Free tool

Free Website & Email Health Check

Find out in about a minute whether your business email can be trusted, your website is safe and fast, and search engines can read it. Around 30 checks, each explained in plain English, with a free PDF report.

Public information only. No login, no software to install. Results appear on this page; the full report is free when you tell us where to send it.

What the check covers

Four sections, around 30 checks. Each result is Passed, Needs Attention, Critical, Not Tested or Inconclusive, with what we actually found.

Email Security

Whether email from your domain is trusted, and whether forgeries are rejected.

  • SPF record and the 10-lookup limit
  • DMARC policy and reporting
  • DKIM signing keys (where selectors can be found)
  • MX records and your email provider
  • MTA-STS and TLS-RPT

Website Security

Whether visitors reach your site safely and your domain is in good order.

  • DNS for the bare domain and www
  • HTTPS certificate: expiry, names, chain, old TLS
  • HTTP to HTTPS redirection
  • Security headers: HSTS, CSP, X-Content-Type-Options and more
  • DNSSEC, CAA, registration expiry, mixed content

Performance

How quickly the homepage loads on a phone, measured by Google PageSpeed Insights.

  • Core Web Vitals (LCP, CLS, INP)
  • Page weight and requests
  • Compression, caching and server response time
  • HTTP/2 or HTTP/3
  • Mobile friendliness and image optimisation

Online Visibility

Whether search engines can find, read and understand the site.

  • robots.txt and XML sitemap
  • Title, meta description and H1
  • Indexability and canonical address
  • Structured data and link previews
  • Automated accessibility findings and broken links

How it works

  1. Enter your domain

    Just the domain, such as yourbusiness.co.uk. No account and no password.

  2. Watch the checks run

    Around 30 checks run in about a minute. Each result appears as soon as it is in, with what we found.

  3. Get the full report

    Tell us who to send it to and the PDF arrives by email: evidence, why each item matters and what to do.

  4. Fix it, or ask us to

    Many fixes are quick DNS or hosting changes. If you would rather we did it, tick the box and we will get in touch.

What this check is, and is not

  • We look only at public information: DNS, the homepage, a few well-known files and one secure connection per host. We never log in, submit forms or probe for vulnerabilities.
  • Anything we could not check is marked Not Tested with the reason. Nothing untested is ever marked as a failure, and we do not give a score out of 100.
  • The result is a snapshot. It is not a guarantee of security, email delivery, search rankings or compliance.
  • The report lists the evidence for every finding, with the time it was observed, so anyone fixing it can verify it.
  • Explanations are written for business owners, not engineers. Where a fix needs access to your DNS, hosting or website admin, the report says so.

Worried about email going to junk right now? Read why business email ends up in junk. For a website that is down or broken today, go straight to website help.

Common questions

Is it really free?

Yes. The check and the PDF report are free. We ask for your name, business and email to send the report, and only contact you about fixing problems if you tick that box.

Is it safe to check my domain?

Yes. We look only at information that is already public: DNS records, the registry record, your homepage and a few standard files, and one secure connection to read the certificate. We never log in, submit forms, guess passwords or probe for vulnerabilities. Google's PageSpeed Insights loads your homepage once, as any visitor would.

Do I need to own the domain?

The checks use public information, so technically anyone could run them, but the report is written for the business that owns the domain. We ask you to confirm you own it or are authorised by the business, and we record that confirmation with your request.

What does "Not Tested" mean?

That we could not check that item from our systems, and the report says why. For example, our hosting cannot connect to mail servers on port 25, so we do not test STARTTLS, and if Google's speed test is unavailable the performance items are marked Not Tested rather than guessed.

Why is there no score out of 100?

Because a single number hides what matters. A missing SPF record and a short cache lifetime are not the same kind of problem. We show each item's status (Passed, Needs Attention, Critical, Not Tested or Inconclusive) and rank the ones to fix first.

What happens to my details?

We store the check results, your contact details and the report so we can send it and answer questions about it. See our privacy policy for how long we keep them and how to ask for deletion. Marketing email is a separate, optional tick box.

Can you fix the problems you find?

Usually, yes. Most findings are DNS records, hosting settings or website changes we deal with every week. Tick "I would like WebProjectUK to contact me" when you request the report, or use the website help form. We assess, explain, and agree the cost before any work starts.

Rather we just took care of it?

Tell us what the check found, or what is worrying you, and we will reply with the next step. Assessed first, explained plainly, cost agreed before any work.

Get Website Help Business email help