ENLV
Book diagnostic
Book diagnostic Calculator

FREE TOOL

Website quality & security check

One address, two scores. The security score shows whether the site protects its visitors and is being maintained: HTTPS, protective headers, exposed files, outdated platform versions and libraries. The business score shows whether the site can do its job: capture enquiries, measure where they come from, and look alive. Every failed point comes with the fix.

FREE WEBSITE QUALITY AND SECURITY CHECK

Check your website

Enter your website address. We read the response headers and HTML, identify the platform when it is certain, probe for exposed files, sample the internal links and check whether the site can actually capture and measure enquiries. Then a real browser (Google PageSpeed) reports console errors and speed.

Enter the address of your current website, usually the home page.

SECURITY

What the security score checks

The things an attacker, a browser warning or an audit will notice first. All read from outside, without logging in or scanning the server.

  • HTTPS, redirect from HTTP and the HSTS header
  • Content Security Policy, clickjacking, MIME sniffing, referrer and permissions headers
  • Exposed .git, .env, backup and phpinfo files
  • Platform identified only when certain, with the version compared to the current release
  • WordPress: XML-RPC and public user listing
  • Mixed content on HTTPS pages
  • Outdated jQuery with known cross-site scripting issues
  • Cookie flags and server version disclosure

BUSINESS

What the business score checks

Whether the site is a working sales channel or a business card: can a visitor send an enquiry, can you see where it came from, and does the site look looked after.

  • A form, chat or booking widget, not only an email address
  • Clickable phone and email links
  • Analytics or tag manager installed
  • Consent mechanism when tracking scripts load
  • Privacy policy linked
  • Footer year and other signs the site is maintained
  • Mobile viewport, working internal links, server response time
  • In a real browser: console errors, insecure requests, deprecated APIs and speed

WHY WE CHECK THIS

A website is either a system that brings customers or a cost

Anyone can produce a simple website in a few hours now. The difference is what happens after launch: whether enquiries land somewhere with an owner, whether anyone can see which channel brought them, whether the platform still gets security updates, and whether someone notices when something breaks.

We build custom websites and systems, not WordPress, Mozello or other template installs, and we stay with them: monitoring, security updates, speed and SEO oversight, conversion improvements, content changes and integration care, reported monthly so you know what you are paying for and why it matters.

HONEST LIMITS

What this check cannot tell you

  • It is not a penetration test. It reads what is visible from outside and probes a few well-known paths; it does not test logins, forms or server configuration.
  • A platform is named only when the markers are unambiguous. 'Not identified' means we were not sure, not that the site is custom-built.
  • It reads one page plus a sample of its links. Problems on other pages, in admin areas or in plugins stay invisible.
  • A good score means the basics are in place. It does not say whether the site converts; that comes from analytics and CRM data.

Questions about the check

Is this safe to run on my own website?

Yes. The check only makes ordinary web requests: it loads the page as a browser would, requests a few well-known paths such as robots.txt, security.txt or .git/HEAD, and follows a handful of internal links. It does not log in, submit forms or send any traffic that could affect the site.

Why does it name my platform, and why sometimes not?

We name the platform only when the HTML leaves no doubt, for example a generator tag or two independent platform-specific asset paths. If the signals are weaker, the result says 'not identified' rather than guessing. For WordPress we also compare the stated version with the current release published by wordpress.org.

My site scored well. Do I still need maintenance?

A good score today says the basics are in place. Platforms, plugins and browsers change monthly, and a site nobody watches drifts back into the red within a year. Maintenance is about keeping the score, the speed and the enquiries flowing, and noticing when something breaks before your customers do.

What happens to the address I enter?

The server fetches the public page and the probes once, analyses them and keeps the result in memory for up to six hours so repeated checks are instant. We do not store who checked which address unless you send the result to us through the contact form.