supertoolkit.app

Last checked 22m ago · 3 issues found

88Overall

58Speed

100SEO

94Security

100AI readiness

Check your own site

Speed 2 to fix

✕
Largest Contentful Paint
10.3 s
Fix: 🔒 Unlock with Pro
!
Mobile performance score
58/100 on Google PageSpeed (mobile)
!
Reduce unused JavaScript
Potential saving about 1.4s
Fix: 🔒 Unlock with Pro
!
Desktop performance score
87/100 on Google PageSpeed (desktop)
✓
Server response time
Homepage started responding in 182 ms.
✓
Cumulative Layout Shift
0
✓
Total Blocking Time
190 ms

SEO all good

✓
Homepage returns 200
HTTP 200
✓
Title tag
"Super ToolKit – 100+ Free Online Tools & File Converters" (56 chars)
✓
Meta description
155 characters
✓
One H1 heading
1 H1 tag(s) found.
✓
Canonical URL
https://supertoolkit.app/
✓
Page can be indexed
No noindex directive.
✓
Language declared
lang="en"
✓
Mobile viewport
Viewport meta tag present.
✓
Social share tags
og:title, og:description, og:url and og:type set, and og:image loads.
✓
Image alt text
0 of 2 images have no alt attribute.
✓
Short redirect chain
http://supertoolkit.app/ takes 1 redirect(s): 302 → https://supertoolkit.app/
✓
Enough content on the page
3421 words of visible text.
✓
Character encoding
Charset declared in the HTML.
✓
Favicon
Favicon found.
✓
X (Twitter) card tags
twitter:card = summary_large_image, image set
✓
Missing pages return 404
A made-up URL returns 404.
✓
www and non-www go to one address
www.supertoolkit.app redirects to supertoolkit.app.
✓
robots.txt
Found at /robots.txt.
✓
XML sitemap
Found at https://supertoolkit.app/sitemap.xml
✓
No broken internal links
Checked 15 internal links from the homepage.
✓
Inner page titles
Read 5 inner pages (/about/, /pricing/, /docs/, /blog/, /contact/). Every one has a title of a sensible length.
✓
No duplicate titles
The homepage and 5 inner pages all have different titles.
✓
Inner page meta descriptions
5 inner pages each have their own meta description.
✓
Inner pages have one H1
5 inner pages each have exactly one H1.
✓
Inner pages canonical to themselves
5 inner pages each have a canonical tag pointing at their own URL.
✓
Accessibility
93/100 on Google Lighthouse
✓
Best practices
96/100 on Google Lighthouse

Security 1 to fix

!
Content Security Policy
A policy is set, but script-src allows 'unsafe-inline' without a nonce or hash, so injected inline scripts still run.
Fix: 🔒 Unlock with Pro
✓
Served over HTTPS
The homepage loads over HTTPS.
✓
HTTP redirects to HTTPS
http:// returns 302 to HTTPS.
✓
HSTS header
strict-transport-security: max-age=31536000; includeSubDomains; preload
✓
Clickjacking protection
X-Frame-Options: SAMEORIGIN
✓
X-Content-Type-Options
x-content-type-options: nosniff
✓
Referrer-Policy
referrer-policy: strict-origin-when-cross-origin
✓
Permissions-Policy
permissions-policy: camera=(), microphone=(), geolocation=(), payment=(), usb=(), magnetometer=(), gyroscope=(), accelerometer=()
✓
No mixed content
All resources load over HTTPS.
✓
Server software not exposed
No software versions in response headers.
✓
Cookies set securely
The homepage sets no cookies.
✓
SPF record (email spoofing)
v=spf1 include:_spf.google.com ~all
✓
DMARC policy (email spoofing)
Policy is p=quarantine: v=DMARC1; p=quarantine; adkim=r; aspf=r; rua=mailto:dmarc_rua@onsecureserver.net;

AI readiness all good

i
NIST, MITRE and CISA citations resolve
No NIST, MITRE or CISA links found on the homepage and 2 linked content pages and posts. Only scored on sites that cite them.
✓
AI crawlers allowed in robots.txt
GPTBot, ClaudeBot, PerplexityBot and others are not blocked.
✓
AI crawlers not blocked by firewall
Homepage loads for GPTBot, OAI-SearchBot, ClaudeBot and PerplexityBot.
✓
Content readable without JavaScript
3421 words in the raw HTML. Most AI crawlers don't run JavaScript.
✓
Inner pages readable without JavaScript
5 inner pages each have 100+ words in the raw HTML.
✓
Content split into headed sections
80 H2/H3 headings in the raw HTML. Answer engines lift passages section by section, using the heading to know what each one is about.
✓
llms.txt file
Found at /llms.txt (21062 characters).
✓
Structured data (schema.org)
JSON-LD types: WebSite, Organization, SoftwareApplication, BreadcrumbList, ItemList, FAQPage.
✓
Structured data on inner pages
5 inner pages all carry valid JSON-LD.
✓
Answers real questions
FAQPage schema found.
✓
Content shows when it was updated
Most recent update date found: 2026-11-12.
✓
Clear page summary
AI answers often reuse your title and meta description to describe you.

Domain all good

i
Domain age
Registered 2026-09-26 (1 months ago).
i
Registrar
GoDaddy.com, LLC
i
Hosting network
Not available.