Website health check
Enter an address and see in a minute what is in order on your site and what is worth fixing. Free, no sign-in.
Check a website
/ 100
Most important first
These are worth handling first. All other findings are below by area.
By area
For your developer
You can pass this list to your developer or maintainer as it is. It has the exact headers, values and fixes, and you do not need to understand them yourself.
What the check does not see
The check fetches the page once from our own server and does not affect your site. The checked domain, time and score are stored with us. The result stays cached for an hour; after fixes, press Check again.
Want us to fix the findings?
We go through the report with you and say what is worth fixing first. A site update, maintenance or a whole new site: we pick the scope that fits you.
What does the check look at?
- Encryption and protection. Whether HTTPS works, whether the unencrypted address redirects to the encrypted one, and whether the browser security headers are in place.
- Speed. Server response time, page size, the length of the redirect chain, image dimensions and the number of scripts.
- Findability. Title, description, main heading, language, mobile viewport, robots.txt and sitemap.
- Accessibility. Image alternative text, form field labels, link text and whether zooming is allowed.
- Privacy. Third-party services, tracking scripts, cookies before consent and where fonts come from.
- Software. The content management system and whether its version is exposed.
- Email protection. Whether the domain has SPF and DMARC records that stop forgeries sent in your name.
What does the check not see?
The check reads the page’s HTML and headers but does not run its JavaScript or render the page. Browser-measured performance scores, certificate validity and broken links are outside its scope. Accessibility is covered only at a basic level; a full assessment needs a manual review. These limits are also listed at the end of every result.
What happens to the data?
The check fetches the page once from our own server on Cloudflare’s EU network. The checked domain, time and score are stored with us so that we can see which sites are being checked. If you order the report by email, your address is used only to send the report, and a copy of the report comes to us. The details are in the privacy notice.