Most important first.
Security headers
Domain & Security
Technical
Your site sends 2 of the 5 security headers we look for; missing: x_frame_options, x_content_type_options, referrer_policy.
Why it matters: These headers tell browsers how to protect visitors - for example, stopping your pages being framed inside someone else's site.
How to fix it: Ask your developer or host to add the missing headers in the server or hosting settings.
Email sender record (SPF)
Domain & Security
Moderate
Your domain does not publish an SPF record, so mail servers cannot tell which senders are genuinely yours.
Why it matters: Without it, your own emails are more likely to land in spam, and others find it easier to send mail that claims to come from you.
How to fix it: Add an SPF record in your domain's DNS settings; your email provider publishes the exact line to use.
Email protection policy (DMARC)
Domain & Security
Moderate
Your domain does not publish a DMARC record, which lets anyone send email that claims to come from your domain.
Why it matters: A DMARC policy tells receiving mail servers what to do with mail that fails your checks, which protects your customers and your inbox placement.
How to fix it: Add a DMARC record in your DNS, starting with a monitoring policy, then tighten it once your legitimate mail passes.
Structured data
AI Readiness
Moderate
Your homepage carries no structured data.
Why it matters: Structured data describes your business in a form machines read directly, which is how search engines and AI assistants pick up your hours, address and services.
How to fix it: Add schema.org markup to your homepage; many website builders and SEO plugins do this for you.
Business described as a business
AI Readiness
Moderate
Your structured data does not describe you as a business or organisation.
Why it matters: Marking up your business itself - name, address, phone, hours - is what lets AI assistants answer questions about you with confidence.
How to fix it: Add LocalBusiness (or Organization) markup with your name, address, phone number and opening hours.
Email address findable
AI Readiness
Quick
We found no email address on your homepage.
Why it matters: An address people can copy or tap is the simplest way for a customer to get in touch on their own time.
How to fix it: Add your contact email to the homepage as text or a mailto link.
Domain receives email
Domain & Security
Moderate
Your domain has no mail server set up, so email sent to an address at your domain will not arrive.
Why it matters: Customers who find your domain often guess an address like info@ at it; if nothing receives that mail, the enquiry is lost.
How to fix it: Set up email for your domain with a provider, or remove email addresses at this domain from your site and listings.