Audit HTTP caching response headers (Cache-Control, Expires, ETag, Last-Modified, Vary, Age). Optionally tests conditional revalidation using If-None-Match / If-Modified-Since. Useful for web performance tuning and debugging CDN/browser caching behavior.
Fetches URLs and validates the Content-Type header (MIME type + optional charset). Flags missing/mismatched types and recommends X-Content-Type-Options: nosniff. Outputs per-URL results plus SUMMARY and REPORT.
Fetch URLs and analyze Set-Cookie response headers for security attributes: Secure, HttpOnly, SameSite, plus __Host- / __Secure- prefix rules. Produces per-cookie results with warnings/errors and writes SUMMARY + REPORT for quick auditing.
Validate hreflang implementation (<link rel="alternate" hreflang=...>) to prevent international SEO issues. Detects missing/duplicate hreflangs, invalid language-region codes, missing self reference, and optional reciprocal hreflang checks.
Fetches URLs and validates the Strict-Transport-Security (HSTS) response header. Parses directives (max-age/includeSubDomains/preload), flags missing/invalid configuration, and checks common best practices. Outputs per-URL results plus SUMMARY and REPORT.
Checks whether a URL serves compressed responses (br/gzip/deflate) and validates related headers such as Vary: Accept-Encoding for cache correctness. Outputs per-URL results plus SUMMARY and REPORT.
Probes which HTTP methods appear enabled for each URL (OPTIONS + per-method requests) and flags risky methods like TRACE. Outputs per-URL results plus SUMMARY and REPORT.
Validate JSON content, check API responses, monitor data quality, and detect schema changes. Perfect for API testing, data validation, quality assurance, and monitoring JSON endpoints. Supports JSONPath, schema validation, and custom rules.
Fetches URLs and validates the Referrer-Policy response header. Flags missing or risky policies (e.g., unsafe-url) and optionally checks against an expected policy. Outputs per-URL results plus SUMMARY and REPORT.
Fetches URLs and validates the X-Content-Type-Options response header. Flags missing header and invalid values (expects nosniff) to help prevent MIME sniffing attacks. Outputs per-URL results plus SUMMARY and REPORT.
Fetches URLs and validates the X-Frame-Options response header (DENY/SAMEORIGIN). Flags missing/invalid/deprecated values and also detects CSP frame-ancestors. Outputs per-URL results plus SUMMARY and REPORT.
Generate an XML sitemap for any website. Crawls internal pages from start URLs (with depth + page limits), deduplicates URLs, and stores a ready-to-submit sitemap.xml plus a structured dataset and summary for SEO audits.
Convert any website into an RSS feed automatically. Monitor blogs, news sites, e-commerce stores for new content. Get instant notifications when pages change. Perfect for content aggregation, monitoring competitors, and staying updated. Export to RSS, JSON, or XML.
Crawl a website (or list of pages) and detect broken links (404/500), unreachable URLs, and invalid asset references. Generates a structured report for SEO audits, QA testing, and website maintenance.
Check if a website has a valid favicon and icon setup for SEO and UX. Detects <link rel=icon> tags, default /favicon.ico, Apple touch icons, mask-icon, and web manifest icons. Validates URLs, HTTP status codes, content types, and reports missing/broken icons.
Check SSL/TLS certificates for any website: expiration date, issuer, subject, hostname match (SNI), chain/authorization status, and common HTTPS misconfigurations. Useful for SEO audits, security checks, and uptime monitoring.
Check and validate Open Graph (og:*) meta tags to improve link previews on Facebook, LinkedIn, Slack, and more. Detect missing/empty OG tags (og:title, og:description, og:image, og:url, og:type), duplicates, invalid URLs, and optional image URL accessibility checks.
Audit web pages for missing, empty, and low-quality image alt text. Extracts <img> tags, flags missing/empty/generic alt attributes, and produces per-page results for SEO and accessibility (WCAG) reviews. Supports depth-limited link crawling and outputs a SUMMARY + REPORT for QA and monitoring.
Extract and validate structured data from any web page for SEO. Parses JSON-LD, detects Microdata and RDFa, highlights schema.org types, and reports common markup issues.
Analyze SEO meta tags for any list of URLs: title tag, meta description, canonical URL, robots meta, Open Graph, Twitter Cards, viewport, and hreflang. Produces a structured report with warnings and an SEO score for audits and QA.
Validate Schema.org structured data for SEO. Parses JSON-LD, detects Microdata and RDFa, highlights schema types, and reports common issues like invalid JSON-LD, missing @type, non-schema.org @context, and missing key properties for popular schema types.
Check common HTTP security headers for one or more URLs (Content-Security-Policy, Strict-Transport-Security, X-Frame-Options, X-Content-Type-Options, Referrer-Policy, Permissions-Policy, COOP/COEP/CORP). Useful for quick security hardening audits.
Validate Twitter Card meta tags (twitter:card, twitter:title, twitter:description, twitter:image, etc.) to optimize link previews on X (Twitter) and other apps that reuse Twitter card metadata. Detect missing/empty tags, duplicates, invalid URLs, and optionally verify image URL accessibility.
Check <link rel="canonical"> tags on any page to prevent duplicate-content SEO issues. Detects missing or multiple canonicals, invalid/relative canonicals, cross-domain canonicals, and mismatches after redirects.