One Click Site Inspector by Tom Isgren

Site Inspector runs 130+ automated checks on any website in one click. No account needed, no data sent anywhere. Everything runs locally in your browser.

You get instant grades (A+ to F) across 6 categories:

SECURITY (21 checks)
- HTTPS, HSTS, CSP quality analysis
- Security headers (X-Content-Type-Options, X-Frame-Options, Referrer-Policy, Permissions-Policy)
- SRI verification for third-party scripts
- Mixed content detection
- security.txt (RFC 9116) presence

SEO (55+ checks)
- Title tag length and quality
- Meta description CTA detection (English + Swedish)
- Heading hierarchy validation (H1 through H6)
- Open Graph and Twitter Card completeness
- OG image dimensions (1200x630 check)
- Structured data / JSON-LD detection and type listing
- FAQ schema vs visible content validation
- Canonical tag validation (tracking param aware)
- Hreflang tags
- External outbound link count
- Descriptive alt text quality (not just presence)
- llms.txt for AI search readiness
- robots.txt and XML sitemap detection
- SERP preview

PERFORMANCE (18 checks)
- Core Web Vitals: LCP, INP, CLS
- TTFB, FCP, DOM Content Loaded
- Page weight and request count
- Image format, lazy loading, dimensions
- Font loading (font-display, file count, Google Fonts family count)
- Inline CSS bloat detection
- Render-blocking script detection
- HTTP/2+ protocol check

PRIVACY (12 checks)
- Consent banner detection (16 platforms supported)
- Pre-consent tracking detection (GDPR violation)
- Cookie count and security audit
- Third-party domain count
- Tracker identification
- AI training bot blocking check
- Privacy policy detection (warns on external-only policies)
- Terms and cookie policy detection

ACCESSIBILITY (21 checks)
- WCAG AA color contrast analysis (skips image/gradient backgrounds)
- Landmark roles (main, nav, header, footer)
- Skip navigation link
- Form labels and button labels
- Image alt text
- Video captions
- Heading order and structure
- Keyboard focus indicators

TECH STACK DETECTION
- Identifies frameworks, CMS platforms, page builders, hosting providers, and analytics tools
- Detects 30+ technologies across 5 categories

EXPORT OPTIONS
- PDF report with full findings
- CSV export for spreadsheets

KEYWORD ANALYSIS
- Top keyword extraction with density percentages
- Keyword distribution across headings vs body

Built by Bright Interaction (https://brightinteraction.com) - a security and compliance company based in Sweden. We use this tool ourselves to audit 599+ websites.

100% free. No ads. No tracking. No account required.

Category

Developer Tools

Language

English

Privacy Policy URL

https://brightinteraction.com/privacy

Homepage URL

https://brightinteraction.com/platform

What's New in 1.4.0

• Redirect detection: prevents mixing headers from one site with content from another after navigation
• Report URL now shows the actual analyzed page, not the tab URL (fixes wrong URL in reports)
• Performance scoring rebalanced: DOMContentLoaded and Full Load thresholds relaxed and graduated (no more F grades for 3-second loads)
• TTFB "good" threshold raised from 300ms to 500ms (realistic for most hosting)
• URL length check now uses canonical URL, no longer penalizes pages for UTM/tracking parameters
• CSP wildcard detection: no longer flags subdomain patterns (*.example.com) as bare wildcards
• Consent banner detection: added CookieScript, HubSpot Cookie Banner
• Third-party domain classification: added Bing, Snapchat, Storyblok, Squarespace, Trustpilot, Voyado, New Relic, and more
• Cookie classification: added Didomi, CookieScript consent cookies
• HubSpot domains (hs-banner, hs-analytics, hs-scripts, etc.) now properly categorized

What's New in 1.3.1

• Accuracy improvements from testing against Forbes, Apple, CDON, Nelly, Brownells, AlternativeTo, Product Hunt, and more
• FAQ schema: validates question text appears on page (any layout, not just accordions)
• Heading hierarchy: correctly fails when H1 is missing
• CTA detection: now supports Swedish meta descriptions
• Canonical check: no longer flags tracking params as mismatches
• Privacy policy: warns when policy links to external domain instead of your own
• Contrast analysis: skips text over images/gradients (eliminates false 1:1 ratios)
• TTFB thresholds aligned with Google guidance (300ms/800ms)
• Plaintext email detection: filters out logged-in user emails in navigation
• Empty link checks: SEO and Accessibility now use consistent criteria

What's New in 1.3.0

• 12 new checks (130+ total, up from 80+)
• AI search readiness: llms.txt detection, AI training bot blocking check
• SEO: meta description CTA analysis, alt text quality, external link count, FAQ schema validation, title truncation warning, OG image dimensions
• Privacy: AI training bot detection in robots.txt
• Performance: Google Fonts count, inline CSS bloat detection
• Tech stack: page builder detection
• Removed: outreach email generator