Speed, security, SEO and mobile, checked on one page of your site, plus known vulnerabilities (CVEs) in the software it shows. A score, and a one-line fix for every problem.
about a minute4 areasno AI guesswork
Recently checked
01What we check
We test your page as a phone and as a desktop: speed score, Core Web Vitals, page size and requests, and what to fix with the time or size it saves: images, blocking files, unused code, caching, compression and HTTP/2.
HTTPS, the certificate, old TLS versions and seven security headers, known vulnerabilities (CVEs) in the software your page shows, mixed content and cookie flags, your domain's expiry date, and the email records (SPF, DMARC) that stop others sending mail as your domain.
Title, description, headings, structured data, robots.txt, the sitemap (and whether the page is in it), broken links, 404 pages, one address for www and non-www, and anything that keeps the page out of search results.
The viewport tag, whether text is large enough to read on a phone, and how far the phone speed falls behind the desktop speed.
02How it works
Security, SEO and mobile basics appear within seconds.
We test the page's speed as a phone and as a desktop, and our test browser takes screenshots. This takes about a minute.
Every problem comes with a one-line fix and a link to how we can help. Email the report to yourself, or ask us to fix it.
We test your page as a phone and as a desktop, with the standard lab measurements: speed score, Largest Contentful Paint, layout shift and blocking time. Like any speed test, scores can differ by a few points from one run to the next. If the main test is unavailable, a backup test on a slower machine measures instead and the report says so; its speed scores can read lower.
From public databases, looked up on the day of the check for the software versions your page shows (for example in its server headers or WordPress's version tag): the NVD, OSV.dev (with the GitHub Advisory Database, CC BY 4.0) and CISA's Known Exploited Vulnerabilities catalog. We don't scan or test your site for them. Hosts often patch server software without changing its version number, so we ask you to check those with your host. This product uses the NVD API but is not endorsed or certified by the NVD.
The address you check (without anything after a "?") and the findings, for 90 days. The website's name (never its score) and its icon may appear in our list of recently checked websites, unless you tick "Leave my site off the public list". A report also links to other checks of the same page from the last 90 days, so you can see what changed; they show the website's results only, never who ran them, and a check with that box ticked is never shown in another report. If you ask for the report by email or press "I'm interested", we also keep your email address and note. We never store your IP address: limits and our visit count use a code that changes every day, and no cookies are set. The page uses Cloudflare Turnstile to keep robots out. Details are in our privacy policy.
We load one page like a visitor would, ask whether its links work (up to 50, once each) and read your domain's public DNS records. We don't crawl your site, scan ports, fill in forms or log in, and we don't keep copies of your pages. The speed test's screenshots are shown with your report for 24 hours and never saved.
No. Every finding is measured on your live page, and every fix is a written rule for that finding.