Every check your website should pass, in plain English.

A home inspection for your website. Thirty-four checks across conversion, security, email, search and speed. Results on screen in about a minute. Within one business day, an email from Blake telling you which two matter and which twenty don't.

Free for a limited timeNo passwordsNothing changes on your siteForward it to anyone

This is what you'll see. A real one.

real run · 2026-09-20 · client withheld · results unedited, current wording
Score 88/100

1 failing 5 warning 23 passing 29 checks · 6 pages

How customers get in touch

4 pass · 1 warn

PASS A way to get in touch. Across the 6 pages I checked there are 4 forms and 0 phone numbers, so people can reach you. Nothing to do.

PASS How the form sends what people type. Your forms send messages straight to you, not through the visitor's email app. Nothing to do.

PASS Can you reply to what comes in. At least one form asks for an email address, so you can reply to every enquiry. Nothing to do.

PASS The contact page does its job. Your contact page has a real way to reach you. Nothing to do.

WARN How easy the form is to find. Your enquiry form is on only one of the pages I checked. Someone reading about a service has to go hunting for a way to ask, and most people will not bother.

Security

5 pass · 1 warn

PASS Encrypted connection. Your site is encrypted, so browsers show it as secure. Nothing to do.

PASS Insecure addresses redirect. Anyone who uses the old http address is sent to the secure version. Nothing to do.

PASS HTTPS enforced for return visits. Your site tells browsers to always use the secure version. Nothing to do.

PASS Cannot be embedded by someone else. Other websites cannot show your site inside their own pages. Nothing to do.

WARN Browser protection headers. 1 of the 3 standard browser protection settings are missing or too loose: content-security-policy. They are worth switching on, but they are rarely why a small site gets hurt.

PASS Filtering in front of the site. Traffic passes through Cloudflare first, which filters out spam and attack traffic before it reaches your site. Nothing to do.

Email

2 pass · 1 fail

PASS Mail delivery configured. Your domain has 3 mail server records, so email sent to your address arrives. Nothing to do.

PASS Approved senders published. Your domain lists who is allowed to send email as you (an SPF record). Nothing to do.

FAIL Impersonation policy. Your domain has no DMARC record, the setting that tells Gmail and Outlook what to do with fake email sent in your name. Without it, a scammer can email your customers as you, and your real invoices are more likely to land in spam.

Search and AI visibility

10 pass · 1 warn

WARN Page title. Your homepage title, the headline Google shows for you, is 83 characters. Google shows about 60, so a title this long wastes the first thing searchers read.

PASS Search result description. Your homepage search description is 135 characters, a length Google shows in full. Nothing to do.

PASS Main heading. Your homepage has one main heading, which is right. Nothing to do.

PASS Canonical address. Your homepage names its preferred address, so Google does not split credit between copies. Nothing to do.

PASS Visible to search engines. Nothing on your homepage tells Google to skip it. Nothing to do.

PASS Crawler instructions. Your site has a robots.txt file telling search engines what they may read. Nothing to do.

PASS Sitemap. Your site has a sitemap, a list of your pages for Google. Nothing to do.

PASS Instructions for AI assistants. Your site has an llms.txt file summarising your business for AI assistants. Nothing to do.

PASS Structured data. Your homepage tells Google what kind of business you are (structured data). Nothing to do.

PASS Built for phones. Your homepage is set up to fit phone screens. Nothing to do.

PASS Image descriptions. I found no images on your homepage. Nothing to do.

Speed

2 pass · 2 warn

PASS Server response time. Your server started answering in 230 ms, which feels instant. Nothing to do.

WARN Homepage size. Your homepage code is 117 KB before images, fonts and scripts. A lean page is under 100 KB; this is heavier, but rarely the reason a site feels slow.

WARN Scripts on the homepage. Your homepage loads 18 scripts (small programs such as chat widgets and tracking tools). Each one is work a phone does before the page responds, and old tracking tools nobody uses are the usual cause.

PASS Caching instructions. Your site tells browsers how long they can reuse your pages, so return visits load faster. Nothing to do.

5 checks did not run because there was nothing to check: this site publishes no phone number, for example. Skipped, not failed.

The part that isn't automated

The email is the point. Automated checks are cheap and everywhere. What almost nobody does is read your specific report and tell you, in one honest email, which two things matter and which twenty do not. That is the part Blake does personally, within one business day.

All 34 checks. Nothing hidden.

Between 26 and 30 run on any given site. A check with nothing to check is skipped, not failed. Any term you do not recognise is explained in the free plain-English glossary.

Conversion

9
  • A way to get in touch
  • How the form sends what people type
  • Where your enquiries are delivered
  • Can you reply to what comes in
  • Phone number tappable on a mobile
  • One number, everywhere
  • The contact page does its job
  • Form fields are labelled
  • How easy the form is to find

Security

7
  • Encrypted connection
  • Insecure addresses redirect
  • HTTPS enforced for return visits
  • Cannot be embedded by someone else
  • Browser protection headers
  • Runs on WordPress
  • Filtering in front of the site

Email

3
  • Mail delivery configured
  • Approved senders published
  • Impersonation policy

Search

11
  • Page title
  • Search result description
  • Main heading
  • Canonical address
  • Visible to search engines
  • Crawler instructions
  • Sitemap
  • Instructions for AI assistants
  • Structured data
  • Built for phones
  • Image descriptions

Speed

4
  • Server response time
  • Homepage size
  • Scripts on the homepage
  • Caching instructions

What happens after you check out

  1. 01
    You check out, free

    The form sends you to Stripe with code FREEAUDIT already applied, so the total shows $0 and Stripe does not ask for a card. The free offer is temporary. Card details never touch this site.

  2. 02
    The audit runs

    It starts the moment checkout completes and reads your site the way a visitor and a search engine would. Nothing is installed and nothing is changed.

  3. 03
    The report appears

    About a minute later the report is on screen: every check, what was actually found, and a link to a plain-English explainer for any term you do not recognise.

  4. 04
    Blake reads it and emails you

    Within one business day you get a personal email from Blake about what we would fix first and what we would ignore. That part is the real value.

Who this is for

Get it if

  • You pay someone to look after the website and cannot tell what they check
  • You are about to hire a provider and want a baseline first
  • Leads dropped and nobody can tell you whether the site is the reason
  • You inherited a site from a previous owner, agency, or employee
  • You just want one honest opinion from someone who is not selling you a rebuild

Skip it if

  • Your site is not live yet, because there is nothing public to read
  • You already know what is broken and just want it fixed
  • You need a security penetration test or a legal or accessibility review
  • You want keyword research, rankings, or a competitor teardown
  • You want someone to log into your site and change things today

If the second list is you, book a call instead.

What it does not include

We would rather lose the sale than have you expect something that is not in the box. This is the whole list of what the Foundation Audit does not do.

  • No PageSpeed or Lighthouse score, and no Core Web Vitals field data from real visitors
  • No competitor analysis, keyword research, or ranking report
  • No full accessibility audit. It checks homepage image descriptions and nothing more
  • No security penetration test, and no check of anything behind a login
  • No page-by-page crawl. The checks read your homepage and your domain records
  • No PDF. The report is a web page, and the follow-up is an email
  • No fixes. The audit tells you what is there, it does not change anything

Common questions

What do I actually get?

An automated report built from 34 checks across how people get in touch, security, email, search, and speed. Between 26 and 30 of them run on a typical site, because a check with nothing to check is skipped, not failed. It appears on screen about a minute after checkout. Every finding links to a plain-English explainer in the glossary so you can understand it without a developer. Then Blake reads your report personally and emails you within one business day with what we would fix first.

How long does it take?

The report is usually on screen within about a minute of checkout. Blake's follow-up email arrives within one business day.

Do you need my password or logins?

No. The audit only reads the public version of your website and your public domain records. There is nothing to install, nothing to grant access to, and nothing is changed on your site. Never send anyone a password to get a website checked.

Is it really free?

For now, yes. This is a temporary offer. Press the button and code FREEAUDIT is already applied on the Stripe checkout page, so the total shows $0 and Stripe does not ask for a card. There is nothing to type.

What if the audit comes back clean?

Then you have proof, in writing, that the basics are handled. That is worth knowing, especially if you pay someone else to look after the site. Blake will still email you and tell you honestly that there is nothing urgent to do.

Do you fix what the audit finds?

Not as part of the audit. The audit tells you what is there. If you want the fixes done, that is a separate project (the Foundation, on the services page), and we will tell you plainly whether it is worth paying us for or whether it is a ten minute job your current provider should do.

Rather have a person look first? Blake will.

Send the address and Blake will go through the site personally and email you what stands out. No checkout, no plugin, no call booked. If the full report is the right next step afterwards, we will say so, and if it is not, we will say that instead.

Wired Builder on Google

This service is listed on our Google Business Profile, with the rest of what we do. Read the reviews there. If we have worked together, a review is the single most useful thing you can leave us.

See our Google reviews ↗ Leave a review ↗

Stop guessing. Start with the foundation.

You will know what your site is telling search engines, whether your email can be forged, whether the connection is safe, and how heavy the homepage really is. And you will have Blake's read on it in writing.

Rather check it yourself first? The warning signs guide walks you through twelve checks you can do yourself, for free, in about ten minutes.