How to check your business website for free: 30 tests in 30 seconds

A customer who opens your company’s website on a phone decides within a few seconds. If the page loads slowly, jumps around, or the browser warns about an unsafe connection, the customer goes back to the search results and calls your competitor. You never find out, because nobody calls to say they are giving up.

The good news: most of these problems can be detected automatically, for free and in half a minute. In this article I show how to do it, what the individual results mean and where to start fixing.

How to check your website in 30 seconds

The fastest way is my tool Check your website. You enter the address and after a few dozen seconds you get a score from 0 to 100 in six areas: speed, SEO, security, accessibility, AI visibility, and domain and email. Next to every problem there is a short explanation and a hint on how to fix it.

The tool checks only what the site shows every visitor, so you can also test a competitor’s website. Speed is measured by Google PageSpeed Insights in the mobile version. The report has its own link, valid for 30 days, which you can send to a business partner or to the person who built your site.

If you prefer Google’s tools, check the site in PageSpeed Insights and in Google Search Console. They show a lot, but say nothing about email on your domain or about security headers, and you need to know how to read the results.

What the results mean: area by area

1. Speed on mobile

Google rates speed with three metrics called Core Web Vitals:

• LCP (Largest Contentful Paint), the time until the main content is displayed. A good result is up to 2.5 s, a poor one is over 4 s.
• CLS (Cumulative Layout Shift), how much the content jumps around while loading. A good result is up to 0.1.
• INP (Interaction to Next Paint), how quickly the page responds to a click. A good result is up to 200 ms. It is measured on real users, so in the test it is replaced by the time scripts block the page (TBT).

Speed is one of the signals Google takes into account, but what matters more is that a slow site loses customers regardless of its position in the results. The most common causes are oversized photos, a heavy theme with many plugins, sliders at the top of the page and several font families. How I solved this on my own site, I described in the speed case study.

2. SEO, or visibility in Google

Here the tool checks the basics without which a good ranking is hard to get:

• The page title ideally has 30–60 characters and starts with the service and the place, e.g. “Bathroom renovation Giżycko | Company name”.
• The description (meta description) has 120–160 characters and encourages a click in the search results.
• A single H1 heading says what the page is about.
• The sitemap (sitemap.xml) and a correct robots.txt help Google find all the subpages.
• Structured data describe the company, services and reviews in a format that search engines understand.

Be especially careful with the noindex tag. It is a common leftover from the build: the contractor blocks indexing while the work is going on and forgets to remove the block. The site looks normal, but Google doesn’t show it.

3. Security

The basis is HTTPS with a permanent redirect from the http:// version and a certificate that renews automatically. When a certificate expires, the browser shows a full-screen warning and few people click through.

The second layer is security headers, short instructions for the browser: HSTS forces an encrypted connection, CSP limits the effects of foreign code being injected, and X-Frame-Options protects against embedding your site in someone else’s frame. Setting them is usually a few lines in the server configuration, and they clearly make typical attacks harder. The tool also checks whether the server reveals the software version and whether the page loads resources over unsecured http://.

The security.txt file is optional. It gives an address where someone who has found a vulnerability can report it, instead of publishing it on the internet right away.

4. Accessibility

The tool checks whether the page language is marked in the code, whether the page can be zoomed on a phone and whether images have alternative descriptions. On top of that comes Google’s accessibility score. Since 28 June 2025, some businesses also have a legal obligation to provide accessibility, above all online stores. Who is affected, I described in a separate article on website accessibility.

5. AI visibility

More and more customers ask ChatGPT, Perplexity and Copilot about businesses. The tool checks whether structured data describe the company (name, address, phone, service area), whether robots.txt doesn’t block AI search crawlers and whether there is an llms.txt file. What this file really gives you, and what it doesn’t, I explain in the text about llms.txt.

6. Domain and email

This is the area business owners think about least, and it directly affects sales. SPF and DMARC records tell mail servers who may send email on behalf of your domain. Without them, quotes and invoices land in spam more often, and a fraudster can more easily impersonate your address. How to set this up step by step, I described in the article about company emails landing in spam.

How I calculate the overall score

The overall score is a weighted average of the six areas: speed and SEO 25% each, security 20%, and accessibility, AI visibility, and domain and email 10% each. Speed and SEO have the highest weight, because they have the strongest effect on whether a customer reaches the site at all and stays on it.

A score above 90 means the site is in good technical shape. A score of 50–89 is a typical business website with a few neglected points. Below 50, something is seriously getting in the way of customers or Google.

What to fix first

If the report shows a lot of remarks, don’t fix everything at once. I suggest this order:

1. Urgent results. Noindex, no HTTPS, an expiring certificate, a server error. These block customers or Google right now.
2. Speed on mobile. Especially LCP above 4 s and a layout that jumps around.
3. SEO basics. Title, description, H1 heading, sitemap.
4. Email on your domain. SPF and DMARC are a one-time change in DNS, and emails stop landing in spam.
5. Security headers and AI add-ons. Important, but less urgent than the rest.

What an automated audit won’t tell you

The tool is good at detecting technical errors, but it doesn’t assess content. It won’t tell you whether the offer is clear, whether the photos build trust, whether the form puts people off with too many fields and whether a customer will find the phone number right away. Automated accessibility tests also detect only part of the problems; the rest has to be checked by hand, e.g. whether the site can be used with the keyboard alone.

That’s why you should treat the score as a checklist, not as a verdict on the whole site. A site with a score of 95 can sell badly, and a site with a score of 70 can bring in many inquiries because it has a great offer.

How much fixing the results costs

It depends on what came out in the report. For orientation, here are my net prices:

• minor technical fixes (headers, redirects, email records) I do as part of technical maintenance from PLN 149 per month,
• a security audit with a report and fixes costs from PLN 990,
• adapting a site to WCAG costs from PLN 1,490,
• SEO is from PLN 790 per month, and an audit alone from PLN 990,
• when the old site is slow and hard to fix, a redesign costs from PLN 2,900.

Check your own website

Check your website for free, and under the result send me the report with one click. Within 24 hours I will reply with which fixes will give the most and how much they cost. New clients get a 20% discount on their first order.