Full sweep
Give us one address and we’ll run every check that fits it. The table fills in as results come back, and each line opens the full explanation.
Results
25 checks
| Check | Result | Open |
|---|---|---|
| Locks and safety | ||
| TLS certificate inspectorIssuer, expiry, chain and hostname match for the certificate a site hands out. | Open | |
| Redirect traceFollows the http, https, www and bare versions hop by hop to see where each one lands. | Open | |
| Security headers gradeGrades the response headers that protect your visitors, from A to F. | Open | |
| security.txt checkLooks for the file that tells researchers where to report a vulnerability, then checks its fields and its expiry date. | Open | |
| Unsafe-site lookupTells you whether Google Safe Browsing is flagging a site for phishing or malware right now. | Open | |
| Is it down?Is the site down, or is it just you? We try it from outside your network. | Open | |
| Hosting lookupNames the host, CDN, server software and CMS behind a site. | Open | |
| Speed | ||
| Core Web Vitals reportLCP, INP and CLS for a page and its origin, measured on real Chrome users rather than in a lab. | Open | |
| Page size breakdownTotal weight by file type, the heaviest images, the request count and a carbon estimate. | Open | |
| Compression and cache auditBrotli, gzip, cache lifetimes and HTTP version, checked file by file. | Open | |
| Accessibility | ||
| Accessibility quick scanHunts down missing alt text, unlabeled fields, empty links, skipped headings and blocked zoom. | Open | |
| Screen reader previewReads a page aloud in the order a screen reader would announce it. | Open | |
| Tab order walkthroughEvery keyboard stop on a page, in order, plus the controls Tab never reaches. | Open | |
| Search and sharing | ||
| On-page SEO readoutTitle, description, headings, canonical and image text, read the way a search engine reads them. | Open | |
| Crawler viewYour page with the styles and scripts stripped off. That’s what most bots get. | Open | |
| AI bot access checkWhich AI crawlers your robots.txt lets in, and a generator if you’d rather it didn’t. | Open | |
| Sitemap checkFetches a sitemap, counts its URLs and lists the entries a crawler would throw out. | Open | |
| Hreflang checkValidates a page’s language tags and checks that every alternate version links back. | Open | |
| Structured data checkReads a page’s JSON-LD and microdata and reports what search engines can build from it. | Open | |
| Link preview testerWhat your link will look like once it’s pasted into social networks, chat apps and search results. | Open | |
| Favicon checkChecks that you have the icon sizes browsers, phones and search results ask for. | Open | |
| Soft 404 testAsks for a page that can’t exist and checks that your server admits it. | Open | |
| Stale site checkSpots what makes a site look abandoned: old copyright years, frozen news, expired notices. | Open | |
| Privacy | ||
| Cookie scanLists the cookies and trackers a page sets before anyone has agreed to anything. | Open | |
| Third-party request mapEvery outside company a page calls, and the country its servers sit in. | Open | |
What a sweep is good for
Sites and mail setups rarely break in one spectacular way. More often it’s a pile of small things nobody has looked at in a while: a certificate someone renews by hand, a redirect that takes three hops, a DMARC record that has been “just monitoring” for two years. A sweep lines them all up on one page, so you know how big the job is before you pick up a tool.
Read the table as a to-do list. “Fix” means something is broken for real visitors or real recipients right now, so start there. “Improve” is costing you a bit of speed, reach or trust. “Fine” and “Note” can be left alone.
Page sweep or domain sweep
A page sweep loads one address the way a browser would and goes through what comes back: the connection, the response headers, the HTML, the files it pulls in. Your home page isn’t always the one that matters most, so feel free to point it at a product page or a form.
A domain sweep doesn’t load any page. It reads the public records about the name itself: DNS, mail servers, authentication records, certificate logs, registration data. That’s the one to run when mail is going missing, or when you’re trying to work out who controls what.
Why some lines take longer
Each line is its own check with its own time limit. A few rely on outside services (Chrome’s field data for speed, for instance), so those start first and don’t keep you waiting at the end. A line that says “No answer” usually means the site under test was slow to reply. Open that check and run it by itself.