Audit any website in seconds

Browsers mark sites without HTTPS as “Not secure”, and Google prefers secure pages.

The homepage must answer quickly with a normal page so people and search engines can see it.

Visitors and old links that use http:// should land on the secure https:// version.

The site with and without www should end on the same address, so links and ranking signals aren’t split in two.

A few response headers protect visitors from common attacks like clickjacking and protocol downgrades.

An https page that loads images or scripts over http:// gets warnings or broken parts in browsers.

If the homepage tells search engines not to index it, it won’t show up in Google.

robots.txt tells search engines what they may crawl and where your sitemap is.

A sitemap lists your pages so search engines find new and updated ones faster.

The title and meta description are what people see in Google’s results before they click.

A canonical link tells search engines which address is the main one, so duplicates don’t compete.

Structured data (JSON-LD) helps Google understand the site and can add rich results like site name and FAQs.

Pages that don’t exist should answer “404 Not Found”, or Google may index empty pages (“soft 404s”).

A meta refresh redirect is slow and confusing for search engines; a server redirect is better.

Open Graph tags decide the title, text and image shown when someone shares the site on X, LinkedIn, WhatsApp or Facebook.

og:url tells social networks the main address of the page, so shares and likes count together.

A site name lets Google and social apps show your brand instead of the bare domain.

The small icon shown in browser tabs, bookmarks and Google’s mobile results.

The lang attribute tells browsers and screen readers the page’s language, and helps translation and search.

Declaring UTF-8 makes sure accents, emoji and other languages display correctly.

Without a viewport tag, phones show the desktop layout zoomed out and Google treats the page as not mobile-friendly.

People with poor eyesight need to zoom in; blocking it fails accessibility guidelines.

Compressing pages (gzip or Brotli) makes them several times smaller and faster to load.

Heavy HTML slows down the first view of the page, especially on phones.

A privacy policy is required by law in many countries (GDPR, DPDP) and by Google’s ad and login services.

A visible way to contact you builds trust with visitors and with Google’s quality raters.

SPF and DMARC records stop others from sending email as your domain, and help your own email reach the inbox.

MX records say which server receives email for the domain, so people can email you at it.