mahammadsafwan.onrender.com

Last checked 49m ago · 10 issues found

86Overall

97Speed

96SEO

56Security

93AI readiness

Speed 1 to fix

!
Meta description
187 characters
Fix: 🔒 Unlock with Pro
i
Inner pages
Fewer than 2 inner pages could be read from the homepage links and sitemap, so only the homepage was graded.
✓
Homepage returns 200
HTTP 200
✓
Title tag
"Safwan — Websites that bring small businesses more customers" (60 chars)
✓
One H1 heading
1 H1 tag(s) found.
✓
Canonical URL
https://mahammadsafwan.onrender.com/
✓
Page can be indexed
No noindex directive.
✓
Language declared
lang="en"
✓
Mobile viewport
Viewport meta tag present.
✓
Social share tags
og:title, og:description, og:url and og:type set, and og:image loads.
✓
Image alt text
0 of 1 images have no alt attribute.
✓
Short redirect chain
http://mahammadsafwan.onrender.com/ takes 1 redirect(s): 301 → https://mahammadsafwan.onrender.com/
✓
Enough content on the page
1049 words of visible text.
✓
Character encoding
Charset declared in the HTML.
✓
Favicon
Favicon found.
✓
X (Twitter) card tags
twitter:card = summary_large_image, image set
✓
Missing pages return 404
A made-up URL returns 404.
✓
robots.txt
Found at /robots.txt.
✓
XML sitemap
Found at https://mahammadsafwan.onrender.com/sitemap.xml
✓
No broken internal links
Checked 1 internal links from the homepage.
✓
Accessibility
96/100 on Google Lighthouse
✓
Best practices
100/100 on Google Lighthouse

✕
Content Security Policy
No content-security-policy header.
Fix: 🔒 Unlock with Pro
✕
Clickjacking protection
Page can be framed by any site.
Fix: 🔒 Unlock with Pro
✕
Referrer-Policy
No referrer-policy header.
Fix: 🔒 Unlock with Pro
✕
SPF record (email spoofing)
No SPF record on onrender.com, so any server can send email that claims to come from your domain.
Fix: 🔒 Unlock with Pro
!
Permissions-Policy
No permissions-policy header.
Fix: 🔒 Unlock with Pro
!
DMARC policy (email spoofing)
Policy is p=none, which only monitors. Spoofed email is still delivered.
Fix: 🔒 Unlock with Pro
✓
Served over HTTPS
The homepage loads over HTTPS.
✓
HTTP redirects to HTTPS
http:// returns 301 to HTTPS.
✓
HSTS header
strict-transport-security: max-age=315360000; includeSubdomains; preload
✓
X-Content-Type-Options
x-content-type-options: nosniff
✓
No mixed content
All resources load over HTTPS.
✓
Server software not exposed
No software versions in response headers.
✓
Cookies set securely
The homepage sets no cookies.

!
llms.txt file
No /llms.txt file.
Fix: 🔒 Unlock with Pro
!
Answers real questions
1 question-style heading(s) on the pages read, e.g. "Hiring instead?"
Fix: 🔒 Unlock with Pro
i
NIST, MITRE and CISA citations resolve
No NIST, MITRE or CISA links found on the homepage and 0 linked content pages and posts. Only scored on sites that cite them.
✓
AI crawlers allowed in robots.txt
GPTBot, ClaudeBot, PerplexityBot and others are not blocked.
✓
AI crawlers not blocked by firewall
Homepage loads for GPTBot, OAI-SearchBot, ClaudeBot and PerplexityBot.
✓
Content readable without JavaScript
1049 words in the raw HTML. Most AI crawlers don't run JavaScript.
✓
Content split into headed sections
21 H2/H3 headings in the raw HTML. Answer engines lift passages section by section, using the heading to know what each one is about.
✓
Structured data (schema.org)
JSON-LD types: ProfessionalService.
✓
Content shows when it was updated
Most recent update date found: 2026-10-24.
✓
Clear page summary
AI answers often reuse your title and meta description to describe you.