Most important first.
Always-secure instruction (HSTS)
Domain & Security
Technical
Your site does not tell browsers to always use the secure connection.
Why it matters: Without this instruction, a browser may still try the insecure address first, which leaves room for the connection to be tampered with.
How to fix it: Ask your developer or host to add the Strict-Transport-Security header once HTTPS works on every page.
Security headers
Domain & Security
Technical
Your site sends 2 of the 5 security headers we look for; missing: hsts, csp, x_frame_options.
Why it matters: These headers tell browsers how to protect visitors - for example, stopping your pages being framed inside someone else's site.
How to fix it: Ask your developer or host to add the missing headers in the server or hosting settings.
Email address findable
AI Readiness
Quick
We found no email address on your homepage.
Why it matters: An address people can copy or tap is the simplest way for a customer to get in touch on their own time.
How to fix it: Add your contact email to the homepage as text or a mailto link.
Contact form findable
AI Readiness
Quick
We found no contact form on your homepage.
Why it matters: A form lets a customer reach you at any hour without picking up the phone.
How to fix it: Add a simple contact form, or a clear link to one, on your homepage.
Link preview when shared
AI Readiness
Quick
Your homepage is missing the tags that make a full preview when it is shared.
Why it matters: When someone shares your link, these tags decide the picture, title and description people see in the post.
How to fix it: Add Open Graph tags (title, description and image); most website builders have a social sharing setting for this.