Check your
website.
One address, the whole picture: security, speed, Google search, AI search, email and domain, contact and trust, scored out of 100 with a plain-English fix for every problem.
- Security
- Speed
- SEO
- AI search
- Email & domain
- Contact & trust
- PHP version
Free to use. No account needed. Only worried about PHP? Use the PHP vulnerability checker.
Your report
Based on what one page load shows: security, speed, search visibility, AI search, email and domain, contact and trust. Lighthouse numbers come from Google and don't change the score.
Top things to fix
Nothing to fix from what we can see. Nice site.
What we can tell about the site
Security
HTTPS and the certificate, the protective headers a browser honours, what the server reveals about itself, and whether its PHP version is affected by PHP2Shell.
Looks fine.
Speed
What the page's own markup says about load speed, then Google's Lighthouse run on a simulated phone.
Nothing to flag in the markup.
Lighthouse (mobile)
- LCP
- CLS
- INP
- Source
Search (SEO)
The basics Google reads first: title and description, headings, structured data, share cards, robots.txt and the sitemap.
Looks fine.
AI search (ChatGPT, Perplexity, AI Overviews)
Can AI assistants read and recommend the site? Whether robots.txt lets their crawlers in, whether the text is actually in the HTML, and whether there's structured, quotable content.
Looks fine.
Email & domain
Read from DNS and the public registry, nothing from the site: can someone send mail pretending to be you, and is the domain itself safe.
Looks fine.
Contact & trust
Can a visitor reach you, find you, and believe the business is current.
Looks fine.
Scores come from one page load and the HTML as served. Sites that build themselves in the browser can score lower than they deserve; a human look is the fix for that. Lighthouse figures are Google's, measured on a simulated phone.
What the colours mean
| Colour | What it means | Examples |
|---|---|---|
| Red — serious | Visitors see a warning, the site can be attacked, or Google can't index it. Fix these first. | No HTTPS, an invalid certificate, PHP at risk from PHP2Shell, a page marked noindex, a domain about to expire. |
| Yellow — fix soon or minor | Nothing is broken today, but it costs you trust, rankings, speed or email delivery. | Missing security headers, a server announcing its version, no DMARC record, a weak page title, slow loading. |
| Green — passes | We checked it and found nothing to fix. | A section with no findings, an AI crawler that robots.txt allows. |
About this check
The website checker loads your homepage the way a browser does (over https, then plain http if https fails) and reads what comes back: the headers, the HTML and the certificate. It looks at the first answer from http://your-site/ to see whether it redirects to https, fetches the three public files every search engine reads (robots.txt, sitemap.xml, llms.txt), looks up your domain's DNS and public registration record, and asks Google PageSpeed Insights for its Lighthouse run. Nothing is sent to your site beyond those ordinary requests: no login attempts, no form submissions, no probing, no scanning. If your homepage redirects to a different website, we stop and tell you, rather than follow it.
The health score is out of 100: each finding takes points off by how serious it is, with a cap per section so one weak area can't sink a site that's otherwise sound. How the score is calculated explains the exact weights. Because it reads only what the server sends, it can be wrong in both directions: a host that patched PHP without changing the version string still shows "at risk", and a site that paints its content with JavaScript can look thinner than it is.
Every finding links to a step-by-step guide. Browse them all in the website fix guides, or, if you'd like someone to just handle it, that's what we do.
Only need the PHP answer? The PHP vulnerability checker leads with the PHP2Shell verdict and the version your server reports, then shows the same health report underneath.
Common questions
Is the website checker free?
Yes. It's free, there's no account, and you can run it as often as you like within a fair-use limit. We keep the address you checked and its result for 90 days, and your name and email only if you ask us for help. See the privacy policy.
Does the checker scan or attack my website?
No. It makes one ordinary homepage visit like a browser, looks at the first answer from the plain-http address, reads robots.txt, sitemap.xml and llms.txt, looks up public DNS and registration records, and asks Google PageSpeed Insights to measure the page. It never logs in, submits forms or probes for weaknesses.
How is the health score calculated?
Every finding takes points off 100: 15 for a serious (red) problem, 6 for a fix-soon (yellow) one and 2 for a minor one. Each section has a cap (security 40, speed 20, SEO 20, AI search 10, email and domain 15, contact and trust 15), so one weak area can't sink an otherwise sound site. 80 and above is good, 60 to 79 is fair, and below 60 needs attention. How the score works goes through it in detail.
Why is my score different from Google Lighthouse?
Lighthouse measures speed, accessibility and a few SEO basics in a simulated browser. The health score covers six areas Lighthouse doesn't look at together, including email security, AI crawler access and domain expiry. We show Lighthouse's own numbers in the Speed tab, but they don't change the health score.
Can I check a website that isn't mine?
Use it on your own site or one you're responsible for, such as a client's. The terms of use ask you not to use it to harass anyone. Everything it reads is public, and it reads it the way any visitor's browser would.