Real analysis · Evidence-based scores · No fake numbers
Website Health Audit
Find the problems holding your website back. Enter any website URL and receive a detailed performance, SEO, accessibility, security, mobile, and technical health report.
How it works
From URL to professional health report in under a minute
Three steps, zero accounts, real measurements.
- 01
Enter Website
Paste any public URL, choose Quick, Standard or Deep scan, and let SitePulse verify the target safely.
- 02
Run Real Audit
The engine fetches your site, inspects HTML and headers, measures resources and crawls internal pages within strict limits.
- 03
Get Your Health Report
A transparent 0–100 score with evidence for every finding: what is wrong, why it matters and how to fix it.
What we check
Ten areas of website health — all measured from the real site
Every section reports passed checks, warnings and errors with technical evidence behind each finding.
Performance
Response time, page weight, compression, caching, Core Web Vitals when a browser is available.
SEO
Title, meta description, headings, canonical, robots, sitemap, Open Graph, structured data, links.
Mobile
Viewport, responsive CSS, horizontal overflow, tap targets and text size at mobile widths.
Accessibility
axe-core rules where possible plus structural checks: labels, alt text, landmarks, heading order, ARIA.
Security
HTTPS/TLS, HSTS, CSP, security headers, cookie attributes, mixed content. Configuration audit only.
Technical
HTTP status, redirect chains, robots.txt, sitemap, favicon, charset and broken internal resources.
Content
Visible copy volume, placeholder text, heading sanity, contact info and empty sections.
Images
Real transferred byte sizes, missing alt/dimensions, lazy loading and modern formats.
Links
Controlled same-origin crawl verifying internal pages for 2xx, 3xx, 4xx and 5xx responses.
Conversion
Observational UX opportunities — clear CTAs, contact routes, trust signals and form friction.
Transparent scoring
A score you can verify, not a magic number
SitePulse never generates random scores. Each category starts at 100 and loses fixed points per finding severity. Run the same site twice and you get the same reproducible result.
| Severity | Point penalty | Example |
|---|---|---|
| Critical | −30 | HTTPS unavailable |
| High | −15 | Missing meta description |
| Medium | −7 | Oversized images |
| Low | −2 | Missing favicon |
| Passed | ±0 | Title present |
Overall = weighted average of the seven weighted categories. Findings that cannot be measured reliably are shown as Not available — never invented.
Overall score weights
- Performance25%
- SEO20%
- Mobile15%
- Accessibility15%
- Security10%
- Technical10%
- Content5%
Grade bands
- Excellent90 – 100
- Good80 – 89
- Fair70 – 79
- Needs improvement60 – 69
- Poor0 – 59
Example audit
See a real report before you run your own
This panel shows an actual audit produced by the engine against a live website — no mock data.
Feature cards
Built for developers, agencies and site owners
Evidence on every finding
Each issue lists the measured evidence — headers, markup, URLs and byte sizes — so you can verify the result yourself.
Priority triage
Critical, high, medium and low classification tells you exactly what to fix first. Passed checks are reported too.
Safe by design
SSRF protection, private-IP blocking, timeouts, size limits, robots.txt respect and a bounded crawler keep scans safe and fast.
Before / after style fixes
Every important issue includes the problem, why it matters, and a concrete recommended fix in plain language.
FAQ
Questions, answered
Is this a real audit or an estimate?
A real audit. SitePulse fetches the website you submit, inspects the HTML it returns, measures response times and resource sizes, checks headers and TLS, and crawls internal pages within strict limits. Every score is calculated from those measurements.
Which metrics need a real browser?
Paint and layout metrics such as LCP, CLS and TBT are measured in a headless Chromium browser when one is installed (npm run setup:browsers in backend). Without a browser the engine still performs a full HTTP and DOM audit and shows browser-only metrics as “Not available” instead of guessing.
Is the security check a penetration test?
No. The Security section is explicitly a Security Configuration Audit: it inspects publicly observable signals such as HTTPS, TLS version, security headers, cookie attributes and mixed content. SitePulse never exploits, brute-forces or probes beyond safe configuration checks.
Does the accessibility check claim full WCAG compliance?
No. Automated rules (axe-core where available, plus structural checks) find many issues but cannot catch everything. The report states that manual testing may identify additional issues.
Can SitePulse be abused as an SSRF proxy?
No. Targets are validated by DNS and IP policy: loopback, private, link-local and cloud-metadata ranges are blocked, redirects are re-validated at every hop, and requests are bounded by timeouts and size limits.
Will the scan slow down my website?
No. Scans are bounded: Quick audits 1 page, Standard up to 10 pages at depth 2, Deep up to 50 at depth 3 — with concurrency limits, robots.txt respect and a hard overall deadline.
Find out what is slowing your website down
Run a real audit now — no account, no installation, no obligation.