Website Launch Checks

Missing HTTPS

HTTPS encrypts data between your visitors and your server. Without it, passwords, credit cards, and personal data are transmitted in plain text.

Missing Content-Security-Policy Header

A Content-Security-Policy (CSP) header tells browsers which sources of content are allowed to load. Without it, your app is vulnerable to cross-site scripting (XSS) attacks.

Missing Strict-Transport-Security Header

The Strict-Transport-Security (HSTS) header tells browsers to always use HTTPS for your domain, preventing protocol downgrade attacks.

Missing X-Frame-Options Header

Without X-Frame-Options, your page can be embedded in an iframe on a malicious site, enabling clickjacking attacks.

Exposed API Keys in Source

API keys, tokens, and secrets exposed in client-side JavaScript can be extracted by anyone viewing your page source.

Mixed Content (HTTP on HTTPS Page)

Mixed content occurs when an HTTPS page loads resources (images, scripts, stylesheets) over HTTP, breaking the security chain.

Missing Meta Description

The meta description is the snippet shown beneath your page title in search results. Without one, Google auto-generates a snippet — often poorly.

Missing Open Graph Tags

Open Graph tags control how your page appears when shared on Twitter/X, Facebook, LinkedIn, and Slack.

Missing H1 Heading

The H1 heading is the primary signal to search engines about your page's topic. Every page should have exactly one.

Missing sitemap.xml

A sitemap helps search engines discover and index all pages on your site. Without it, new pages may take weeks to appear in search results.

Images Missing Alt Text

Alt text describes images for screen readers and search engines. Without it, visually impaired users can't understand your content.

No Canonical URL Tag

A canonical link tells search engines which URL is the official version of a page, preventing duplicate content penalties.

No Favicon Detected

Favicons appear in browser tabs, bookmarks, and some search results. They build brand recognition and professionalism.

No About Page Found

An About page builds trust with visitors and is required for Google AdSense approval. It tells users and search engines who runs the site.

No Contact Page Found

A Contact page provides users with a way to reach you. Google AdSense, Mediavine, and other ad networks require a visible contact method.

Missing Viewport Meta Tag

The viewport meta tag tells mobile browsers how to scale your page. Without it, your site appears zoomed out and unusable on phones.

AI Crawlers Blocked in robots.txt

If your robots.txt blocks GPTBot, ClaudeBot, or PerplexityBot, your content won't appear in AI-powered search results and chatbot answers.

No llms.txt File

llms.txt is an emerging standard that helps AI models understand your website's purpose, content structure, and key information at a glance.

No JSON-LD Structured Data

JSON-LD structured data provides machine-readable context about your content. Without it, AI engines must guess what your page is about.

No FAQ Schema or Q&A Content

FAQ schema (FAQPage) gives AI engines pre-formatted question-answer pairs. This is the single most effective way to get your content directly quoted in AI answers.

No Publish or Update Date

AI engines prioritize recent, dated content. Without publish or update dates, your content may be ranked as potentially outdated.

No Privacy Policy Found

A Privacy Policy is legally required in most jurisdictions (GDPR, CCPA, PIPEDA) if you collect any personal data — including through analytics or contact forms.

No Terms of Service Found

Without Terms of Service, you have no contractual protection if users abuse your service, and no framework for liability limitations.

No Cookie Consent Banner

If your site uses cookies (analytics, ads, tracking), GDPR and ePrivacy Directive require explicit user consent before setting non-essential cookies.