spatheory.com

Last checked 2h ago · 11 issues found

83Overall

66Speed

94SEO

71Security

100AI readiness

Speed 4 to fix

✕
Largest Contentful Paint
6.6 s
Fix: 🔒 Unlock with Pro
!
Server response time
Homepage started responding in 1573 ms.
Fix: 🔒 Unlock with Pro
!
Mobile performance score
66/100 on Google PageSpeed (mobile)
!
Avoid multiple page redirects
Potential saving about 0.8s
Fix: 🔒 Unlock with Pro
!
Reduce unused CSS
Potential saving about 0.8s
Fix: 🔒 Unlock with Pro
✓
Cumulative Layout Shift
0.005
✓
Total Blocking Time
0 ms
✓
Desktop performance score
90/100 on Google PageSpeed (desktop)

!
Social share tags
Missing: og:image
Fix: 🔒 Unlock with Pro
!
Accessibility
84/100 on Google Lighthouse
Fix: 🔒 Unlock with Pro
!
Best practices
88/100 on Google Lighthouse
Fix: 🔒 Unlock with Pro
✓
Homepage returns 200
HTTP 200
✓
Title tag
"At Home Spa & Mobile Massage Services | SpaTheory" (53 chars)
✓
Meta description
141 characters
✓
One H1 heading
1 H1 tag(s) found.
✓
Canonical URL
https://www.spatheory.com/
✓
Page can be indexed
No noindex directive.
✓
Language declared
lang="en-US"
✓
Mobile viewport
Viewport meta tag present.
✓
Image alt text
0 of 59 images have no alt attribute.
✓
Short redirect chain
http://spatheory.com/ takes 2 redirect(s): 301 → https://spatheory.com/, 301 → https://www.spatheory.com/
✓
Enough content on the page
2051 words of visible text.
✓
Character encoding
Charset declared in the HTML.
✓
Favicon
Favicon found.
✓
X (Twitter) card tags
twitter:card = summary_large_image, no image
✓
robots.txt
Found at /robots.txt.
✓
XML sitemap
Found at https://www.spatheory.com/sitemap_index.xml
✓
No broken internal links
Checked 15 internal links from the homepage.

✕
Content Security Policy
No content-security-policy header.
Fix: 🔒 Unlock with Pro
✕
Clickjacking protection
Page can be framed by any site.
Fix: 🔒 Unlock with Pro
✕
Referrer-Policy
No referrer-policy header.
Fix: 🔒 Unlock with Pro
!
HSTS header
strict-transport-security: max-age=2592000; includeSubDomains; preload
Fix: 🔒 Unlock with Pro
✓
Served over HTTPS
The homepage loads over HTTPS.
✓
HTTP redirects to HTTPS
http:// returns 301 to HTTPS.
✓
X-Content-Type-Options
x-content-type-options: nosniff
✓
Permissions-Policy
permissions-policy: private-state-token-redemption=(self "https://www.google.com" "https://www.gstatic.com" "https://recaptcha.net" "https:/
✓
No mixed content
All resources load over HTTPS.
✓
Server software not exposed
No software versions in response headers.

i
NIST, MITRE and CISA citations resolve
No NIST, MITRE or CISA links found on the homepage and 10 linked content pages and posts. Only scored on sites that cite them.
✓
AI crawlers allowed in robots.txt
GPTBot, ClaudeBot, PerplexityBot and others are not blocked.
✓
AI crawlers not blocked by firewall
Homepage loads for GPTBot, OAI-SearchBot, ClaudeBot and PerplexityBot.
✓
Content readable without JavaScript
2051 words in the raw HTML. Most AI crawlers don't run JavaScript.
✓
llms.txt file
Found at /llms.txt (11072 characters).
✓
Structured data (schema.org)
JSON-LD types: Place, DaySpa, Organization, WebSite, ImageObject, AboutPage
✓
Clear page summary
AI answers often reuse your title and meta description to describe you.