flowinvoice.app

Last checked 1h ago · 8 issues found

85Overall

89Speed

100SEO

76Security

73AI readiness

Speed 2 to fix

!
Mobile performance score
89/100 on Google PageSpeed (mobile)
!
Largest Contentful Paint
2.7 s
Fix: 🔒 Unlock with Pro
!
Reduce initial server response time
Potential saving about 0.5s
Fix: 🔒 Unlock with Pro
✓
Server response time
Homepage started responding in 453 ms.
✓
Cumulative Layout Shift
0
✓
Total Blocking Time
20 ms
✓
Desktop performance score
97/100 on Google PageSpeed (desktop)

✓
Homepage returns 200
HTTP 200
✓
Title tag
"Flow - Effortless Invoicing for Freelancers" (43 chars)
✓
Meta description
135 characters
✓
One H1 heading
1 H1 tag(s) found.
✓
Canonical URL
https://flowinvoice.app
✓
Page can be indexed
No noindex directive.
✓
Language declared
lang="en"
✓
Mobile viewport
Viewport meta tag present.
✓
Social share tags
og:title, og:description, og:image, og:url and og:type set.
✓
Image alt text
0 of 46 images have no alt attribute.
✓
Short redirect chain
http://flowinvoice.app/ takes 1 redirect(s): 302 → https://flowinvoice.app/
✓
Enough content on the page
866 words of visible text.
✓
Character encoding
Charset declared in the HTML.
✓
Favicon
Favicon found.
✓
X (Twitter) card tags
twitter:card = summary_large_image, image set
✓
robots.txt
Found at /robots.txt.
✓
XML sitemap
Found at https://flowinvoice.app/sitemap.xml
✓
No broken internal links
Checked 15 internal links from the homepage.
✓
Accessibility
96/100 on Google Lighthouse
✓
Best practices
96/100 on Google Lighthouse

✕
HSTS header
No strict-transport-security header.
Fix: 🔒 Unlock with Pro
✕
Referrer-Policy
No referrer-policy header.
Fix: 🔒 Unlock with Pro
!
Permissions-Policy
No permissions-policy header.
Fix: 🔒 Unlock with Pro
!
Server software not exposed
Headers reveal: Next.js
Fix: 🔒 Unlock with Pro
✓
Served over HTTPS
The homepage loads over HTTPS.
✓
HTTP redirects to HTTPS
http:// returns 302 to HTTPS.
✓
Content Security Policy
content-security-policy: frame-ancestors 'self'
✓
Clickjacking protection
X-Frame-Options: SAMEORIGIN
✓
X-Content-Type-Options
x-content-type-options: nosniff
✓
No mixed content
All resources load over HTTPS.

✕
AI crawlers not blocked by firewall
Blocked: GPTBot (403), ClaudeBot (403)
Fix: 🔒 Unlock with Pro
!
llms.txt file
No /llms.txt file.
Fix: 🔒 Unlock with Pro
✓
AI crawlers allowed in robots.txt
GPTBot, ClaudeBot, PerplexityBot and others are not blocked.
✓
Content readable without JavaScript
866 words in the raw HTML. Most AI crawlers don't run JavaScript.
✓
Structured data (schema.org)
JSON-LD types: Organization, WebSite, SoftwareApplication, FAQPage
✓
Clear page summary
AI answers often reuse your title and meta description to describe you.