificate, noindex, exposed users). It is a good starting point, not a full audit: a real audit goes into every page, the database, the server configuration and the access logs.
Do you check the other pages of the site too?
The tool checks the page you enter, usually the homepage. You can run any other address separately, for example a product page or an article. The full audit we perform covers every page in the sitemap.
Can you fix what you find?
Yes. Most problems in the report are resolved in the first month of WordPress maintenance; for other platforms we make a one-off offer. Send us the report link and we tell you concretely what we would do first.
Want more than one page?
The full audit covers every page in the sitemap, the database, the server configuration and the access logs, with an action plan ordered by impact.