Most important first.
Certificate not about to expire
Domain & Security
Quick
Your certificate expired or was within 30 days of expiring (2026-08-12) when we checked on 2026-07-18.
Why it matters: When a certificate expires, browsers block the site with a warning until it is renewed.
How to fix it: Turn on automatic renewal with your host so the certificate never lapses.
Security headers
Domain & Security
Technical
Your site sends 2 of the 5 security headers we look for; missing: csp, x_frame_options, referrer_policy.
Why it matters: These headers tell browsers how to protect visitors - for example, stopping your pages being framed inside someone else's site.
How to fix it: Ask your developer or host to add the missing headers in the server or hosting settings.
Email sender record (SPF)
Domain & Security
Moderate
Your domain does not publish an SPF record, so mail servers cannot tell which senders are genuinely yours.
Why it matters: Without it, your own emails are more likely to land in spam, and others find it easier to send mail that claims to come from you.
How to fix it: Add an SPF record in your domain's DNS settings; your email provider publishes the exact line to use.
Email protection policy (DMARC)
Domain & Security
Moderate
Your domain does not publish a DMARC record, which lets anyone send email that claims to come from your domain.
Why it matters: A DMARC policy tells receiving mail servers what to do with mail that fails your checks, which protects your customers and your inbox placement.
How to fix it: Add a DMARC record in your DNS, starting with a monitoring policy, then tighten it once your legitimate mail passes.
Email address findable
AI Readiness
Quick
We found no email address on your homepage.
Why it matters: An address people can copy or tap is the simplest way for a customer to get in touch on their own time.
How to fix it: Add your contact email to the homepage as text or a mailto link.
Contact form findable
AI Readiness
Quick
We found no contact form on your homepage.
Why it matters: A form lets a customer reach you at any hour without picking up the phone.
How to fix it: Add a simple contact form, or a clear link to one, on your homepage.
Domain receives email
Domain & Security
Moderate
Your domain has no mail server set up, so email sent to an address at your domain will not arrive.
Why it matters: Customers who find your domain often guess an address like info@ at it; if nothing receives that mail, the enquiry is lost.
How to fix it: Set up email for your domain with a provider, or remove email addresses at this domain from your site and listings.