Fetches homepage, robots.txt, sitemap.xml, llms.txt in parallel. Checks HTTPS, TTFB, AI bot blocking (GPTBot, ClaudeBot, PerplexityBot), llms.txt, sitemap, noindex, lang, title length, meta description, viewport, canonical, OG tags, H1, hreflang, security headers (HSTS, CSP, X-Frame, etc.), tech stack fingerprinting.

Parses all JSON-LD blocks. Checks for LocalBusiness, Organization, Product, FAQPage, BreadcrumbList, Review, HowTo, Article. Validates field completeness. E-commerce specific: Product/Offer/Review schemas.

Word count, H2/H3 headings, images + alt coverage, phone/email/address detection, Flesch-Kincaid readability score, reading time.

Wayback Machine CDX (domain age), Wikipedia REST (brand article), Wikidata SPARQL (entity graph), DuckDuckGo Instant Answer (backlink sample).

Detects vertical + location. Builds 3 AI search queries. Sends each to Meta Llama 3.1-8B to predict citation. Returns citation_rate 0–1 + confidence.

Headings hierarchy, internal/external link ratios, image alt coverage, keyword density, canonical tags, structured data signals — all parsed directly from HTML.

9 social platform profile checks, email security (MX/SPF/DMARC) via Cloudflare DoH.

3 DNS record types (A, MX, NS), IP geolocation (ipinfo.io), font detection, third-party script inventory (50+ domains).

Queries crt.sh Certificate Transparency log. Finds most recent valid cert, returns issuer, validity dates, days remaining. Warns at <30d and <90d.

Follows up to 3 redirect hops from http:// recording URL, status code, and timing per hop.

8 WCAG 2.1 A/AA checks parsed directly from HTML — alt text, form labels, heading order, contrast signals, ARIA roles.

HTTP header security tests with severity scoring. Mozilla Observatory grade (A–F) if available.

Google Autocomplete seeds tailored to detected vertical + location. AI generates 8 high-intent keyword suggestions. Each keyword classified by intent (transactional, commercial, informational, local) and GEO potential.

OpenPageRank domain score, DKIM record checks (Google, mail, selector1 selectors), DNSSEC status, registrar info from RDAP.

Chrome User Experience Report — real-world LCP, CLS, FCP, INP, TTFB from actual Chrome users. Free API, no key required.