Most important first.
Security headers
Domain & Security
Technical
Your site sends 2 of the 5 security headers we look for; missing: csp, x_frame_options, referrer_policy.
Why it matters: These headers tell browsers how to protect visitors - for example, stopping your pages being framed inside someone else's site.
How to fix it: Ask your developer or host to add the missing headers in the server or hosting settings.
Email protection policy (DMARC)
Domain & Security
Moderate
Your domain does not publish a DMARC record, which lets anyone send email that claims to come from your domain.
Why it matters: A DMARC policy tells receiving mail servers what to do with mail that fails your checks, which protects your customers and your inbox placement.
How to fix it: Add a DMARC record in your DNS, starting with a monitoring policy, then tighten it once your legitimate mail passes.
Address findable
AI Readiness
Quick
We found no street address on your homepage.
Why it matters: A visible address tells customers and AI assistants where you are, and matches you to your Google listing.
How to fix it: Add your street address to the homepage, in the same form as on your Google listing.
Contact form findable
AI Readiness
Quick
We found no contact form on your homepage.
Why it matters: A form lets a customer reach you at any hour without picking up the phone.
How to fix it: Add a simple contact form, or a clear link to one, on your homepage.