Loupe: Website Security, SEO & Privacy Audit

Loupe: Website Security, SEO & Privacy Audit Audit any website in one click: security, SEO, performance, privacy, accessibility. 150+ checks, A+ to F, fully local, free. Detailed Description: Loupe runs a full website audit in one click and grades the page A+ to F across six areas. No account, no sign-up, and no data ever leaves your browser. Every check runs locally. You get 150+ automated checks, an instant grade per category, and a weighted overall grade. SECURITY HTTPS and HSTS, Content-Security-Policy quality, the core security response headers (content type, framing, referrer, and permissions policies), cross-origin isolation headers, Subresource Integrity on third-party scripts, mixed-content detection, server version and information leaks, and a security.txt (RFC 9116) presence check. SEO On-page: title tag length, truncation, and call-to-action wording (English and Swedish), meta description quality, heading hierarchy, alt-text quality (not just presence), content length, and internal and external link counts. Technical: canonical tags, hreflang, viewport, charset, robots directives, duplicate meta tags, resource hints, robots.txt, and XML sitemap discovery. Rich results: JSON-LD structured-data detection and type listing, Open Graph and Twitter Card completeness, OG image dimensions, and FAQ-schema-versus-visible-content validation. AI search readiness (GEO): an llms.txt check plus schema signals that help generative engines cite your page. Includes a live Google SERP preview. PERFORMANCE Core Web Vitals (LCP and CLS) plus TTFB, FCP, DOM Content Loaded, and main-thread long-task timing, page weight and request count, image format, sizing, and lazy loading, font-loading efficiency, inline-CSS bloat, render-blocking scripts, and HTTP/2-or-newer protocol use. Thresholds adapt to the detected stack so heavy themes get realistic grades instead of blanket failures. PRIVACY Consent-banner detection across 30+ consent-management platforms, pre-consent tracking detection (a common GDPR and ePrivacy problem), cookie count and security review, third-party domain count, tracker identification, and privacy, terms, and cookie-policy detection in English and Swedish with a URL-probe fallback for unlinked pages. It also reads robots.txt to show whether the major AI crawlers can reach your content, and separates search-time crawlers (where blocking reduces your visibility in AI answers) from training crawlers (where blocking is usually the intended policy). ACCESSIBILITY WCAG AA color-contrast analysis (skipping text over images and gradients to avoid false readings), landmark roles, skip-navigation link, heading order, form and button labels, image alt text, video captions, and keyboard focus indicators. TECH STACK DETECTION Fingerprints common frameworks, CMS platforms, page builders, hosting providers, and analytics tools, and flags per-stack anti-patterns. MORE Top-keyword extraction with density and heading-versus-body distribution, plus a site-wide crawl mode that audits up to 100 pages in one run and aggregates the results. EXPORT Export a branded PDF report with all findings and recommendations, or a CSV for spreadsheets. Built by Bright Interaction (https://brightinteraction.com), a security and compliance company based in Sweden. We use this tool to audit our own client sites. 100% free. No ads. No tracking. No account required. Category: Developer Tools Language: English Privacy Policy URL: https://brightinteraction.com/privacy Homepage URL: https://brightinteraction.com/platform Release Notes Version 2.2.4 - More accurate audits: fixed the robots.txt reader that decides whether AI crawlers are allowed or blocked, corrected a Content-Security-Policy scoring gap, and fixed a scoring rounding issue in the AI-search-readiness checks. - Reduced false positives in tech-stack detection. - Safer CSV export and steadier results on pages that partially fail to load. - Clearer, policy-compliant store description. Same feature set.