Website report
cromont.co.nz · Wellington
Assessed 18 October 2026. Part of our assessment of New Zealand websites.
Passes 17 of 22 checks
Checks we could not read are left out of the count.
The mirror
Cromont is a residential and commercial mortgage brokerage based in New Zealand. The firm works with various banks and lenders to help clients secure home loans, investment property financing, and other borrowing structures.
Most important first.
We found no phone number on your homepage - an AI assistant asked for your number would come up empty.
Why it matters: People and AI assistants look for a number to call; if it is not on the page, the call goes to someone else.
How to fix it: Put your phone number on the homepage as text, ideally as a tap-to-call link.
Your domain does not publish a DMARC record, which lets anyone send email that claims to come from your domain.
Why it matters: A DMARC policy tells receiving mail servers what to do with mail that fails your checks, which protects your customers and your inbox placement.
How to fix it: Add a DMARC record in your DNS, starting with a monitoring policy, then tighten it once your legitimate mail passes.
Your site does not publish an llms.txt file.
Why it matters: An llms.txt file is a short, plain summary of your business and key pages that AI assistants can read quickly and quote accurately.
How to fix it: Create a text file at /llms.txt with a one-paragraph description of your business and links to your most important pages.
We found no email address on your homepage.
Why it matters: An address people can copy or tap is the simplest way for a customer to get in touch on their own time.
How to fix it: Add your contact email to the homepage as text or a mailto link.
We found no street address on your homepage.
Why it matters: A visible address tells customers and AI assistants where you are, and matches you to your Google listing.
How to fix it: Add your street address to the homepage, in the same form as on your Google listing.
7 of 8 checks passed
Secure connection (HTTPS)
Your homepage loads over a secure connection (https://www.cromont.co.nz/).
Valid security certificate
Your site presents a valid security certificate.
Certificate not about to expire
Your certificate runs until 2026-12-02, well past our check on 2026-10-18.
Always-secure instruction (HSTS)
Your site tells browsers to always use the secure connection.
Security headers
Your site sends 3 of the 5 security headers we look for.
Email sender record (SPF)
Your domain publishes an SPF record listing who may send its email.
Email protection policy (DMARC)
Your domain does not publish a DMARC record, which lets anyone send email that claims to come from your domain.
Domain receives email
Your domain is set up to receive email.
10 of 14 checks passed
AI guide file (llms.txt)
Your site does not publish an llms.txt file.
Search and AI crawlers allowed
Your site lets search engines and AI assistants read it.
Sitemap available
Your site declares a sitemap.
Structured data
Your homepage carries structured data (LocalBusiness, WebSite).
Business described as a business
Your structured data describes you as a business or organisation.
Homepage title
Your homepage has a title.
Homepage description
Your homepage has a meta description.
One main heading
Your homepage has a single main heading.
Language declared
Your homepage declares its language.
Link preview when shared
Your homepage has the tags for a full preview when it is shared.
Phone number findable
We found no phone number on your homepage - an AI assistant asked for your number would come up empty.
Email address findable
We found no email address on your homepage.
Address findable
We found no street address on your homepage.
Contact form findable
We found a contact form on your site.
See where your business stands against its competitors - free.
My branch isn't here - we'll scrape your market for $7.