Your report
Website check-up for tidycutbarbers.example
Website quality score
Needs work
Several things need fixing. We checked six areas.
Some things don't apply to your site.
Fix these first
Start with number one. Not a tech person? Send this report to whoever built your site.
Some servers have a security problemFix this
Some visitors may see a full-page warning, depending on which server answers.
For your web personTechnical detail
One of this site's 5 servers has a certificate that expired 6 days ago. Ask your host why the servers behind this address don't all use the same, valid certificate.
Hard to use on a phoneFix this
Nobody scrolls sideways to read a page; they leave.
For your web personTechnical detail
The page has no mobile layout, so a phone shrinks it to 39% of its width. Add a viewport tag and a responsive theme.
Some links lead nowhereWorth fixing
A broken link looks neglected and loses the visitor.
For your web personTechnical detail
3 links on the page go to pages that no longer exist: /prices-2023, /team and /gallery-old. Fix or remove them.
Everything we checked
Your six areas, each with its own result out of 100. Tap one to see what we found.
Security802 to fix · 2 worth fixing · 15 fine
Is the front door locked? Your secure connection, safety settings and email records.
Some servers have a security problemFix this
Some visitors may see a full-page warning, depending on which server answers.
For your web personTechnical detail
One of this site's 5 servers has a certificate that expired 6 days ago. Ask your host why the servers behind this address don't all use the same, valid certificate.
Fake email in your name allowedFix this
It tells Gmail and Outlook to block email pretending to be you.
For your web personTechnical detail
Add a DMARC record to your domain. Start with p=none, then move to p=quarantine after a few weeks.
No protection against injected codeWorth fixing
It limits the damage if someone slips harmful code onto your page.
For your web personTechnical detail
Add a Content-Security-Policy header so the browser only runs scripts from places you allow.
Out-of-date code with known holesWorth fixing
Attackers scan for these automatically.
For your web personTechnical detail
The page loads jQuery 1.12, which has known security holes. Update it, or remove it if nothing uses it.
- The padlock: every visit is secureFine
- Up-to-date secure connectionFine
- Secure version always usedFine
- Nothing insecure on a secure pageFine
- Protection against fake page copiesFine
- Browser file-type protectionFine
- What you tell other sitesFine
- Camera, microphone and location locked downFine
- Cookies stored safelyFine
- Your website software version is hiddenFine
- Not on Google's unsafe-sites listFine
- Email: who may send as youFine
- Email protection: signed emailsFine
- Your web address can't be hijackedFine
- Your web address is paid upFine
Speed and page health834 worth fixing · 10 fine
How fast the page is, whether Google can find it, and whether it works for everyone.
Some links lead nowhereWorth fixing
A broken link looks neglected and loses the visitor.
For your web personTechnical detail
3 links on the page go to pages that no longer exist: /prices-2023, /team and /gallery-old. Fix or remove them.
The page loads slowlyWorth fixing
People leave a slow page before it finishes loading.
For your web personTechnical detail
The top photo is 3.4 MB. Resize it to about 1,600 px wide and save it as WebP.
Page is slow to become usableWorth fixing
Google uses this in its rankings, and visitors feel it straight away.
For your web personTechnical detail
The main picture shows after 6.2 s on a phone. Shrinking the top photo is the biggest win.
The page is heavy to downloadWorth fixing
A heavy page is slow on phones and mobile data.
For your web personTechnical detail
The page downloads 4.8 MB. Most of it is the top photo.
- Image descriptions and sizesFine
- Unfilled template text on the pageFine
- Your page title and search descriptionFine
- One clear main headingFine
- Search engine basicsFine
- Instructions for search engines (robots file)Fine
- A page map for search enginesFine
- Easy to use with a disabilityFine
- Accessibility problems on the pageFine
- Built the modern, safe wayFine
Works on phones402 to fix · 1 worth fixing · 1 fine
Most visitors arrive on a phone.
Page may not fit a phoneFix this
Nobody scrolls sideways to read a page; they leave.
For your web personTechnical detail
The page has no mobile layout, so a phone shrinks it to 39% of its width. Add a viewport tag and a responsive theme.
Text hard to read on phonesFix this
If people have to pinch to zoom, most won't bother.
For your web personTechnical detail
At phone size most text is under 12 px. A responsive theme fixes this together with the layout.
Buttons hard to tap on phonesWorth fixing
Small buttons get missed, and a missed tap is a lost call or booking.
For your web personTechnical detail
Several links sit too close together to tap on a phone. Give each at least 48 px of space.
- Set up for phonesFine
Legal basics641 to fix · 1 worth fixing · 2 fine
The notices and company details a site should show.
No privacy notice foundFix this
GDPR requires one if your site collects any personal details.
What to do Add a privacy notice page and link it in the footer: what you collect, why, and how people ask you to delete it.
You can do thisNo accessibility statement foundWorth fixing
Some businesses, mainly those selling online, must publish one under the EU Accessibility Act. For others it is good practice.
What to do Add a short accessibility page: how to reach you if something on the site doesn't work for someone.
You can do this- Company details shown on your siteFine
- Asking before setting cookiesFine
UK company details shownDoesn't apply
the business isn't in the UK.
Contact details581 to fix · 1 worth fixing · 3 fine
Can a customer reach you, book, or find you?
Phone number isn't tap-to-callFix this
On a phone, one tap should ring you; copying a number loses calls.
What to do Turn your phone number into a tap-to-call link.
For your web personNo opening hours on the siteWorth fixing
It's one of the first things people look for.
What to do Write your opening hours on the home page as plain text.
You can do this- A way to message youFine
- Address or map shownFine
- Contact details easy to findFine
Book online or chatDoesn't apply
bookings are by phone.
Found online643 worth fixing · 1 fine
Whether search tools can find the facts about your site.
Site details missing for GoogleWorth fixing
Helps search engines show your details in results; not needed for AI search.
What to do Add a short block of your details to your home page.
For your web personShared links may look poorWorth fixing
It controls the picture and title shown on Facebook, WhatsApp and LinkedIn.
What to do Add a title, a short description and a picture so shared links look right.
For your web personNo plain sentence about your siteWorth fixing
People and assistants need to understand your site in seconds.
What to do Put one plain sentence at the top of your home page saying what you do and where.
You can do this- AI assistants allowed inFine
AI summary file (optional)Optional
Optional. Google doesn't use it, and there's little sign AI tools rely on it. Nothing you need to do.
What we check, and what we don't
We read your public pages the way a visitor and a search engine do. We can't see anything behind a login. This is not legal advice or a certificate of compliance.
For your web developerThe technical detail behind every check
Fix this Fits a phone screen without zooming or sideways scrolling mobile-fits-screen
The page has no mobile layout, so a phone shrinks it to 39% of its width. Add a viewport tag and a responsive theme.
Fix this Text is readable on a phone without zooming mobile-readable-text
At phone size most text is under 12 px. A responsive theme fixes this together with the layout.
Fix this TLS certificate expiry certificate-expiry
One of this site's 5 servers has a certificate that expired 6 days ago. Ask your host why the servers behind this address don't all use the same, valid certificate.
| Days until expiry | -6 |
|---|---|
| Addresses checked | 5 |
| Addresses failed | 1 |
| Address results | none |
Fix this DMARC record and policy dmarc-record
Add a DMARC record to your domain. Start with p=none, then move to p=quarantine after a few weeks.
Fix this Privacy notice link privacy-notice-link
Add a privacy notice page and link it in the footer: what you collect, why, and how people ask you to delete it.
Fix this Clickable phone number (tel:) clickable-phone
The phone number is plain text. Make it a tel: link so a phone can call it with one tap.
Worth fixing Lighthouse performance score lighthouse-performance
The top photo is 3.4 MB. Resize it to about 1,600 px wide and save it as WebP.
Worth fixing Core Web Vitals (LCP, CLS, INP) core-web-vitals
The main picture shows after 6.2 s on a phone. Shrinking the top photo is the biggest win.
Worth fixing Total page weight page-weight
The page downloads 4.8 MB. Most of it is the top photo.
Worth fixing Broken internal links broken-internal-links
3 links on the page go to pages that no longer exist: /prices-2023, /team and /gallery-old. Fix or remove them.
Worth fixing Buttons and links are big enough to tap mobile-tap-targets
Several links sit too close together to tap on a phone. Give each at least 48 px of space.
Worth fixing Content-Security-Policy header content-security-policy
Add a Content-Security-Policy header so the browser only runs scripts from places you allow.
Worth fixing Known-vulnerable JavaScript library versions vulnerable-js-libraries
The page loads jQuery 1.12, which has known security holes. Update it, or remove it if nothing uses it.
Worth fixing Accessibility statement link accessibility-statement-link
Add a short accessibility page: how to reach you if something on the site doesn't work for someone.
Worth fixing Opening hours present opening-hours-present
Opening hours are only in a picture. Type them on the page so Google and phones can read them.
Worth fixing Structured data (JSON-LD) structured-data
Add LocalBusiness details (name, address, hours) as structured data so Google and AI assistants can read them.
Worth fixing Open Graph tags open-graph-tags
Add a share title, description and picture so your link looks right when people send it.
Worth fixing Plain description of what the business does plain-description
No sentence says plainly what you do and where. Add one near the top: 'Barber shop in <town>: cuts, fades and beard trims.'
Fine Lighthouse accessibility score lighthouse-accessibility
Fine.
Fine Lighthouse best-practices score lighthouse-best-practices
Fine.
Fine Lighthouse SEO score lighthouse-seo
Fine.
Fine Image alt text and sizing images-alt-and-size
Fine.
Fine Page title and meta description title-and-meta-description
Fine.
Fine A single, clear main heading single-h1
Fine.
Fine Sitemap present sitemap-present
Fine.
Fine robots.txt present robots-present
Fine.
Fine Automated accessibility violations (axe-core) axe-violations
Fine.
Fine Unrendered template placeholders unrendered-template-placeholders
Fine.
Fine Set up for phones (viewport tag) mobile-viewport
Fine.
Fine HTTPS enforced https-and-redirect
Fine.
Fine TLS protocol version tls-version
Fine.
Fine HTTP Strict Transport Security (HSTS) hsts
Fine.
Fine Clickjacking protection (X-Frame-Options / frame-ancestors) x-frame-options
Fine.
Fine X-Content-Type-Options header x-content-type-options
Fine.
Fine Referrer-Policy header referrer-policy
Fine.
Fine Permissions-Policy header permissions-policy
Fine.
Fine Cookie security flags (Secure / HttpOnly / SameSite) cookie-flags
Fine.
Fine No mixed content on an HTTPS page mixed-content
Fine.
Fine CMS / plugin version leak generator-and-cms-version-leak
Fine.
Fine SPF record (email spoofing protection) spf-record
Fine.
Fine DKIM record (email signing) dkim-record
Fine.
Fine DNSSEC dnssec
Fine.
Fine Domain registration expiry (RDAP) domain-expiry
Fine.
Fine Google Safe Browsing status safe-browsing
Fine.
Fine Company details on your website company-details-in-footer
Fine.
Fine Cookie consent present cookie-consent-present
Fine.
Fine Contact details findable contact-details-findable
Fine.
Fine A way to get in touch (form, email or phone) contact-route
Fine.
Fine Address and/or embedded map present address-and-map-present
Fine.
Fine AI assistants' search crawlers allowed in robots.txt robots-ai-crawlers
Fine.
Doesn't apply Trading disclosure details (Companies Act 2006) uk-trading-disclosure
the business isn't in the UK.
| Applies | no |
|---|
Doesn't apply Booking, WhatsApp, or live chat present booking-or-chat-present
bookings are by phone.
| Applies | no |
|---|
Optional llms.txt (optional) llms-txt-present
optional: no AI summary file found.
| Applies | no |
|---|