Free tools
A full report on your website
Enter your website: every check runs at once, and each result leads to its detailed explanation. No sign-up.
The report
29 checks
| Tool | Result | Link |
|---|---|---|
| Security | ||
| SSL certificateIssuer, expiry, chain and HTTPS redirects. | Open → | |
| Redirects & HTTPShttp, https, with or without www: does it all lead to one address? Redirect chains and mixed content. | Open → | |
| Security headersAn A to F grade for the protections your site sends. | Open → | |
| Flagged as dangerous?Has Google flagged your site for phishing or malware? Chrome's red screen, checked. | Open → | |
| Down or just me?We try the site from Montreal: DNS, connection, response time, certificate, and a plain verdict. | Open → | |
| Who hosts this site?A site's host, CDN, CMS and server at a glance. | Open → | |
| Speed | ||
| Real-world speedCore Web Vitals measured from real Chrome visitors: what Google uses to rank your site. | Open → | |
| Page weightSize, heavy images, requests and carbon per visit. | Open → | |
| Compression & cachingBrotli, gzip, cache lifetime and HTTP/2, file by file, with settings to copy. | Open → | |
| Accessibility | ||
| Page accessibilityImages without alt text, unlabelled fields, empty links, headings out of order, zoom blocked. | Open → | |
| Listen like a screen readerYour page read aloud, item by item, the way a blind person hears it, with the problems flagged. | Open → | |
| Keyboard navigationEvery Tab stop, in order: unreachable elements, skip link, removed focus outline. | Open → | |
| SEO and presentation | ||
| On-page SEO checkTitle, description, headings, image alt text: what Google reads on your page. | Open → | |
| Your site as a bot sees itThe text Google and AI tools read, without styles or JavaScript: hidden content, script-only pages, AI bots allowed. | Open → | |
| AI crawlers: what do you let through?GPTBot, ClaudeBot, Google-Extended and more: what your robots.txt allows, plus a generator to choose. | Open → | |
| Share previewYour link on Facebook, LinkedIn, iMessage and Google. | Open → | |
| Favicon & iconsAre all expected icon sizes there? | Open → | |
| Does your 404 page tell the truth?A real 404 or a “soft 404” that fools Google? And does your error page help visitors move on? | Open → | |
| Does your site look abandoned?Old ©, frozen news, past events, COVID notices: an A to F grade. | Open → | |
| Privacy law and language | ||
| Cookies before consentWhat your site sets or loads before any click (Law 25). | Open → | |
| Law 25: privacyPolicy, privacy officer, banner: are the basics in place? | Open → | |
| Where does your visitors' data go?Every outside service your page calls, grouped by company, with its servers' country. | Open → | |
| SPF, DKIM & DMARC checkerEmails landing in spam? We read your domain's setup and explain what to fix. | Open → | |
| Blacklist checkIs your mail server listed on Spamhaus, Barracuda, SpamCop and others? | Open → | |
| Incoming mail checkDo your MX servers accept an encrypted connection with a valid certificate? MTA-STS and TLS-RPT too. | Open → | |
| BIMI: your logo in GmailWhat's missing to show your logo next to your emails. | Open → | |
| Domain | ||
| Domain health checkExpiry, name servers, DNSSEC, CAA: is the domain in good shape? | Open → | |
| Who holds the keys to your website?Registrar, DNS, hosting, email, sending services: a map of the accounts your domain depends on, plus a sheet to print. | Open → | |
| Certificates issued for your domainSubdomains, issuers and recent certificates from the public logs; subdomains open to takeover flagged. | Open → | |
Frequently asked questions
How do I check my website and domain in one go?
Enter your website address: all the free checks (email, certificate, security, Quebec's Law 25, performance and more) start at the same time. Results appear as they come in, and each one leads to its detailed explanation.
How long does the report take?
About a minute for everything. The slowest checks, such as real-world speed, are given more time. Each row fills in as soon as its result arrives.
What do you do with the domains I check?
We do not keep the list of domains you check; only the answer of the certificate registry is cached for one hour, so as not to overload it. To limit abuse, we only keep a hashed fingerprint of your IP address, erased after at most two hours.
Can I keep or print the result?
Yes. Once the report is finished you can read the full report, which gathers all the detailed results, and then print it.
