Most important first.
Certificate not about to expire
Domain & Security
Quick
Your certificate expired or was within 30 days of expiring (2026-11-20) when we checked on 2026-10-24.
Why it matters: When a certificate expires, browsers block the site with a warning until it is renewed.
How to fix it: Turn on automatic renewal with your host so the certificate never lapses.
Security headers
Domain & Security
Technical
Your site sends 2 of the 5 security headers we look for; missing: csp, x_frame_options, referrer_policy.
Why it matters: These headers tell browsers how to protect visitors - for example, stopping your pages being framed inside someone else's site.
How to fix it: Ask your developer or host to add the missing headers in the server or hosting settings.
Email protection policy (DMARC)
Domain & Security
Moderate
Your domain does not publish a DMARC record, which lets anyone send email that claims to come from your domain.
Why it matters: A DMARC policy tells receiving mail servers what to do with mail that fails your checks, which protects your customers and your inbox placement.
How to fix it: Add a DMARC record in your DNS, starting with a monitoring policy, then tighten it once your legitimate mail passes.
Business described as a business
AI Readiness
Moderate
Your structured data does not describe you as a business or organisation.
Why it matters: Marking up your business itself - name, address, phone, hours - is what lets AI assistants answer questions about you with confidence.
How to fix it: Add LocalBusiness (or Organization) markup with your name, address, phone number and opening hours.
One main heading
AI Readiness
Quick
Your homepage has no main heading, or more than one.
Why it matters: One clear main heading tells readers and machines what the page is about at a glance.
How to fix it: Make sure exactly one heading on the page is marked as the main (H1) heading.