skewcheck

Sample report on a demo page. This is what the $19 report looks like.

Check your own site
Your website, inspected.Full report
client-site.example30 checks · HTTP 200 · 386 ms · 2 October 2026

No launch blockers found. 3 things to put right.

2 failures and 1 warning, each with what was observed and the fix. 27 checks already pass and are listed at the end.

Page and header checks: +15 pointsExcludes response time, HTTP status and robots.txt
The inspection, at a glance27 pass1 warn2 fail

In plain words

Checked 2 October 2026. The technical detail for each point follows below.

Fix before launch

  • Browsers are not told to always use the secure connection.

Should fix

  • Links shared in chat apps and social media show no proper preview.
  • Some images have no text description for screen readers and search engines.

Since the previous audit

Launch blocker cleared: Search indexing

Fixed 2

  • Meta descriptionFail → Pass
  • Search indexingFail → Pass

Still failing 3

  • Open GraphFail → Fail
  • HSTSFail → Fail
  • Image altWarn → Warn

19 page checks passed both times.

  1. Open Graph

    Missing og:image, so shared links show no proper preview.

    The fix

    Add <meta property="og:title" content="..."> and <meta property="og:image" content="https://.../image-1200x630.png"> inside <head>.

    Full guide: Open Graph
    FailMedium priority−5 points
  2. HSTS

    The Strict-Transport-Security header is missing.

    The fix

    Send Strict-Transport-Security: max-age=31536000; includeSubDomains on every HTTPS response.

    Fix for: Webflow

    # Webflow sends Strict-Transport-Security (HSTS) by default, but only on a
# connected custom domain, never on *.webflow.io. Site settings > Publishing >
# Advanced publishing options: keep HSTS on, publish to the custom domain,
# and re-check that URL.
    Full guide: HSTS
    FailHigh priority−6 points
  3. Image alt

    2 of 3 images have no alt attribute.

    The fix

    Add an alt attribute to every <img>. Describe informative images; use alt="" for decorative ones.

    Full guide: Image alt
    WarnMedium priority−4 points

Already right

27 of 30 checks pass

  • HTTPSThe final URL is served over HTTPS.
  • Mixed contentNo http:// images, scripts, stylesheets, frames, media or form targets on this HTTPS page.
  • HTTP statusThe document answered with HTTP 200.
  • Response timeThe document arrived in 386 ms.
  • TitleThe title is 52 characters.
  • Meta descriptionThe meta description is 107 characters.
  • Mobile viewportViewport tag sets width=device-width; layout not rendered.
  • Languagelang attribute present (en); value not validated.
  • H1Exactly one <h1> was found.
  • CanonicalCanonical points to https://client-site.example/.
  • Form destinationNo forms on this page.
  • Search indexingNothing on this page tells search engines to skip it.
  • Share image loadsNo og:image to fetch (see Open Graph).
  • Twitter cardtwitter:card present.
  • FaviconIcon link present; the icon file was not fetched.
  • Structured dataJSON-LD present; contents not validated.
  • Content-Security-PolicyContent-Security-Policy header present; the policy was not evaluated.
  • X-Content-Type-OptionsX-Content-Type-Options: nosniff.
  • Clickjacking protectionFraming restricted by X-Frame-Options.
  • Referrer-PolicyReferrer-Policy is set.
  • CompressionThe document is compressed with br.
  • Server fingerprintNo Server or X-Powered-By header was sent.
  • Broken filesChecked 3 same-site files; files on other sites were not checked.
  • Visible copy103 words of visible copy.
  • Placeholder textNo placeholder text found in the page's HTML.
  • robots.txt/robots.txt answered with 200 and lets search engines in.
  • SitemapFound /sitemap.xml (not listed in robots.txt).

Network checks, not in the comparison

CheckPreviousLatest
HTTP statusPassPass
Response timePassPass
Share image loadsPassPass
Broken filesPassPass
robots.txtPassPass
SitemapPassPass

How the score was reached

Every audit starts at 100. Each check that warns or fails subtracts a fixed weight; a pass subtracts nothing. This page lost 15 points across 3 issues, which leaves 85.

Scope and limits

One public page was read as an anonymous visitor: https://client-site.example/, plus https://client-site.example/robots.txt, on 2 October 2026. Nothing behind a login was reached and nothing on the site was changed. This is a snapshot, not a guarantee; a re-check after the fixes gives a new score.

Checked the first HTML response from client-site.example on 2 October 2026. Not rendered in a browser, so titles, alt text and copy added by JavaScript are not seen.

Checked by Skewcheck · skewcheck.com · client-site.example · 2 October 2026