vapt.pk

Last checked 8h ago · 3 issues found

96Overall

86Speed

100SEO

100Security

96AI readiness

Speed 2 to fix

!
Mobile performance score
86/100 on Google PageSpeed (mobile)
!
Largest Contentful Paint
3.7 s
Fix: 🔒 Unlock with Pro
!
Reduce unused JavaScript
Potential saving about 0.5s
Fix: 🔒 Unlock with Pro
✓
Server response time
Homepage started responding in 68 ms.
✓
Cumulative Layout Shift
0.004
✓
Total Blocking Time
200 ms
✓
Desktop performance score
94/100 on Google PageSpeed (desktop)

✓
Homepage returns 200
HTTP 200
✓
Title tag
"Penetration Testing and VAPT Services in Pakistan | VAPT.PK" (59 chars)
✓
Meta description
158 characters
✓
One H1 heading
1 H1 tag(s) found.
✓
Canonical URL
https://vapt.pk/
✓
Page can be indexed
No noindex directive.
✓
Language declared
lang="en"
✓
Mobile viewport
Viewport meta tag present.
✓
Social share tags
og:title, og:description, og:image, og:url and og:type set.
✓
Image alt text
0 of 2 images have no alt attribute.
✓
Short redirect chain
http://vapt.pk/ takes 1 redirect(s): 301 → https://vapt.pk/
✓
Enough content on the page
1933 words of visible text.
✓
Character encoding
Charset declared in the HTML.
✓
Favicon
Favicon found.
✓
X (Twitter) card tags
twitter:card = summary_large_image, image set
✓
robots.txt
Found at /robots.txt.
✓
XML sitemap
Found at https://vapt.pk/sitemap.xml
✓
No broken internal links
Checked 15 internal links from the homepage.
✓
Accessibility
100/100 on Google Lighthouse
✓
Best practices
92/100 on Google Lighthouse

✓
Served over HTTPS
The homepage loads over HTTPS.
✓
HTTP redirects to HTTPS
http:// returns 301 to HTTPS.
✓
HSTS header
strict-transport-security: max-age=63072000; includeSubDomains; preload
✓
Content Security Policy
content-security-policy: default-src 'self'; script-src 'self' 'unsafe-inline' https://www.googletagmanager.com https://*.googletagmanager.com ht
✓
Clickjacking protection
X-Frame-Options: DENY
✓
X-Content-Type-Options
x-content-type-options: nosniff
✓
Referrer-Policy
referrer-policy: strict-origin-when-cross-origin
✓
Permissions-Policy
permissions-policy: camera=(), microphone=(), geolocation=(), interest-cohort=()
✓
No mixed content
All resources load over HTTPS.
✓
Server software not exposed
No software versions in response headers.

!
llms.txt file
No /llms.txt file.
Fix: 🔒 Unlock with Pro
i
NIST, MITRE and CISA citations resolve
No NIST, MITRE or CISA links found on the homepage and 10 linked content pages and posts. Only scored on sites that cite them.
✓
AI crawlers allowed in robots.txt
GPTBot, ClaudeBot, PerplexityBot and others are not blocked.
✓
AI crawlers not blocked by firewall
Homepage loads for GPTBot, OAI-SearchBot, ClaudeBot and PerplexityBot.
✓
Content readable without JavaScript
1933 words in the raw HTML. Most AI crawlers don't run JavaScript.
✓
Structured data (schema.org)
JSON-LD types: WebSite, ProfessionalService, FAQPage, Person
✓
Clear page summary
AI answers often reuse your title and meta description to describe you.