Most Free Audits Tell You Almost Nothing
Search for "free website audit" and you will find dozens of tools offering to scan your site. Most of them check one dimension — speed, SEO, or security — and present the results behind an email gate or a paywall that unlocks "full results."
The problem is not that these tools are bad. It is that a partial audit creates a false sense of completeness. You check your speed score, see a B+, and assume everything is fine. Meanwhile, your site is missing half its security headers, your canonical URLs are misconfigured, and your SSL certificate expires in two weeks.
A useful website audit examines your site across multiple dimensions simultaneously and gives you specific, actionable information — not just a single number with no context on what to do about it.
This guide covers what a thorough website audit should check, how to evaluate the results, and what separates an actionable audit from a vanity score.
The Four Dimensions of Website Health
A comprehensive audit evaluates your site across four categories that together represent the full picture of website health. Checking only one or two dimensions leaves blind spots that can hurt your visitors, your search rankings, and your security.
1. Performance (Speed)
Performance auditing measures how quickly your site loads and becomes interactive. The key metrics are:
- Largest Contentful Paint (LCP) — how long until the main content is visible. Google considers under 2.5 seconds "good."
- First Contentful Paint (FCP) — how long until the first text or image appears. Under 1.8 seconds is the target.
- Cumulative Layout Shift (CLS) — how much the layout moves during loading. Under 0.1 is "good."
- Total Blocking Time (TBT) — how long the main thread is blocked, preventing user interaction. Under 200ms is the target.
- Speed Index — how quickly content is visually populated in the viewport.
- Time to Interactive (TTI) — when the page becomes fully interactive.
A free audit that only reports a single "speed score" without showing these individual metrics is not giving you enough information to act on. You need to know which specific metric is the bottleneck so you can fix the right thing.
2. Security
Security auditing checks whether your server is configured to protect visitors from common web attacks. The foundational security items every site should have are:
- SSL/TLS certificate — is the connection encrypted?
- HTTPS redirect — does HTTP traffic automatically redirect to HTTPS?
- HSTS header — does the server tell browsers to always use HTTPS?
- Content Security Policy — does the server restrict which scripts and resources can load?
- X-Frame-Options — is the site protected against clickjacking?
- X-Content-Type-Options — is MIME-type sniffing prevented?
- Referrer-Policy — is referrer information controlled when visitors navigate away?
- Permissions-Policy — are unused browser APIs (camera, microphone, geolocation) disabled?
- Mixed content — does the HTTPS page load any resources over plain HTTP?
Many free audit tools skip security entirely. If your audit does not check at least SSL, HSTS, and CSP, it is not a comprehensive audit.
3. SEO (Search Engine Optimization)
Technical SEO auditing verifies that search engines can properly understand, index, and rank your pages. The checks that matter for a single-page audit are:
- Meta title — present, appropriate length, and descriptive
- Meta description — present and within the recommended character range
- H1 heading — exactly one per page, containing the primary topic
- Canonical URL — present and pointing to the correct version of the page
- Viewport meta tag — properly configured for mobile responsiveness
- Open Graph tags — present so the page displays correctly when shared on social media
- Image alt text — images have descriptive alt attributes for accessibility and SEO
- HTML lang attribute — the page declares its language for search engines and screen readers
- Robots.txt — the site has a robots.txt file guiding crawler behavior
A free audit that only checks your meta title and description is leaving out eight other signals that search engines evaluate.
4. Technology Stack
Technology auditing identifies what your site is built with — the CMS, JavaScript frameworks, server software, and third-party dependencies. This matters because:
- Outdated software is a security risk. A WordPress site running a version from two years ago has known vulnerabilities.
- Technology choices affect performance. A site loading three JavaScript frameworks when it needs one has unnecessary overhead.
- Dependencies change without notice. A CDN provider update, a framework version bump, or a CMS migration can introduce issues across all other categories.
Most free audits do not include technology detection at all, which means they cannot tell you that your WordPress installation is outdated or that your server is exposing version information in headers.
How to Evaluate a Free Audit Tool
Not all free website audits are created equal. Here is what to look for and what to be skeptical about.
Check Count and Coverage
How many individual checks does the tool run, and how many categories do they cover?
A tool that runs 5 checks across one category is a spot check, not an audit. A tool that runs 30+ checks across four categories is providing meaningful coverage.
PageVital runs 33 automated checks across all four categories:
| Category | Checks | Weight | |----------|--------|--------| | Performance | 7 checks (LCP, FCP, CLS, TBT, Speed Index, TTI, Performance Score) | 30% | | Security | 9 checks (SSL, HSTS, CSP, X-Frame, X-CTO, Referrer, Permissions, HTTPS redirect, mixed content) | 25% | | SEO | 10 checks (meta title, meta description, H1, canonical, viewport, OG tags, image alt, lang, robots.txt, PSI score) | 25% | | Technology | 7 checks (CMS, JS framework, server, powered-by, WordPress, WP version, WP outdated) | 20% |
The free tier includes 3 scans per month — enough to audit your primary site and compare it against a competitor or two.
Actionability Over Vanity
A good audit gives you a prioritized list of specific items to fix. A bad audit gives you a single number and says "could be better."
Look for:
- Per-check pass/fail status — know exactly which items passed and which failed
- Severity indicators — understand which failures are critical (fix today) versus informational (fix when convenient)
- Specific descriptions — the audit should explain what each check means, not just label it with a technical identifier
- Remediation guidance — bonus if the tool tells you how to fix each issue, but at minimum you should be able to search for the specific item and find solutions
Scoring Transparency
If a tool gives you a score, you should be able to understand how it was calculated. A score of 73 means nothing if you do not know:
- What checks contributed to it
- How different checks are weighted
- What score range maps to what grade
PageVital's scoring is fully transparent: each category is scored using severity-weighted averages (critical checks count 3×, high 2×, medium 1×, low 0.5×), and the overall score is a weighted combination of category scores (Speed 30%, Security 25%, SEO 25%, Technology 20%). Grades follow standard boundaries: A ≥ 90, B ≥ 80, C ≥ 70, D ≥ 60, F < 60.
No Email Gates for Basic Results
Be wary of tools that require your email address before showing you any results. A legitimate free audit delivers value upfront — you should see your scores, grades, and individual check results before being asked to create an account or provide contact information.
PageVital shows full scan results immediately after the scan completes. No email required. No results hidden behind a signup wall.
Running Your Free Audit: A Step-by-Step Approach
Step 1: Scan Your Homepage
Start with your main URL. The homepage is your highest-traffic page and the one most likely to be properly maintained. It establishes a baseline for what your site's best health looks like.
Step 2: Scan a Key Interior Page
Pick an important interior page — a product page, a services page, or your most-trafficked blog post. Interior pages often have different templates, different third-party scripts, and different performance characteristics than the homepage. Issues that the homepage handles correctly may be broken on interior pages.
Step 3: Review Category by Category
Do not fixate on the overall grade. Drill into each of the four categories:
- Performance: Are any of the Core Web Vitals metrics in the "poor" range? An overall B in performance with a failing LCP means you have a specific, fixable problem.
- Security: How many of the 9 security checks passed? Missing headers are straightforward fixes with outsized impact on your security posture.
- SEO: Are foundational elements like meta title, canonical URL, and OG tags present? These are table-stakes items that many sites get wrong.
- Technology: Is your CMS or WordPress version current? Outdated software is the most common source of security vulnerabilities on the web.
Step 4: Prioritize by Severity
Not every failing check is equally urgent. Fix critical items first (SSL issues, HTTPS redirect problems), then high-severity items (missing HSTS, broken canonical URLs), then medium and low items.
PageVital's check results include severity ratings that map directly to this prioritization. A scan might show 5 failures, but if 3 are low severity and 2 are critical, you know exactly where to start.
Step 5: Rescan After Fixes
After addressing the highest-priority items, run another scan to verify the fixes took effect. This serves two purposes: confirming the issue is resolved, and establishing a new baseline score that reflects your improvements.
Beyond the Free Audit
A single audit is a starting point. The real value comes from building website health into your regular workflow:
- Scan monthly at minimum to catch regressions before they compound
- Scan after deployments to verify that code changes did not break existing checks
- Scan competitors to understand how your site health compares within your industry
- Track scores over time to demonstrate improvement to stakeholders or clients
PageVital's free tier gives you 3 scans per month to establish this practice. For teams that need more frequent scanning, batch processing, or API access, paid tiers scale to match your workflow.
Start Your Free Audit Now
Every website has room for improvement. The question is whether you know where those improvements are needed — or whether you are guessing.
Run a free scan with PageVital to get a comprehensive audit across performance, security, SEO, and technology in seconds. See exactly which of the 33 automated checks your site passes and fails, understand your A–F grades across all four categories, and get a prioritized list of what to fix first.