Check any website.
Security first, then HTML, search, accessibility and more, with a clear list of what to fix. And how fast it is for real visitors.
Security
HTTPS, headers, cookies, page contents, DNS and email, the domain's expiry, its certificate and subdomains, and Google Safe Browsing. Each failure comes with the steps to fix it. Every check.
Exposed files and services
Whether files like .git and .env, live keys in scripts, or databases and remote desktops are open to anyone. Only a site's owner, proved by a DNS record, sees which keys and services.
Quality
Valid HTML, search, sharing cards, accessibility, readability, trackers, and what it tells AI crawlers.
Real-world speed
Core Web Vitals from Chrome users over the last 28 days, on phones and desktops.
API and MCP
Every report as JSON at /api/v1/reports/ and the domain, and for agents at snag.page/mcp. Free, no key.