A home inspection for your website. Thirty-four checks across conversion, security, email, search and speed. Results on screen in about a minute. Within one business day, my email telling you which two matter and which twenty don't.
PASS A way to get in touch. Across the 6 pages checked there are 4 forms and 0 phone numbers.
PASS How the form sends what people type. Forms submit to a real address rather than handing off to the visitor's mail program.
PASS Can you reply to what comes in. At least one form collects an email address, so enquiries can be answered.
PASS The contact page does its job. The contact page carries a real way to get in touch.
WARN How easy the form is to find. A form appears on only one of the pages checked. Someone reading a service page has to go looking for a way to ask about it, and most people will not.
PASS Encrypted connection. The site loads over an encrypted HTTPS connection.
PASS Insecure addresses redirect. Visiting the unencrypted address sends the visitor to the secure one.
PASS HTTPS enforced for return visits. The site tells browsers to use HTTPS on every future visit.
PASS Cannot be embedded by someone else. Other websites are blocked from loading this site inside their own page.
WARN Browser protection headers. 1 of the 3 standard browser protection headers are missing: content-security-policy.
PASS Filtering in front of the site. Traffic passes through Cloudflare before it reaches the site, so bad requests are filtered out on the way in.
PASS Mail delivery configured. The domain publishes 3 mail server records, so email addressed to it has somewhere to land.
PASS Approved senders published. The domain publishes an SPF record naming who is allowed to send email as it.
FAIL Impersonation policy. The domain publishes no DMARC policy, so mail providers are given no instruction about forged email using this name.
WARN Page title. The homepage title is 83 characters. Google shows roughly 60 before cutting it off.
PASS Search result description. The homepage description is 135 characters. Roughly 70 to 160 shows in full.
PASS Main heading. The homepage has exactly one main heading.
PASS Canonical address. The homepage names its own preferred address, so duplicates do not compete with it.
PASS Visible to search engines. Nothing on the homepage tells search engines to skip it.
PASS Crawler instructions. The site publishes a robots file telling crawlers what they may read.
PASS Sitemap. The site publishes a sitemap, so search engines are handed a list of its pages.
PASS Instructions for AI assistants. The site publishes an llms.txt file summarising itself for AI assistants.
PASS Structured data. The homepage carries structured data telling search engines what kind of thing this business is.
PASS Built for phones. The homepage tells phones how to size the page.
PASS Image descriptions. No images were found in the homepage markup.
PASS Server response time. The server took 230 ms to start responding. Under 500 ms feels instant; over 1200 ms is felt as a wait before anything appears.
WARN Homepage size. The homepage markup is 117 KB before images, fonts and scripts. A lean page is under 100 KB.
WARN Scripts on the homepage. The homepage loads 18 script tags. Each one is work the phone does before the page is usable.
PASS Caching instructions. The site tells browsers and networks how long they may reuse the page.
The email is the point. Automated checks are cheap and everywhere. What almost nobody does is read your specific report and tell you, in one honest email, which two things matter and which twenty do not. That is the part I do myself, within one business day.
Between 26 and 30 run on any given site. A check with nothing to check is skipped, not failed. Any term you do not recognise is explained in the free plain-English glossary.
The form sends you to Stripe. If you have a discount code, you enter it there. Card details never touch this site.
It starts the moment payment clears and reads your site the way a visitor and a search engine would. Nothing is installed and nothing is changed.
About a minute later the report is on screen: every check, what was actually found, and a link to a plain-English explainer for any term you do not recognise.
Within one business day you get a personal email from me about what I would fix first and what I would ignore. That part is the real value.
If the second list is you, book a call instead.
I would rather lose the sale than have you expect something that is not in the box. This is the whole list of what the Foundation Audit does not do.
Send me the address and I will go through the site myself and email you what stands out. No payment, no plugin, no call booked. If the paid report is the right next step afterwards, I will say so, and if it is not, I will say that instead.
This service is listed on our Google Business Profile, with the rest of what we do. Read the reviews there. If we have worked together, a review is the single most useful thing you can leave us.
You will know what your site is telling search engines, whether your email can be forged, whether the connection is safe, and how heavy the homepage really is. And you will have my read on it in writing.
Not ready to pay? The warning signs guide walks you through twelve checks you can do yourself, for free, in about ten minutes.