Website leak check

Someone finds your site, decides in a few seconds whether to trust it, and looks for one thing: a way to book, ask or buy. If that one thing is broken, they don't email to tell you. They leave and call the next name on the list.

We read the homepages of businesses like yours by hand, looking for exactly this kind of thing, as part of our own research before we reach out to anyone. The same handful of problems kept turning up: a booking button that leads nowhere, an email link that goes to the wrong address, a page that still says it's 2019. None of them take long to fix. Most of them take longer to notice, because you don't read your own site the way a stranger does.

Put in your website address and we read your homepage, plus up to fourteen pages it links to, contact, booking, services and about first. We also read your robots.txt and sitemap, ask for a page that doesn't exist, and try the http and www versions of your address. We read what's actually there: the page's own text and code, where the links say they go, and what happens when you follow them. No sign-in, nothing typed into a form, no JavaScript run. Google's PageSpeed test measures how fast the page loads on a phone.

33 checks run on what we read, in six areas:

• Getting found on Google: whether Google may show the page, its title, a description on each page, a sitemap, business details Google can read, your phone, address and hours.
• Showing up in AI search: whether ChatGPT, Claude and Perplexity's search bots are let in, whether the page reads without JavaScript, bot walls, missing pages, and buttons with no name.
• First impression on a phone: fits the screen, page weight, oversized images and template leftovers.
• Getting in touch: tap-to-call, booking and email links that go nowhere, whether the dates in your booking form can still be booked, whether Book now leads to a real booking, promises you can't back up, and a privacy note on your form.
• Trust: https, insecure pieces on a secure page, about and contact pages, broken links, stale dates and link previews.
• Speed: how fast the main content shows, whether the page jumps, and how quickly the server answers.

Eight of the checks are ideas drawn from Is Agentic, Vercel and Ora's AI-readiness scanner: readable without JavaScript, real missing pages, business details, about and contact pages, bot walls, a sitemap, and named buttons and fields. When Is Agentic already has a public report for your site, we link it; we never start one for you, since every scan it runs is published.

Every result says exactly what we found on your pages, nothing more. A check failed on something we can point to, passed, is worth a look (a smaller problem), or wasn't tested, which means there was nothing on your site for it to test or the measurement didn't happen this time. The fails are ranked by how directly each one loses you a customer. Your basics score out of 100 counts only what was tested, and it covers what can be read from outside the site: a high one means the basics are in place, not that nothing is costing you customers.

We never invent a problem to make the list longer, and we never guess at something we didn't actually read. If your site makes no always-open promise, that check has nothing to test, and it says so instead of failing you for a promise you never made.

A "Book Now" button that scrolls to an empty spot on the page. A "Request a Quote" link to a page that 404s. A free consultation offered with no way to actually put a time on the calendar, so the only option left is calling and hoping someone picks up.

On your homepage, we follow every link that reads like a booking or contact button and check where it actually leads: a working form, a booking widget, a real email, or nothing at all.

An email address shown as text and an email link that goes somewhere else. A mailto link still pointing at the template's placeholder address from whoever built the site. Tap it on a phone, and the message goes nowhere, or nowhere useful, and you never see it.

We compare the address a link actually opens against the address shown next to it, and flag the ones that don't match or that still carry a placeholder domain.

"Open 24/7", "same day service", "no call goes unanswered". Good promises, and expensive ones if the only way in in the evening is a form that says "we'll reply within two business days." A customer who needed you at 9pm on a Saturday just learned your 24/7 means office hours.

We check whether an always-open or emergency promise on your site is backed by an instant way in: a tap-to-call link, a chat widget, a text link or a booking widget, not just a form that waits for business hours.

"Lorem ipsum", "Your Company", "Just another WordPress site": the text the site builder left behind, still live because nobody went back and replaced it. A copyright year still reading three seasons ago. A COVID-era notice nobody took down. Each one is a small, honest signal that nobody's minding the site, and a visitor reads it in about one second.

We check the page's visible text for the common leftovers, the footer's copyright year, the dates still on offer in your booking forms, and words that usually mean an old notice is still up, and we say which one specifically, so it's a two-minute fix, not a search.

This tool reads what's public on your site once, when you ask it to. It doesn't watch your site over time, and it doesn't fix anything by itself: every result is a fix in plain words, and where a tool we've reviewed does the job, we link to it and what it costs.

If you'd rather talk the result through with someone, talk to us: in the free 15-minute call we go over what the check found, what you run, and whether we're the right people for it.