| Free tool
Free website audit
Put your address in below. In about twelve seconds you get a score out of 100 and the full list of what is right and what is not — speed, mobile, security, search, and Google’s own PageSpeed measurement. Then download it as a PDF and keep it. No signup, no card, nothing to install.
| What it checks
Twenty-eight checks, in five groups.
Not a grade out of ten with no working. Every check says what it found, in words you can act on or hand to whoever built the site.
How fast it really is
Time to first byte, how long the page takes to finish, total weight, how many files have to load, whether compression and HTTP/2 are on, and Google’s own PageSpeed score for a phone.
HTTPS, and whether it is done properly
The certificate and how long it has left, whether HTTPS is forced, whether anything on the page still loads insecurely, and the four security headers almost no small business site sets.
What Google can see
Title, description, headings, alt text, canonical tag, language, robots.txt, sitemap and structured data.
Whether ChatGPT and Claude can read you
We ask for your page as GPTBot, ClaudeBot and PerplexityBot and report anyone who is turned away, look for an llms.txt, and check whether your markup lets an assistant quote you rather than just find you.
The things that are simply missing
Mobile viewport, the social preview card, favicon, whether anything is measuring your visitors at all, and whether your CMS is announcing its version number to the internet.
| The AI checks
The group nobody else runs — and why it now matters.
People have started asking ChatGPT, Claude and Gemini for recommendations instead of typing into Google. A site those assistants cannot read is a site they cannot recommend, and almost nobody is checking for it.
Can AI assistants actually reach your site?
This is the check that surprises people, so it is worth explaining exactly how it works. We do not read your robots.txt and take its word for it. We ask for your page three times, pretending to be GPTBot, ClaudeBot and PerplexityBot, and report what your server actually said to each one.
That distinction matters because the two can disagree. It happened on this very site. Our robots.txt welcomed every AI crawler, and our firewall was quietly answering 403 to GPTBot, ClaudeBot and Common Crawl anyway — a setting switched on by default that nobody had looked at. Claude could not read a single page of ours. We only found it by asking as the crawler, which is why this check exists.
robots.txt asks for AI crawlers to be blocked, that is a decision somebody made and the report says so. If it does not, something else is doing it without your knowledge — usually a firewall, a security plugin, or a hosting default. The full explanation, and how to fix each cause ↗Do you have an llms.txt?
A small text file at the root of your site that tells AI assistants, in plain language, what your business does and which pages matter. It is new, most sites do not have one, and it costs an afternoon. Think of it as a sitemap written for a reader rather than a crawler.
Can an assistant quote you, or only find you?
There is a real difference. Being found needs your pages to be readable. Being quoted needs your facts to be machine-readable — your business details marked up as an Organization, and your questions and answers marked up as an FAQ. Without that, an assistant asked "who builds websites in Lahore" has to infer everything about you from prose, and it will usually pick the business that made it easy instead.
- SEO gets you into a list of blue links.
- AEO — answer engine optimisation — gets your answer used when someone asks a question instead of searching.
- GEO — generative engine optimisation — gets your business named inside an AI-written answer.
- All three rest on the same thing: pages an assistant can fetch, and facts it can lift without guessing.
| What you get
A score, a list, and a PDF.
A score out of 100
Weighted, so the things that cost you customers count for more than the things that only tidy the code.
Every check, with the reason
Marked clean, worth a look, or to fix — each with what we actually found on your page.
A PDF you can keep
The whole report as a file, carrying our name and details. Forward it to your developer, your partner, or whoever asks why the website needs work.
A reply from a person
We get the same report. If you want, we come back with the two things worth fixing first, what they would cost, and what they are worth.
| Reading the result
What to fix first, in the order that pays.
A list of twenty-eight findings is only useful if you know which three matter. This is the order we would work in, and it is the same order whether we do it or you hand the report to someone else.
Anything marked "to fix" in Security
No HTTPS, an expired certificate or mixed content means browsers put a warning in front of your site. Nothing else you do matters while a visitor is being told your site is not safe. This is usually free to fix and takes an afternoon.
A broken or missing form
Not on the checklist, because no external tool can test it — but send yourself one enquiry through your own form before you do anything else on this list. A form that silently stopped sending is the most expensive fault a website can have, and it never announces itself.
Page weight and speed
Almost always images that were never compressed. On mobile data in Pakistan this is the difference between a visitor waiting and a visitor leaving, and it is usually the single biggest score gain available.
Title and meta description
These are what Google prints in the results. Twenty minutes of writing, no developer needed, and it changes how many people click a ranking you already have.
The AI group
If assistants are being turned away, that is one setting. If the markup is missing, that is a day. Neither is urgent this week, and both are getting less optional every month.
Everything else
Canonical tags, favicons, language attributes and the rest are real, and they are tidying. Do them when the four above are done, not before.
| Honestly
What this is not.
It is one page, checked the way a visitor would open it. It is not a crawl of your whole site, it does not read your analytics, and it cannot tell you whether your prices are right or your photographs are good.
- It checks the page at the address you give it, not every page you have.
- A high score does not mean the site sells. It means nothing technical is standing in the way.
- A low score is not an emergency. Most of it is usually two or three fixes.
- We keep the report for 60 days so the PDF link keeps working, then it is deleted.
| After the audit
If you want it fixed, that is what we do.
Core And Solutions is a website studio in Lahore. 300+ websites built, and 22 of them live for anyone to open.
Would rather we just looked at it?
Send us the address on WhatsApp and we will run it ourselves and reply with what we would fix first.