M365AILasith IyanAI Consultant to the Estate
Free  ·  About 30 Seconds  ·  No Email

How Healthy Is Your Website, Really?

One score out of a hundred across security, performance, search and email authentication, and a plain-English list of what to fix first, ranked by how many points each fix is worth. Enter an address below.

4
Weighted categories
40+
Individual checks
~30 sec
Including a mobile Lighthouse run
0
Emails required
What Gets Checked

Four Categories, One Weighted Score

Every check passes, earns half credit, or fails, and carries a weight for how much it matters. Each category scores from zero to one hundred; the overall figure is their weighted average. The fix list is ordered by the points each change would add back.

CategoryWeightWhat it looks at
Security30%HTTPS and a valid certificate, the HTTP-to-HTTPS redirect, HSTS, Content-Security-Policy, clickjacking and MIME-sniffing protection, referrer and permissions policies, exposed software versions, mixed content, insecure forms, cookie flags, and security.txt.
Performance & Experience25%A mobile Lighthouse run through Google PageSpeed Insights: performance, accessibility and best-practice scores, Largest Contentful Paint, layout shift and blocking time, plus real-visitor responsiveness from the Chrome UX Report where the site has the traffic.
SEO & Sharing25%Status code, indexability, title and meta description, heading structure, mobile viewport, language, canonical URL, image alt text, Open Graph and X card previews, robots.txt, sitemap, and favicon.
Domain & Email20%SPF, DMARC and DKIM (the records that stop others sending email as you), DNSSEC, CAA, IPv6, domain expiry, and the registrar transfer lock.

Public data only. The check reads the page you enter, its response headers, robots.txt, sitemap and public DNS and registry records, the same things any visitor or attacker can see. It doesn't log in, crawl the whole site, or attempt anything intrusive, and results are held for ten minutes only so repeat checks are fast.

Running Microsoft 365? Check the Tenant Too

The same email authentication that protects your domain is one small part of Copilot readiness. The assessment covers the rest in four minutes.