See your website the way a search engine does. Then fix what actually matters.

Enter any public website address. We check eight areas and return a score, the evidence behind it, and the order to fix things in. No account, no guesswork, and no AI deciding your grade.

Eight pillars, one score

Every scan reports the same eight areas, each weighted by how much it actually affects a site. Weights come from the live scoring registry, so what you read here is what the engine used on your report.

SEO — On-page optimisation and indexability: titles, descriptions, headings, canonical tags, sitemap, robots rules and internal linking.

Performance — Speed and Core Web Vitals: TTFB, page weight, compression, caching and render-blocking resources.

Security — Certificate and TLS, the six security headers, mixed content, HSTS, cookie flags and content security policy quality.

Accessibility — Alt attributes, form labels, landmarks, language declaration and heading order, plus axe-core violations where available.

Trust and content — Credibility signals: company identity, contact details, social profiles, reviews, authorship and content depth.

Hosting and DNS — Infrastructure: availability, DNS correctness, nameserver and address redundancy, CDN, DNSSEC, CAA and HTTP/3.

Email — Email authentication: SPF, DKIM, DMARC, MX, plus MTA-STS, TLS-RPT and BIMI.

AI readiness — Whether AI assistants can read the page and are permitted to: robots policy, extractability, content in raw HTML, structured data and attribution.

Local SEO — Conditional. Location signals for businesses with a physical address: NAP, opening hours, map and LocalBusiness schema. Skipped, and excluded from the score, for non-local businesses.

How the scan works

1. We fetch what a visitor would get A real request to your home page over HTTPS, then discovery of representative sub-pages through your sitemap and internal links. We respect robots.txt and identify ourselves honestly in the user agent.

2. We read the public record Public DNS for hosting and email, the certificate for the TLS chain, response headers for the security layer, and the served HTML for everything on-page. Where an external measurement such as PageSpeed is available, we add it and label it as such.

3. Deterministic rules score it Each check has a published threshold and weight. The same input always produces the same score, and every point is traceable to a named check. No model grades your website.

4. Findings are ordered by effort The report groups fixes by how much work they actually take — a header you can paste in a minute is not presented alongside a rendering-architecture change as though they were equivalent.

What we will not claim

We do not measure your rankings. Position data is personalised, localised and volatile; anyone selling you a single "your position" number from an anonymous scan is estimating.

We do not measure AI answer placement. We measure whether assistants can read your page and whether you permit them to. Whether a model cites you is not observable from outside.

We do not run a penetration test. The security pillar grades the hardening a browser can see and enforce, not the application behind it.

We do not certify accessibility. Automation catches a portion of WCAG violations. The report says "automated violations" because that is what it found.

Check one thing instead

If you have one specific question, these go straight to it — same engine, fewer distractions.

• Page speed and Core Web Vitals — LCP, INP, CLS, TTFB, resource weight, caching and compression, with field and lab kept apart.
• Security headers and SSL — CSP, HSTS, X-Frame-Options, certificate validity, TLS version, mixed content and cookie flags.
• Mobile-friendly test — Viewport tag, pinch-zoom, responsive CSS, and page weight and speed on a phone.
• Accessibility test — Image alt text, form labels, document structure and automated axe-core violations.
• Hosting and DNS checker — Nameservers, A and AAAA records, CDN fingerprints, DNSSEC, CAA, HTTP/3 and real availability.
• Email authentication test — Find out whether anyone can send mail impersonating your domain, and exactly what to publish to stop it.
• AI readiness test — Whether ChatGPT, Claude and Perplexity can read your site — and whether you are letting them.
• See all free tools

Frequently asked questions

Is the audit really free? Yes. No account, no email address and no card. Scans are rate-limited so the service survives automated traffic, but nothing is behind a payment.

Can I scan a website I don't own? Yes. Everything we read is public: the server's response, the served HTML, response headers, the TLS certificate and public DNS. Nothing requires proof of ownership because nothing reaches beyond what an ordinary visitor can see.

Do you use AI to score my site? No. Scoring is deterministic: published checks, published thresholds, published weights. The same input always yields the same score, and every point traces to a named check. Optional AI features exist in the admin panel for writing plans, but they never touch the score.

How is this different from PageSpeed Insights? PageSpeed measures performance for one URL. This covers eight areas including security headers, email authentication, DNS, accessibility, trust signals and AI readiness — and where PageSpeed data is available we include it and label its source rather than presenting a lab run as field data.

Is the whole site available in English? The tools, the audit and this page are. The knowledge library — the glossary, the long-form guides, the diagram gallery and the Academy — is written in Polish and has not been translated. We would rather say so than publish machine translations of 279 pages.

Looking for the knowledge base?

The glossary, guides, diagrams and Academy are published in Polish only. They are linked from the Polish site and deliberately have no English counterpart rather than a machine-translated one. Go to the Polish site