Resonate Health

Your site does not tell browsers to always use the secure connection.

Why it matters: Without this instruction, a browser may still try the insecure address first, which leaves room for the connection to be tampered with.

How to fix it: Ask your developer or host to add the Strict-Transport-Security header once HTTPS works on every page.

Your site sends 2 of the 5 security headers we look for; missing: hsts, x_content_type_options, referrer_policy.

Why it matters: These headers tell browsers how to protect visitors - for example, stopping your pages being framed inside someone else's site.

How to fix it: Ask your developer or host to add the missing headers in the server or hosting settings.

Your domain does not publish an SPF record, so mail servers cannot tell which senders are genuinely yours.

Why it matters: Without it, your own emails are more likely to land in spam, and others find it easier to send mail that claims to come from you.

How to fix it: Add an SPF record in your domain's DNS settings; your email provider publishes the exact line to use.

Your domain does not publish a DMARC record, which lets anyone send email that claims to come from your domain.

Why it matters: A DMARC policy tells receiving mail servers what to do with mail that fails your checks, which protects your customers and your inbox placement.

How to fix it: Add a DMARC record in your DNS, starting with a monitoring policy, then tighten it once your legitimate mail passes.

Your homepage has no main heading, or more than one.

Why it matters: One clear main heading tells readers and machines what the page is about at a glance.

How to fix it: Make sure exactly one heading on the page is marked as the main (H1) heading.

We found no street address on your homepage.

Why it matters: A visible address tells customers and AI assistants where you are, and matches you to your Google listing.

How to fix it: Add your street address to the homepage, in the same form as on your Google listing.

We found no contact form on your homepage.

Why it matters: A form lets a customer reach you at any hour without picking up the phone.

How to fix it: Add a simple contact form, or a clear link to one, on your homepage.

Your domain has no mail server set up, so email sent to an address at your domain will not arrive.

Why it matters: Customers who find your domain often guess an address like info@ at it; if nothing receives that mail, the enquiry is lost.

How to fix it: Set up email for your domain with a provider, or remove email addresses at this domain from your site and listings.