Security headers check
HSTS, Content-Security-Policy, X-Content-Type-Options, frame protection, Referrer-Policy and mixed content on one page.
Public pages only, one page per scan. First results in a few seconds; the accessibility check takes 10–20 s and the speed test up to 40 s. Reports stay unlisted unless a page has been scanned several times.
What this check looks at
We check that the page is served over HTTPS with HSTS, that the redirect chain is short, that no http:// scripts, images or frames are embedded in an https page, and that Content-Security-Policy, X-Content-Type-Options, frame protection, Referrer-Policy and Permissions-Policy headers are set. We also report compression, caching and time to first byte.
Open Graph preview
See how a link looks when shared on Facebook, LinkedIn, X, Slack and iMessage, and what to fix in your og: tags.
Google SERP preview
See your title and meta description the way Google shows them, with length checks and a fix list.
Structured data checker
Find and validate the JSON-LD on a page, the way the retired Google tool did.
Canonical checker
Check the canonical link on a page: present, absolute, and pointing at the right URL.
Sitemap checker
Find the XML sitemap through robots.txt or /sitemap.xml and confirm it answers.
Hreflang checker
Check that hreflang alternates include a self-reference and x-default.
Favicon checker
Confirm the icon Google shows next to your result exists.
X (Twitter) card validator
Render the X card for a link and check twitter:card, image size and fallbacks.
Core Web Vitals test
Lab metrics from Google's PageSpeed service and field data from real Chrome users for one page.