Verra Free website audit
Speed, search visibility, security and email, measured on a phone and on a computer.
Free, and no email needed to see your score.
- Six categories
- Mobile and desktop
- No email needed
- Usually under a minute
Speed
54Load time and Core Web Vitals, scored separately for a phone and a computer.
Weight 3.0
Findability
71Indexing, robots, sitemap, canonical tags, titles and structured data.
Weight 2.5
Security
88HTTPS, HSTS, headers, certificate and anything exposed that should not be.
Weight 2.0
Email security
30SPF, DKIM and DMARC, read over DNS.
Weight 1.5
Domain and hosting
95Registration expiry, nameservers and mail records.
Weight 1.0
Ready to convert
66Contact routes, tap targets, contrast and mobile usability.
Weight 1.0
The same site, two machines
On your laptop
Passed- Core Web Vitals
- Passed
- Largest paint
- 1.9s
- Performance
- 81
What you and your agency see.
On your customer’s phone
Failed- Core Web Vitals
- Failed
- Largest paint
- 4.4s
- Performance
- 59
What almost everyone who finds you sees.
A worked example so you can see the shape of the output before you run anything. Your own report replaces this, at its own address you can forward to a developer.
Everything this audit checks
The checklist
- Website speed test
- Load time measured on a mid range Android over a throttled connection, which is what most of India browses on.
- Core Web Vitals
- Largest paint, interaction delay and layout shift, scored against Google’s own thresholds on mobile and desktop separately.
- Page weight and requests
- Total size broken down by images, scripts, fonts and stylesheets, so you can see what is actually slowing it.
- Third party code
- Analytics, tag managers, chat widgets and fonts, and what each one costs you in load time.
- Search visibility
- Indexability, robots.txt, sitemap, canonical tags, page titles, descriptions and structured data.
- Security headers
- HTTPS, HSTS, content security policy, clickjacking protection and whether your software version is exposed.
- SSL certificate
- Issuer, protocol version and how many days before it expires.
- Email authentication
- SPF, DKIM and DMARC, which decide whether somebody can send email pretending to be you.
- Domain and DNS
- Registration expiry, nameservers and mail records, because an expired domain takes the site and the email down together.
- Accessibility and mobile
- Colour contrast, pinch to zoom, image descriptions and tap targets, which matter most for older customers.
Why it is worth running
Most owners have never seen their real numbers
Every person who reviews a website does it on a laptop, on office broadband. The owner, the marketing person, the agency who built it. On a laptop, most sites are genuinely fine.
Your customers are somewhere else entirely. They are on a phone, on mobile data, searching for what you sell. That is a different machine on a different connection, and it is where sites quietly fall apart. Google knows this, which is why it ranks primarily on the phone experience.
Because nobody with the power to fix it ever sees the slow version, it never gets raised. It is not negligence. It is a blind spot, and it is the single most common thing this tool finds.
What you get
A score in seconds, the diagnosis in full
The score, the six category results and the three most serious problems appear immediately and cost nothing. The full report explains every finding and what to do about it.
Your speed, as Google actually measures it
Core Web Vitals from Google’s own record of real Chrome visitors where it exists, and a laboratory run on a simulated mid range Android where it does not. Mobile and desktop reported separately, never averaged.
A filmstrip of your page loading
Eight real screenshots taken while your site loads on a slow connection. Nothing argues with a picture of your own homepage sitting blank for four seconds.
Whether Google can read your site
Indexability, crawlable links, sitemap, canonical tags and structured data. If search engines cannot follow your links, your inner pages are invisible however good they are.
Whether anyone can forge your email
SPF, DKIM and DMARC checked over DNS. Almost no free tool reports this, and a missing DMARC record means anyone can send email that appears to come from your domain.
The three fixes worth doing first
Ranked by what they are worth rather than by what is easiest to sell, with Google’s own estimate of the seconds each would save.
An honest answer when nothing is wrong
Some sites are in good shape. When yours is, the report says so and we leave you alone. That happens more often than you would expect.
Questions people ask first
If your website is fine, the report will tell you it is fine and we will leave you alone.