Encryption and certificate
What the browser sees before it even draws the page: is the padlock legitimate, and does the site refuse the old versions of the protocol.
Free tool, instant analysis
What is your website actually worth?
Enter its address. We run around thirty checks live against the site, from the certificate to the weight of the page, and grade it from A+ to F.
- Checks run live against the site
- Every point explained, with what to do
- Full report once your account is open
What we examine
No external tool, no API key: the checks run from our servers, straight against yours. Anything we could not observe is marked “not tested” rather than guessed.
Security headers
The instructions the server gives the browser to limit the damage when something goes wrong. Invisible to the visitor, decisive when there is a problem.
Search engines
What the HTML you serve tells search engines: title, description, structure, sitemap. The substance of your content is not judged here, the plumbing is.
Speed and mobile
Time to first byte, compression, page weight and phone layout. The four things that make a visitor leave before reading anything.
How the score is calculated
Every check carries a fixed weight. A failure takes that whole weight off its family, a reservation takes half, and a check that could not be run leaves the calculation instead of weighing on the score. The overall score is the weighted average of the four families: encryption and headers count for 30% each, search engines for 25%, speed for 15%.
- A+Nothing was let through.
- ASolid, bar one finishing touch.
- BSound, with points to revisit.
- CVisible gaps in several families.
- DBasic checks are failing.
- EThe site exposes its visitors or shuts engines out.
- FNeeds work, starting with encryption.
Frequently asked questions
Where do these results come from?
From your site, queried live: a TLS handshake for the certificate, one HTTP request for the headers and the HTML, two more for robots.txt and the sitemap. No third party is involved, and nothing is stored.
Can this damage my site?
No. The tool only reads, the way a visitor or a search engine crawler would. It submits no form, tries no password and looks for no exploitable flaw.
Can I audit a site that is not mine?
Yes: everything the tool observes is what your browser already receives when it visits the page. That is also what makes comparing with a competitor instructive.
How do I fix what is flagged?
Encryption and headers are settled with your host, often in a few lines of configuration. SEO and weight are settled in the site itself. Every point on the list says what is missing and why it matters.
A site that ticks these boxes from day one
Sites published on Wobelio come with HTTPS, security headers, a sitemap and mobile layout already in place. There is nothing to configure to earn the grade.