See what a free Technical Audit reports
This illustrative Acme Corp report uses the same score labels, arithmetic, and fix-prioritization rules as the live report. It shows the evidence behind each finding, along with an action plan prioritized by impact, without presenting sample data as a real customer result.
Current score contract
Technical Audit score overview
Prioritized Action PlanIncluded free
Priority 1: Security headers (30 min). Add CSP, X-Frame-Options, HSTS, and X-Content-Type-Options headers. Use the nginx snippets below; most are one-line changes.
Priority 2: Structured data for AI (20 min). Add Organization JSON-LD and mark up a visible FAQ section. These fixes improve the separate AI Readiness evidence and do not change the four-pillar Site Technical Health formula.
Priority 3: Image optimization (15 min). Fix 3 missing alt texts and preload the hero image. This helps both accessibility and performance scores.
Priority 4: Meta description (5 min). Add a compelling meta description to improve the search listing.
Estimated total fix time: about 70 minutes. Projected Site Technical Health: 67 → 95 (+28 points).
This estimate is calculated from the same issue-category projection used by the live report. It is not a guarantee; a follow-up audit measures the result after the fixes ship.
All 8 Issues with Code FixesIncluded free
Your site does not send a Content-Security-Policy (CSP) header. This leaves it vulnerable to XSS attacks and data injection.
# Add to your nginx config:
add_header Content-Security-Policy "default-src 'self'; script-src 'self' 'unsafe-inline'; style-src 'self' 'unsafe-inline'; img-src 'self' data: https:;" always;CSP tells browsers which resources are allowed to load, blocking malicious scripts.
No Organization JSON-LD was detected. Structured data gives search systems explicit facts about the business and its official profiles.
<script type="application/ld+json">
{
"@context": "https://schema.org",
"@type": "Organization",
"name": "Acme Corp",
"url": "https://acme.com",
"description": "Leading provider of...",
"sameAs": ["https://twitter.com/acme"]
}
</script>JSON-LD provides a machine-readable statement of the business name, website, description, and sameAs profiles.
Without X-Frame-Options, your site can be embedded in iframes on malicious sites (clickjacking).
add_header X-Frame-Options "SAMEORIGIN" always;Prevents your pages from being loaded inside frames on other domains.
The page does not answer common buyer questions in a concise question-and-answer format.
<script type="application/ld+json">
{
"@context": "https://schema.org",
"@type": "FAQPage",
"mainEntity": [{
"@type": "Question",
"name": "What does your company do?",
"acceptedAnswer": {
"@type": "Answer",
"text": "We provide..."
}
}]
}
</script>FAQPage markup describes visible question-and-answer content in a machine-readable format.
3 of 8 images are missing alt attributes. Screen readers cannot describe these to visually impaired users.
<!-- Before -->
<img src="hero.jpg">
<!-- After -->
<img src="hero.jpg" alt="Team collaborating on project dashboard">Alt text makes images accessible and gives search engines more context about your page content.
The page is missing a meta description. Search engines will generate one automatically, but it may not be ideal.
<meta name="description" content="Acme Corp helps businesses scale with AI-powered automation. Free trial, no credit card required.">A page-specific meta description gives search systems a concise candidate summary for the result listing.
LCP measures when the largest content element becomes visible. Your 3.2s is above the 2.5s threshold for Good.
<!-- Preload the hero image -->
<link rel="preload" as="image" href="/hero.webp" fetchpriority="high">
<!-- Use next-gen format -->
<picture>
<source srcset="/hero.avif" type="image/avif">
<source srcset="/hero.webp" type="image/webp">
<img src="/hero.jpg" alt="Hero" loading="eager">
</picture>Preloading the primary image and serving an efficient format can reduce the time before the largest element appears.
HSTS forces browsers to use HTTPS, preventing protocol downgrade attacks.
add_header Strict-Transport-Security "max-age=31536000; includeSubDomains; preload" always;Once set, browsers will always use HTTPS for your domain, even if the user types http://.
What the Free Technical Audit Report Includes
Branded PDF Report
Download and share with clients or stakeholders. Professional layout with scores, issues, and fixes.
Prioritized Action Plan
Prioritized fix recommendations with time estimates. Know exactly what to fix first for maximum impact.
Copy-Paste Code Fixes
Eligible findings include implementation examples you can adapt to your server or page markup.
Finding Evidence
Each finding names the observed signal so you can verify the issue before changing the page.
Scan Your Website Free
Scan your website and unlock the full report with all issues, code fixes, and a prioritized action plan.
Scan Your Website for FreeNo signup or credit card required.