8 areas. 50+ checks. Every failure comes with a specific fix — including whether AI agents can find and recommend you. Most website audits are vague: a pile of opinions, no priorities, no fixes. This is the opposite — a structured, scored review where every check has a clear pass/fail test and every failure has a concrete fix.
Published June 2026
By IMA AI
Free. No form. No email.
Critical
Actively hurting performance, conversions, or trust.
Fix immediately
Warning
Not breaking, but leaving value on the table.
Fix within 2 weeks
Suggestion
Good practice, lower urgency.
Fix when you have bandwidth
How to use it
Open your website.
Work through Areas 1–8 in order. Skip Area 5 if you don't sell online.
Mark each check ✅ Pass / ❌ Fail / N/A.
For every fail, write the specific fix — not a vague recommendation.
Score it (model at the bottom) and fix Critical items first.
Area 1
Technical Foundation
A site that fails these underperforms regardless of content or ad spend.
Check
How to check
Severity
HTTPS enabled, no mixed-content warnings
Browser padlock
Critical
Loads in under 3 seconds on mobile
Google PageSpeed Insights
Critical
Core Web Vitals pass (LCP, CLS, INP)
PageSpeed Insights
Critical
Mobile responsive — no horizontal scroll, text readable
Open on a phone
Critical
No broken links on key pages
Manual check / broken-link tool
Warning
Clean URLs — no .html, no query-string clutter
Check the address bar
Warning
Security headers present (HSTS, basic CSP)
securityheaders.com
Warning
Forms submit over HTTPS; no sensitive data in the URL
Inspect the form
Warning
No exposed admin panels, directory listings, or error stack traces
Try /admin, a bad URL
Warning
Custom 404 page with a way back to the site
Visit a non-existent URL
Suggestion
Favicon set correctly
Check the browser tab
Suggestion
Images lazy-loaded and right-sized
PageSpeed "size/defer images"
Suggestion
Area 2
SEO
Check every key page — home, about, product/service, contact.
Check
How to check
Severity
<title> — unique, present, under 60 characters
View page source
Critical
Meta description — unique, present, under 160 characters
View source
Critical
Canonical tag — present, clean URL
View source
Warning
Open Graph tags (og:title, description, image, url, type)
View source
Warning
Twitter Card tags
View source
Warning
sitemap.xml exists and submitted to Google Search Console
Visit /sitemap.xml
Warning
robots.txt exists and doesn't block key pages
Visit /robots.txt
Warning
Google Search Console verified and active
Check GSC
Warning
GEO meta tags (geo.region, placename, position) for local business
View source
Suggestion
Area 3
Analytics & Tracking
No tracking, no data to improve. Verify before any campaign.
Check
How to check
Severity
Analytics installed on all pages (GTM / GA4)
View source / GA4 Realtime
Critical
Ad pixels installed if running ads (Meta / TikTok)
A technically perfect site that fails here still won't convert.
Check
How to check
Severity
3-second clarity test — a visitor knows what you do and who it's for within 3 seconds
Load the home page, look only at the hero
Critical
Primary call-to-action visible above the fold
Load home without scrolling
Critical
Brand identity consistent across pages (logo, colours, fonts)
Browse key pages
Warning
Copy is clear and direct — no filler ("committed to excellence")
Read home + about
Warning
Trust signals present — testimonials, logos, certifications, media
Browse home + about
Warning
Real About page — founder, mission, team
Visit /about
Warning
Contact info easy to find
Footer + contact page
Warning
Images high-quality, relevant, not broken
Browse key pages
Warning
Social links present and pointing to active accounts
Footer
Suggestion
Area 5
Commerce Readiness
Only if you sell products or services directly from the site.
Check
How to check
Severity
Each product page has name, description, price, multiple images, clear CTA
Browse products
Critical
Add-to-cart / buy flow works end-to-end on mobile and desktop
Test it
Critical
Payment methods shown before checkout
Cart / checkout
Critical
Return & refund policy visible and linked
Footer / checkout
Warning
Shipping info clear — cost and delivery time
Product / checkout
Warning
Out-of-stock handled gracefully (no broken buy button)
Check an out-of-stock item
Warning
Order confirmation page or email exists
Test purchase
Warning
Product images consistent — same ratio, clean background
Browse the grid
Suggestion
Area 6
Agent Readiness (AEO)
AI assistants increasingly discover and recommend businesses. Sites that AI can read clearly win as this grows. This is the part most checklists miss.
Check
How to check
Severity
Content is server-rendered / static — not entirely client-side JavaScript
Disable JS, see if content still appears
Warning
Product/service schema (JSON-LD) on relevant pages
View source / schema.org validator
Warning
Brand & organisation info consistent everywhere (name, address, contact, logo)
Footer, about, JSON-LD
Warning
Key facts (prices, services, contact, hours) in text — not trapped only in images
View source / disable images
Warning
No important content behind a login or paywall that blocks crawlers
Browse logged-out
Warning
Organization schema (JSON-LD) on the homepage
Validate at schema.org
Warning
FAQ section or FAQ schema — helps AI extract answers
View source
Suggestion
BreadcrumbList schema on inner pages
View source
Suggestion
llms.txt at the root — points AI crawlers to your key content
Visit /llms.txt
Suggestion
Content answers real questions directly (clear, extractable statements)
Read a page as if an AI were summarising it
Suggestion
Area 7
Accessibility
UX, legal exposure, and an SEO/AEO signal at once.
Check
How to check
Severity
Images have meaningful alt text
View source / accessibility inspector
Warning
Text–background contrast meets WCAG AA (4.5:1 body text)
Lighthouse / contrast checker
Warning
Logical heading order — one <h1>, nested <h2>/<h3>
View source / Lighthouse
Suggestion
Keyboard-navigable with visible focus states
Tab through the page
Suggestion
Tap targets big enough and not too close on mobile
Lighthouse mobile
Suggestion
Area 8
Legal & Compliance
For trust and to avoid regulatory risk — especially PDPA (Malaysia & Singapore) and GDPR for EU visitors. Privacy, Terms and Disclaimer should be standalone, footer-linked pages — not modals.
The information on this website is for general informational purposes only. IMA AI makes no representations or warranties of any kind, express or implied, about the completeness, accuracy or suitability of the information contained herein.
All product names, services and company names mentioned are the property of their respective owners. IMA AI reserves the right to modify or discontinue any service without prior notice.