Website SEO Audit Tool
Audit any website for free: 75+ SEO, speed, Core Web Vitals, AI search and security checks, graded A–F with a prioritised fix list and a PDF report.
About the Website Auditor
A free SEO and website audit that goes deeper than most paid tools. Enter any URL and get a graded report with 75+ checks across on-page SEO, technical SEO, speed, mobile usability, AI search visibility, links, social previews and security — plus Google PageSpeed and Lighthouse scores, and a prioritised list of what to fix first.
Features
- On-page SEO: title, description, headings, content, keywords
- Technical SEO: HTTPS, redirects, robots.txt, sitemap, noindex, soft 404s
- Speed: Core Web Vitals, Lighthouse, caching, compression, page weight
- AI search (GEO): AI crawler access, llms.txt, JavaScript-free content
- Security headers, SSL expiry, SPF and DMARC
- Branded PDF report, Markdown and JSON export
How to Use
- Enter a domain or any page URL (https:// is optional).
- Optionally add the keyword you want the page to rank for.
- Click Audit website — results appear in a few seconds, PageSpeed scores follow.
- Start with the high-priority recommendations, then open any check for details.
- Download the PDF report to share with your team or client.
Titles, descriptions, headings, content and keywords.
Whether search engines can reach, crawl and index the page.
How fast the page loads for real visitors.
Mobile-friendliness, accessibility and PageSpeed scores.
How well ChatGPT, Claude, Perplexity and Gemini can read and cite the page.
Internal and external links on the page, and whether they work.
Link previews and social profiles.
Security headers, HTTPS hygiene and email spoofing protection.
What the audit checks
On-Page SEO
- Title tag — Present, unique and 50–60 characters long.
- Meta description — Present and 120–160 characters, so it isn’t cut off.
- Search result preview — How the page could look in Google.
- H1 heading — Exactly one, with real text.
- Heading structure — Subheadings used, no skipped levels or empty headings.
- Amount of content — Enough words to avoid “thin content”.
- Keyword consistency — Top keywords also appear in the title, description and headings.
- Image alt text — Every meaningful image is described.
- Canonical tag — A single canonical pointing to the right URL.
- Language — A valid lang attribute.
- Hreflang — Language versions link to each other correctly, with an x-default.
- SEO-friendly URL — Short, lowercase, hyphenated, not too deep.
- Target keyword — Your keyword in the title, description, H1, URL, opening text and alt text.
Technical SEO
- Page reachable — Returns 200 OK and isn’t blocking crawlers.
- HTTPS — Served securely.
- SSL certificate — Valid, and how many days until it expires.
- HTTP → HTTPS redirect — http:// sends visitors to https:// in one step.
- www / non-www — Only one version of the site loads; the other redirects.
- Redirects — No long redirect chains.
- robots.txt — Present and not returning server errors.
- Crawlable by search engines — robots.txt doesn’t block Googlebot or Bingbot.
- Noindex tag and header — Nothing tells search engines to drop the page.
- XML sitemap — Found, valid, declared in robots.txt, and includes this page.
- Structured data — Schema.org JSON-LD present and valid.
- 404 handling — Missing pages return a real 404, not a “soft 404”.
- Doctype and character encoding — Declared correctly.
- Analytics — Which analytics tool is installed.
- Google Lighthouse SEO — Google’s own SEO audit of the rendered page.
Performance
- Server response time — Time to first byte.
- Page load speed — Lab LCP, FCP, TBT, CLS and Speed Index on mobile and desktop.
- Core Web Vitals — Real-visitor LCP, INP and CLS from the Chrome UX Report.
- Page size and requests — Total download weight and number of files, by type.
- Text compression — Gzip or Brotli on HTML, CSS and JavaScript.
- Browser caching — Long cache lifetimes for static files.
- Minified CSS & JavaScript — No unminified files.
- Unused JavaScript — Code downloaded but never run.
- Image optimization — Modern formats and right-sized images.
- HTTP/2 and HTTP/3 — Modern protocols in use.
- JavaScript errors — Errors logged in the browser console.
- Inline styles and DOM size — Lean, maintainable markup.
- Third-party code — Which outside services load code, and their cost.
Usability
- Device rendering — Mobile and desktop screenshots.
- Mobile viewport — Scales to the screen and allows zooming.
- PageSpeed score — Google’s mobile and desktop performance scores.
- Accessibility — Lighthouse accessibility score and failed audits.
- Best practices — Lighthouse best-practices score.
- Render-blocking resources — Files that delay the first paint.
- Image dimensions — Width and height set to prevent layout shift.
- Favicon — Present and loading.
- Email privacy, Flash, iframes, deprecated HTML — Legacy and spam-bait problems.
AI Search (GEO)
- Content visible without JavaScript — AI crawlers that don’t run JavaScript can still read the page.
- AI crawler access — robots.txt rules for GPTBot, OAI-SearchBot, ClaudeBot, PerplexityBot, Google-Extended and more.
- llms.txt — A guide file for AI assistants.
- Organization / identity schema — Who is behind the site, with sameAs profile links.
- Answer-ready content — Question headings and FAQ schema AI answers can quote.
- Freshness signals — Published and updated dates.
- AI usage directives — noai / noimageai opt-outs.
Links
- On-page links — Internal, external and nofollow counts.
- Broken links — A live test of the page’s links.
- Descriptive anchor text — No “click here” links.
- Friendly link URLs — No session IDs or messy URLs.
- Internal nofollow — Your own links pass value.
- Crawlable links — No “#” or javascript: links.
Social
- Open Graph tags — Title, description and a working image for rich link previews.
- X (Twitter) card — Large image previews on X.
- Social profiles — Links to Facebook, X, Instagram, LinkedIn, YouTube and more.
Security
- HSTS — Browsers forced to use HTTPS.
- Content Security Policy — Protection against cross-site scripting.
- X-Content-Type-Options, clickjacking, Referrer-Policy — Essential security headers.
- Mixed content — No insecure files on a secure page.
- Cookie security — Secure and SameSite flags.
- Server version disclosure — No software versions leaked in headers.
- SPF and DMARC — Protection against email spoofing.
Local SEO & Technology
- Address & phone — Contact details shown on the page.
- LocalBusiness schema — Structured data for local businesses.
- Technology stack — CMS, framework, CDN, analytics and more.
- Server, IP and DNS — Hosting, nameservers and mail servers.
How it works: our server fetches the page the way a search engine would (so it isn’t limited by your browser), Google PageSpeed Insights tests it on a real mobile and desktop browser, and all scoring happens in your browser. We don’t store the pages you audit; results are cached for 10 minutes so repeat views are instant.
Frequently Asked Questions
Is this website audit really free?
Yes. Every check, the Google PageSpeed scores and the PDF report are free with no sign-up. To keep it free for everyone, each visitor can run 5 fresh audits per hour; a page audited in the last 10 minutes loads instantly without using one.
What does the website auditor check?
Over 75 checks in eight graded areas: on-page SEO (title, meta description, headings, content, keywords, alt text), technical SEO (HTTPS, redirects, robots.txt, sitemap, noindex, soft 404s, structured data), performance (Core Web Vitals, load speed, caching, compression, page weight), usability (mobile viewport, Lighthouse accessibility, render-blocking files), AI search (AI crawler access, llms.txt, content visible without JavaScript), links (broken links, anchor text), social (Open Graph, X cards) and security (HSTS, CSP, SSL expiry, SPF, DMARC). Local SEO and the technology stack are reported but not graded.
How is the score calculated?
Each check passes, warns or fails and has a weight based on how much it matters. A category’s score is the weighted share of points it earned, turned into a grade from A+ to F. The overall score weights the categories: on-page SEO 25%, technical SEO 20%, performance 15%, usability 15%, AI search 10%, and links, social and security 5% each. Checks that couldn’t run are left out rather than counted against you.
What is GEO (AI search optimization)?
Generative engine optimization means making a site easy for AI assistants such as ChatGPT, Claude, Perplexity and Gemini to read and cite. The auditor checks that their crawlers aren’t blocked in robots.txt, that your content is in the HTML rather than drawn by JavaScript (most AI crawlers don’t run it), that you publish an llms.txt file and that Organization schema identifies who is behind the site.
Why does the audit say it couldn’t read my page?
Some hosts and firewalls block requests from servers while serving people normally. The server, DNS and PageSpeed checks still run; to get the on-page checks, open the page, view its source (Ctrl+U), copy it and paste it into the box the auditor shows.
Can I download the audit as a PDF?
Yes. Click Download PDF report for a branded, multi-page report with your scores, the prioritised recommendations and every check. The PDF is built in your browser. You can also copy the report as Markdown or download the raw results as JSON.
How do I check my website’s SEO for free?
Enter your domain or any page URL above and click Audit website. In a few seconds you get a graded report of 75+ checks and a list of what to fix first, and within about 30 seconds Google’s PageSpeed and Lighthouse scores for mobile and desktop. There is no sign-up and no limit on report length.
What is a good website audit score?
Scores of 90+ (A- or better) mean only minor tweaks are left, 80–89 is good, 65–79 means clear room to improve and below 65 means serious issues are holding the page back. Fix high-priority recommendations first: noindex tags, blocked crawlers, a missing title or H1 and slow mobile loading usually matter most.
Does the audit check Core Web Vitals and page speed?
Yes. It runs Google PageSpeed Insights (Lighthouse) on an emulated mobile phone and a desktop, showing Largest Contentful Paint, Total Blocking Time, Cumulative Layout Shift and more, plus real-visitor Core Web Vitals (LCP, INP, CLS) from the Chrome UX Report when Google has enough data for your site.
How often should I audit my website?
Run an audit after every redesign, migration or major content change, and at least once a month otherwise. Problems such as an accidental noindex tag, an expiring SSL certificate or a broken redirect can appear without anyone noticing, and they cost rankings quickly.
Do you store the websites I audit?
No accounts and no history. The results for a URL are cached on our server for 10 minutes so repeat views are instant, then discarded. The URL is also sent to Google PageSpeed Insights, which runs the Lighthouse test.