Skip to content

Scan your site for free

Lab scores for speed, accessibility, best practices and SEO, security-header grading, and email-authentication checks that speed tools skip. One graded verdict, one prioritized fix list.

  • No signup
  • Up to 90 seconds
  • Nothing changes on your site

Scan public sites you own or are authorized to test.

https://example.comReady

7 groups of checks run side by side, up to 90 seconds in all.

Our own checks

  • DNS and domain

    Your domain, how old it is, and whether it resolves

  • HTTPS and redirects

    Whether visitors reach the secure version of your site

  • Security headers

    The browser protections your server turns on

  • Email authentication

    SPF, DKIM and DMARC, which help your email reach the inbox

  • Content and SEO

    Titles, headings, robots.txt, sitemap and AI readiness

  • Site reputation

    Whether Google flags your site as risky

Google's lab test

  • Performance and accessibility

    Speed, accessibility, SEO and best practices in a lab test

Speed and accessibility are measured in a lab test. Security and DNS checks run at our edge. Free, no signup.

What the scan checks

One scan runs 7 groups of checks. They add up to the four lab-test scores and the security and email posture most site owners never see.

Measured in a lab test

  • Performance

    How fast your page loads in one lab test on a simulated phone: LCP, TBT and CLS, and what slows the page down. It is one reading, not a record of every visit.

  • Accessibility

    Automated tests for contrast, labels and page structure, based on WCAG. They find part of what a visitor can meet, not all of it. IS 5568 is the Israeli standard for web accessibility.

  • Best Practices

    HTTPS and browser console errors in the lab test, plus our own read of old script libraries the page names in its script addresses and code.

  • SEO

    Whether search engines can read your page: crawlability, meta tags, structured data and mobile basics. It does not say where you rank.

Checked from our edge

  • Security Posture

    Read at our edge, not in the lab test: security headers (CSP, HSTS, clickjacking), cookie flags, mixed content, the software versions your page and headers name, and known key shapes in the page HTML, graded A to F. It reads one page from outside and same-site scripts. Certificate facts are as issued. Protocol versions and ciphers are not tested. It is an automated read-only scan, not a certified assessment.

  • Email Authentication

    Can receivers tie your mail to your domain? SPF, DMARC policy, DNSSEC and CAA, read straight from your DNS, and DKIM at the selectors your provider documents or common ones. Missing records can send your mail to spam.

What each check means

One short guide per check: what it is, what we read, and what to ask your provider.

Arcana, the open-source tool for AI coding agents

Context intelligence for AI coding agents. Tested skills, cross-session memory, and MCP management. One npm install.

Without it, an AI coding agent loads everything and bloats its context, or loads nothing and does not know your stack. Arcana picks what fits.

Arcana gives Claude Code, Cursor, Codex, Gemini, Windsurf, and more agents budget-aware skill curation, output compression, and memory that persists across sessions. Seven platforms, no configuration required.

npm i -g @sporesec/arcana
View on npm (Opens in a new tab)
  • Focused, Tested Skills

    Frontend, backend, Go, TypeScript, security, testing, DevOps, and more.

  • Budget-Aware Curation

    Loads only the skills that fit your context budget, then compresses their output.

  • Cross-Session Memory

    Persistent project memory and MCP management across every session.

  • 7 Platforms, Open Source

    Claude Code, Cursor, Codex, Gemini, Windsurf, Aider, Antigravity. Apache-2.0 on npm.

Want a deeper analysis?

We walk through your findings with you and hand you a prioritized fix plan.

Book a free findings review