How healthy is your site, really?
Run a live scan of your security headers, response time and speed scores in the browser, in about a minute, with no email required to see the result. Then, if you want it, a written review of the things a scanner cannot judge.
Security grading by the MDN HTTP Observatory. We don't store the addresses you enter.
What you get instantly
Everything below runs against your live site the moment you press the button. Nothing is estimated.
Security headers
A real MDN HTTP Observatory scan: Content-Security-Policy, HSTS, X-Content-Type-Options, referrer policy, cookie flags and the rest, with a grade and a score you can check yourself.
Response time
How long your origin takes to answer a request, measured from the browser rather than quoted from a synthetic lab.
HTTP status
Whether the host actually answers cleanly redirects, mixed content and a homepage returning something other than 200 are all findings.
Lighthouse scores
Available when a PageSpeed Insights key is configured on this deployment. Without one the scan skips it rather than calling the API keyless the anonymous quota is permanently exhausted and would fail every time.
What a scanner cannot tell you
Automated scores are a starting point. These are the findings that actually move revenue, and every one of them needs a person to look.
- Indexability robots.txt, meta robots, canonical tags and whether your sitemap agrees with the site.
- Structured data, and whether it matches what is actually rendered on the page.
- Heading hierarchy, image alt text and keyboard operability.
- Broken internal links and redirect chains.
- The conversion path: what a visitor is asked to do, and how much work it takes them.
- JavaScript bundle size, and what is in it that nobody needs.
Run the scan above, then ask for the written version the button on your result carries the address across so you do not have to type it again. We come back within one working day.
About the audit
The live scan on this page is free, instant and requires no email you see the numbers whether or not you ever speak to us. The written review that goes beyond what a scan can measure is also free, and it is the part where you have to give us an address to send it to.
The scan is automated: security headers, response time and, where configured, Lighthouse scores. The written audit is a person looking at the things a scanner cannot judge whether your structured data matches the page, whether the heading order makes sense, whether the conversion path asks for too much. Most of the useful findings are in the second one.
No, and most people do not. The audit is written so that your own developer can act on it. If we are not the right people to fix what we found, we will say so.
No. It makes a small number of ordinary public requests, the same as any visitor. Nothing is written, nothing is logged on your side beyond a normal request, and no credentials are involved.
The Observatory runs a fresh scan rather than returning a cached grade, and on a large site that can take the better part of a minute. If it times out entirely, that is itself worth knowing.
Not with the live scan it only sees what a public visitor sees. Authenticated areas are covered in the written review, which is one of the reasons that part is not automated.
Where the findings usually lead
Want the written audit?
Send us the address and we will come back within a working day whether or not there is a project in it. Or email letsbuild@korame.in directly.
The scan is powered by the MDN HTTP Observatory and, where configured, Google PageSpeed Insights. Both are public tools you can run them yourself, and we would rather you knew that. More on how we work.