workheroes.ph
Last checked 1h ago ยท 16 issues found
Speed 3 to fix
-
โ
Mobile performance score
39/100 on Google PageSpeed (mobile)
-
โ
Largest Contentful Paint
12.7ย s
Fix: ๐ Unlock with Pro
-
โ
Total Blocking Time
760ย ms
Fix: ๐ Unlock with Pro
-
!
Reduce unused JavaScript
Potential saving about 2.9s
Fix: ๐ Unlock with Pro
-
!
Desktop performance score
52/100 on Google PageSpeed (desktop)
-
โ
Server response time
Homepage started responding in 313 ms.
-
โ
Cumulative Layout Shift
0
SEO 3 to fix
-
โ
One H1 heading
0 H1 tag(s) found.
Fix: ๐ Unlock with Pro
-
โ
Image alt text
1 of 1 images have no alt attribute.
Fix: ๐ Unlock with Pro
-
โ
Enough content on the page
5 words of visible text.
Fix: ๐ Unlock with Pro
-
i
Inner pages
Fewer than 2 inner pages could be read from the homepage links and sitemap, so only the homepage was graded.
-
โ
Homepage returns 200
HTTP 200
-
โ
Title tag
"Hire Filipino Remote Professionals | WorkHeroes" (47 chars)
-
โ
Meta description
152 characters
-
โ
Canonical URL
https://workheroes.ph/
-
โ
Page can be indexed
No noindex directive.
-
โ
Language declared
lang="en"
-
โ
Mobile viewport
Viewport meta tag present.
-
โ
Social share tags
og:title, og:description, og:url and og:type set, and og:image loads.
-
โ
Short redirect chain
http://workheroes.ph/ takes 1 redirect(s): 301 โ https://workheroes.ph/
-
โ
Character encoding
Charset declared in the HTML.
-
โ
Favicon
Favicon found.
-
โ
X (Twitter) card tags
twitter:card = summary_large_image, image set
-
โ
Missing pages return 404
A made-up URL returns 404.
-
โ
www and non-www go to one address
www.workheroes.ph redirects to workheroes.ph.
-
โ
robots.txt
Found at /robots.txt.
-
โ
XML sitemap
Found at https://workheroes.ph/sitemap.xml
-
โ
No broken internal links
Checked 0 internal links from the homepage.
-
โ
Accessibility
91/100 on Google Lighthouse
-
โ
Best practices
100/100 on Google Lighthouse
Security 5 to fix
-
โ
SPF record (email spoofing)
No SPF record on workheroes.ph, so any server can send email that claims to come from your domain.
Fix: ๐ Unlock with Pro
-
!
Content Security Policy
A policy is set, but it has no script-src or default-src, so scripts can load from anywhere.
Fix: ๐ Unlock with Pro
-
!
Permissions-Policy
No permissions-policy header.
Fix: ๐ Unlock with Pro
-
!
Server software not exposed
Headers reveal: Express
Fix: ๐ Unlock with Pro
-
!
DMARC policy (email spoofing)
Policy is p=none, which only monitors. Spoofed email is still delivered.
Fix: ๐ Unlock with Pro
-
โ
Served over HTTPS
The homepage loads over HTTPS.
-
โ
HTTP redirects to HTTPS
http:// returns 301 to HTTPS.
-
โ
HSTS header
strict-transport-security: max-age=31536000
-
โ
Clickjacking protection
X-Frame-Options: DENY
-
โ
X-Content-Type-Options
x-content-type-options: nosniff
-
โ
Referrer-Policy
referrer-policy: origin
-
โ
No mixed content
All resources load over HTTPS.
-
โ
Cookies set securely
4 cookie(s) set on the homepage, all with the Secure flag.
AI readiness 5 to fix
-
โ
Content readable without JavaScript
5 words in the raw HTML. Most AI crawlers don't run JavaScript.
Fix: ๐ Unlock with Pro
-
โ
Content split into headed sections
0 H2/H3 headings in the raw HTML. Answer engines lift passages section by section, using the heading to know what each one is about.
Fix: ๐ Unlock with Pro
-
!
llms.txt file
No /llms.txt file.
Fix: ๐ Unlock with Pro
-
!
Answers real questions
No question-style headings or FAQ schema on the 1 page(s) read. AI answers are built from pages that state a question and answer it directly.
Fix: ๐ Unlock with Pro
-
!
Content shows when it was updated
No lastmod dates in the sitemap and no dateModified on the homepage, so crawlers can't tell how current the content is.
Fix: ๐ Unlock with Pro
-
i
NIST, MITRE and CISA citations resolve
No NIST, MITRE or CISA links found on the homepage and 0 linked content pages and posts. Only scored on sites that cite them.
-
โ
AI crawlers allowed in robots.txt
GPTBot, ClaudeBot, PerplexityBot and others are not blocked.
-
โ
AI crawlers not blocked by firewall
Homepage loads for GPTBot, OAI-SearchBot, ClaudeBot and PerplexityBot.
-
โ
Structured data (schema.org)
JSON-LD types: Organization.
-
โ
Clear page summary
AI answers often reuse your title and meta description to describe you.
Domain all good
-
i
Domain age
Registration date not available for this domain.
-
i
Registrar
Not available.
-
i
Hosting network
Not available.