Free website audit

Put the address in the box at the top of this page. It is a free website check that runs 28 tests in about twelve seconds - speed, page weight, mobile, HTTPS and the certificate, security headers, titles and headings, image alt text, robots.txt, sitemap, structured data, whether AI assistants can read the page, and Google PageSpeed - and gives you a score out of 100 with every result explained. No signup, no card, nothing to install.

Yes. No card, no signup, no trial that turns into a bill. We run it because a site that needs work is how most of our clients find us, and because the report is useful even if you never reply.

About twelve seconds for the site itself. Google’s PageSpeed measurement takes longer and arrives on its own a few seconds later, so the rest of the report is readable while it finishes.

It is weighted: speed, mobile readiness and HTTPS count for more than a missing canonical tag. Above 80 means nothing technical is standing in the way. Between 50 and 80 usually means two or three real problems. Below 50 usually means the site is costing you visitors.

Yes, as a PDF, from the button under the result. It carries the full checklist and our contact details, so you can forward it to a developer or a partner without explaining where it came from.

The report is kept for 60 days so the PDF link keeps working, then deleted. Your email, name and phone number are used to send the report and to reply, and for nothing else — no list, no resale, never passed on. Site analytics are separate and ordinary: we use Google Analytics to see which pages get read, and Google may connect a visit to a signed-in Google account for its own advertising, as it does on most of the web. That covers page visits, not the details you typed into the form.

We will tell you what we would fix first and roughly what it costs, once, if you ask. If you would rather take the report to somebody else, that is a perfectly good outcome and the PDF is written so you can.

Yes, and it is worth running on a product page as well as the homepage — product pages are usually the heaviest and the slowest on a Pakistani store.

Run the audit above — the AI group answers it directly. It requests your page pretending to be GPTBot, ClaudeBot and PerplexityBot and reports whether your server let each of them through. Reading your robots.txt is not enough, because a firewall can block those crawlers regardless of what robots.txt says. That is exactly what we found on our own site: robots.txt welcomed them, the firewall answered 403, and Claude could not read a single page.

Usually a default you never chose. Cloudflare, some security plugins and several hosting panels ship with AI-crawler blocking switched on, and it does not announce itself. Your pages stay perfectly visible to you and to Google while ChatGPT and Claude are quietly turned away. The only way to know is to ask as the crawler.

It is a plain text file at the root of your site — yoursite.com/llms.txt — that tells AI assistants what your business does and which pages matter, in ordinary language. Nothing enforces it and no assistant requires it, so "need" is too strong. It takes an afternoon, it costs nothing, and when an assistant is deciding what to say about you it is better that it reads your summary than assembles one from whatever it happened to crawl.

SEO gets your page into a list of blue links. AEO, answer engine optimisation, gets your answer used when somebody asks a question rather than searching. GEO, generative engine optimisation, gets your business named inside an answer an AI writes. They are not three separate jobs — all three need pages an assistant can actually fetch, and facts marked up so they can be lifted without guessing. The audit checks both of those.

The audit checks four headers: HSTS, which stops the browser ever using an insecure connection to your site; X-Content-Type-Options, which stops a file being treated as something it is not; clickjacking protection, which stops your site being framed inside someone else's; and Referrer-Policy, which controls what your visitors' addresses leak to other sites. They are free, they are set once on the server, and almost no small business site has any of them.