Homepage of oliveandrocco.co.nz

Website report

Olive & Rocco

oliveandrocco.co.nz · Christchurch

Assessed 18 July 2026. Part of our assessment of New Zealand websites.

D

Passes 13 of 22 checks

Checks we could not read are left out of the count.

The mirror

An AI read your website. Here's what it understood.

A hairdressing salon in Papanui, Christchurch offering women's and men's cuts, colours, styling, and treatments. Led by owner-operator Courtenay since April 2018, the salon uses premium Australian-made products exclusively.
  • Found Phone number findable
  • Found Email address findable
  • Found Address findable
  • Not found Contact form findable

What to fix

Most important first.

Certificate not about to expire

Domain & Security Quick

Your certificate expired or was within 30 days of expiring (2026-08-16) when we checked on 2026-07-18.

Why it matters: When a certificate expires, browsers block the site with a warning until it is renewed.

How to fix it: Turn on automatic renewal with your host so the certificate never lapses.

Security headers

Domain & Security Technical

Your site sends 2 of the 5 security headers we look for; missing: csp, x_frame_options, referrer_policy.

Why it matters: These headers tell browsers how to protect visitors - for example, stopping your pages being framed inside someone else's site.

How to fix it: Ask your developer or host to add the missing headers in the server or hosting settings.

Email sender record (SPF)

Domain & Security Moderate

Your domain does not publish an SPF record, so mail servers cannot tell which senders are genuinely yours.

Why it matters: Without it, your own emails are more likely to land in spam, and others find it easier to send mail that claims to come from you.

How to fix it: Add an SPF record in your domain's DNS settings; your email provider publishes the exact line to use.

Email protection policy (DMARC)

Domain & Security Moderate

Your domain does not publish a DMARC record, which lets anyone send email that claims to come from your domain.

Why it matters: A DMARC policy tells receiving mail servers what to do with mail that fails your checks, which protects your customers and your inbox placement.

How to fix it: Add a DMARC record in your DNS, starting with a monitoring policy, then tighten it once your legitimate mail passes.

Business described as a business

AI Readiness Moderate

Your structured data does not describe you as a business or organisation.

Why it matters: Marking up your business itself - name, address, phone, hours - is what lets AI assistants answer questions about you with confidence.

How to fix it: Add LocalBusiness (or Organization) markup with your name, address, phone number and opening hours.

Homepage description

AI Readiness Quick

Your homepage has no meta description.

Why it matters: Without one, search engines and AI assistants guess at a summary from whatever text they find first.

How to fix it: Write a one- or two-sentence description of your business and add it as the page's meta description.

Contact form findable

AI Readiness Quick

We found no contact form on your homepage.

Why it matters: A form lets a customer reach you at any hour without picking up the phone.

How to fix it: Add a simple contact form, or a clear link to one, on your homepage.

Domain receives email

Domain & Security Moderate

Your domain has no mail server set up, so email sent to an address at your domain will not arrive.

Why it matters: Customers who find your domain often guess an address like info@ at it; if nothing receives that mail, the enquiry is lost.

How to fix it: Set up email for your domain with a provider, or remove email addresses at this domain from your site and listings.

Link preview when shared

AI Readiness Quick

Your homepage is missing the tags that make a full preview when it is shared.

Why it matters: When someone shares your link, these tags decide the picture, title and description people see in the post.

How to fix it: Add Open Graph tags (title, description and image); most website builders have a social sharing setting for this.

Domain & Security

3 of 8 checks passed

  • Pass

    Secure connection (HTTPS)

    Your homepage loads over a secure connection (https://www.oliveandrocco.co.nz/).

  • Pass

    Valid security certificate

    Your site presents a valid security certificate.

  • Fail

    Certificate not about to expire

    Your certificate expired or was within 30 days of expiring (2026-08-16) when we checked on 2026-07-18.

  • Pass

    Always-secure instruction (HSTS)

    Your site tells browsers to always use the secure connection.

  • Fail

    Security headers

    Your site sends 2 of the 5 security headers we look for; missing: csp, x_frame_options, referrer_policy.

  • Fail

    Email sender record (SPF)

    Your domain does not publish an SPF record, so mail servers cannot tell which senders are genuinely yours.

  • Fail

    Email protection policy (DMARC)

    Your domain does not publish a DMARC record, which lets anyone send email that claims to come from your domain.

  • Fail

    Domain receives email

    Your domain has no mail server set up, so email sent to an address at your domain will not arrive.

AI Readiness

10 of 14 checks passed

  • Pass

    AI guide file (llms.txt)

    Your site publishes an llms.txt file for AI assistants.

  • Pass

    Search and AI crawlers allowed

    Your site lets search engines and AI assistants read it.

  • Pass

    Sitemap available

    Your site declares a sitemap.

  • Pass

    Structured data

    Your homepage carries structured data (WebSite).

  • Fail

    Business described as a business

    Your structured data does not describe you as a business or organisation.

  • Pass

    Homepage title

    Your homepage has a title.

  • Fail

    Homepage description

    Your homepage has no meta description.

  • Pass

    One main heading

    Your homepage has a single main heading.

  • Pass

    Language declared

    Your homepage declares its language.

  • Fail

    Link preview when shared

    Your homepage is missing the tags that make a full preview when it is shared.

  • Pass

    Phone number findable

    We found a phone number on your homepage.

  • Pass

    Email address findable

    We found an email address on your homepage.

  • Pass

    Address findable

    We found an address on your homepage.

  • Fail

    Contact form findable

    We found no contact form on your homepage.

We already know your market

See where your business stands against its competitors - free.

My branch isn't here - we'll scrape your market for $7.

Assessed 18 July 2026 How we check websites Remove this report