HTTP 2001778 ms response219.3 KB10,197 words5 images4 links
67/100
Needs Improvement
Executive Summary
This audit evaluated 29 signals across on-page SEO, technical SEO, performance, security, mobile rendering, structured data and E-E-A-T trust signals.
29
Total checks
13
Passed
0
Critical
16
Warnings
Category Scores
Technical SEO
76/100
NEEDS WORK
On-Page SEO
76/100
NEEDS WORK
Content
100/100
GOOD
Performance
92/100
GOOD
Security
60/100
NEEDS WORK
Mobile & UX
100/100
GOOD
E-E-A-T
10/100
POOR
Structured Data
25/100
POOR
PageSpeed Insights (lab)
Mobile
87
Perf
91
A11y
0
BP
100
SEO
LCP
2.9 s
CLS
0
TBT
90 ms
FCP
1.4 s
Desktop
74
Perf
91
A11y
0
BP
100
SEO
LCP
7.1 s
CLS
0
TBT
0 ms
FCP
0.4 s
Issues & Findings
Every issue includes the problem, why it matters, and a concrete fix.
On-Page SEO (3 issues)
WARNINGMeta description too long (170 chars)⏱ 10 min
ProblemMeta description is longer than 160 characters.
Why it mattersGoogle truncates descriptions around 160 characters; the most important sentence ends up clipped.
How to fixTrim the description to ≤160 characters. Front-load the value prop and keyword; cut adjectives.
WARNINGMissing Open Graph tags⏱ 20 min
ProblemNo Open Graph meta tags (og:title, og:description, og:image) in the page <head>.
Why it mattersWithout OG tags, links shared to Facebook, LinkedIn, Slack, Discord, and most chat apps render as bare URLs with no preview card. That destroys social click-through.
How to fixAdd og:title, og:description, og:image (1200×630 PNG/JPG), og:url, og:type to every shareable page.
WARNINGMissing Twitter card tags⏱ 10 min
ProblemNo Twitter Card meta tags (twitter:card, twitter:title, twitter:image).
Why it mattersWithout these, links shared on X render as bare URLs. Twitter falls back to OG tags for some fields but not all.
How to fixAdd twitter:card="summary_large_image", twitter:title, twitter:description, twitter:image. You can reuse the OG image if it is 1200×630.
Technical SEO (3 issues)
WARNINGMissing canonical tag⏱ 15 min
ProblemNo <link rel="canonical"> in the page <head>.
Why it mattersAny URL variant (UTM parameters, trailing slash, www vs apex, http vs https) can be treated by Google as a separate page, splitting link equity and risking duplicate-content demotion.
How to fixAdd <link rel="canonical" href="…"> pointing at the preferred absolute URL of this page. For paginated/filtered pages, point at the canonical (unfiltered) version.
WARNINGrobots.txt not found⏱ 20 min
ProblemNo /robots.txt file at the site root, or it returns a non-200 status.
Why it mattersrobots.txt is the first thing every crawler requests. A missing file means crawlers have no policy hint and no Sitemap: directive — both costing crawl budget and discovery speed.
How to fixCreate /robots.txt with at minimum: `User-agent: *` + `Allow: /` (or specific Disallows for app/admin paths) + `Sitemap: https://yourdomain.com/sitemap.xml`.
WARNINGsitemap.xml not found⏱ 1 hr
ProblemNo /sitemap.xml at the site root, or it returns a non-200 status.
Why it mattersA sitemap is the most reliable way to tell Google which URLs to crawl, how often, and when they were last updated. Without one, discovery relies on link-following and is slower and incomplete.
How to fixGenerate /sitemap.xml listing every indexable URL with <lastmod>. Reference it in robots.txt with `Sitemap:`. Submit it in Google Search Console.
Performance (1 issue)
WARNINGResponse compression not detected⏱ 20 min
ProblemNo Content-Encoding header (gzip, br, deflate) on the page response.
Why it mattersWithout compression, HTML/CSS/JS payloads are 3–5× larger than needed — slower TTFB, slower LCP, and wasted bandwidth.
How to fixEnable gzip and/or brotli at the web server level (nginx: `gzip on;` + `brotli on;`; Apache: mod_deflate / mod_brotli; Cloudflare: enabled by default).
Security (5 issues)
WARNINGMissing X-Frame-Options header⏱ 30 min
ProblemA security or SEO header is missing from the page response.
Why it mattersModern browsers and crawlers expect security headers (HSTS, CSP, X-Frame-Options, X-Content-Type-Options, Referrer-Policy, Permissions-Policy). Missing them weakens defense-in-depth, sometimes blocks rich integrations, and signals to crawlers that the site isn't maintained.
How to fixAdd the named header in your web server config (nginx `add_header`, Apache `Header set`) or application middleware. Start with: `Strict-Transport-Security: max-age=31536000; includeSubDomains`, `X-Content-Type-Options: nosniff`, `Referrer-Policy: strict-origin-when-cross-origin`.
WARNINGMissing Strict-Transport-Security header⏱ 30 min
ProblemA security or SEO header is missing from the page response.
Why it mattersModern browsers and crawlers expect security headers (HSTS, CSP, X-Frame-Options, X-Content-Type-Options, Referrer-Policy, Permissions-Policy). Missing them weakens defense-in-depth, sometimes blocks rich integrations, and signals to crawlers that the site isn't maintained.
How to fixAdd the named header in your web server config (nginx `add_header`, Apache `Header set`) or application middleware. Start with: `Strict-Transport-Security: max-age=31536000; includeSubDomains`, `X-Content-Type-Options: nosniff`, `Referrer-Policy: strict-origin-when-cross-origin`.
WARNINGMissing X-Content-Type-Options header⏱ 30 min
ProblemA security or SEO header is missing from the page response.
Why it mattersModern browsers and crawlers expect security headers (HSTS, CSP, X-Frame-Options, X-Content-Type-Options, Referrer-Policy, Permissions-Policy). Missing them weakens defense-in-depth, sometimes blocks rich integrations, and signals to crawlers that the site isn't maintained.
How to fixAdd the named header in your web server config (nginx `add_header`, Apache `Header set`) or application middleware. Start with: `Strict-Transport-Security: max-age=31536000; includeSubDomains`, `X-Content-Type-Options: nosniff`, `Referrer-Policy: strict-origin-when-cross-origin`.
WARNINGMissing Content-Security-Policy header⏱ 30 min
ProblemA security or SEO header is missing from the page response.
Why it mattersModern browsers and crawlers expect security headers (HSTS, CSP, X-Frame-Options, X-Content-Type-Options, Referrer-Policy, Permissions-Policy). Missing them weakens defense-in-depth, sometimes blocks rich integrations, and signals to crawlers that the site isn't maintained.
How to fixAdd the named header in your web server config (nginx `add_header`, Apache `Header set`) or application middleware. Start with: `Strict-Transport-Security: max-age=31536000; includeSubDomains`, `X-Content-Type-Options: nosniff`, `Referrer-Policy: strict-origin-when-cross-origin`.
WARNINGMissing Referrer-Policy header⏱ 30 min
ProblemA security or SEO header is missing from the page response.
Why it mattersModern browsers and crawlers expect security headers (HSTS, CSP, X-Frame-Options, X-Content-Type-Options, Referrer-Policy, Permissions-Policy). Missing them weakens defense-in-depth, sometimes blocks rich integrations, and signals to crawlers that the site isn't maintained.
How to fixAdd the named header in your web server config (nginx `add_header`, Apache `Header set`) or application middleware. Start with: `Strict-Transport-Security: max-age=31536000; includeSubDomains`, `X-Content-Type-Options: nosniff`, `Referrer-Policy: strict-origin-when-cross-origin`.
Structured Data (1 issue)
WARNINGNo structured data (JSON-LD) found
Add Schema.org JSON-LD markup to enable rich results in Google.
E-E-A-T (3 issues)
WARNINGNo About page detected⏱ 2 hrs
ProblemNo /about, /about-us, or equivalent page linked from the homepage.
Why it mattersGoogle's Quality Raters Guidelines explicitly look for About pages to assess Expertise, Authoritativeness, and Trust (E-E-A-T). YMYL (Your Money or Your Life) topics especially need this.
How to fixCreate an About page with: who the company/author is, what they do, where they're based, who the founders are (with photos and bios), and how to contact them.
WARNINGNo Contact page detected⏱ 30 min
ProblemNo /contact or equivalent page linked from the homepage.
Why it mattersA discoverable contact path is an E-E-A-T trust signal AND a legal requirement in many jurisdictions (UK, EU, AU). Its absence flags the site as low-trust.
How to fixAdd a Contact page with a real email address, phone (if applicable), and physical/registered business address. Link it from the main nav or footer.
WARNINGNo Privacy Policy detected⏱ 2 hrs
ProblemNo /privacy, /privacy-policy, or equivalent page linked from the homepage.
Why it mattersA privacy policy is legally required if you collect any personal data (cookies count) under GDPR, CCPA, and similar. Its absence is both an E-E-A-T negative and a regulatory risk.
How to fixPublish a Privacy Policy covering: what data you collect, why, how long you keep it, who you share it with, and how users exercise their rights. Link it from the footer.