Free website audit: what a scan can't see

A free website audit is good at what a machine can read in one pass over one URL: page speed, SEO tags, security headers, part of accessibility. It can't see what requires reading the site and checking it against a rule: what the page sets before a visitor makes a choice, what the legal notice says, which country's law governs your providers, or the pages it never opened.

We don't offer a free tool. We offer a free audit, and it is small: your home page, on one of the 9 pillars of our audit. This page covers what each family of tools does well, what it leaves out, and what the free audit adds.

What free tools measure well

Each family of tools answers one precise question, quickly, and asks for nothing more than a URL.

  • Speed. Google's PageSpeed Insights measures a page on mobile and desktop. It gives a lab measurement, on a simulated device and network, and, when Google has it, the experience of real visitors to that page.
  • SEO. SEO tools read titles, descriptions, broken links and redirects, often across many pages. Our guide to SEO audits versus full website audits shows where their question stops.
  • Security. A scanner such as Mozilla's HTTP Observatory reads the HTTP headers and the configuration the server shows to every visitor.
  • Accessibility. An automated checker flags an image without alt text, low contrast, a form field without a label. The W3C says so itself in its guide to selecting evaluation tools: tools cannot check all accessibility aspects automatically, and human judgment is required.

For one precise issue, a slow page or a missing header, these tools often give the right answer. Our guide to website audit tools by type details what each one measures, and our guide on how to audit a website covers the order in which an audit asks these questions.

What one automated pass can't see

These points aren't measured. They are read, then compared with a rule or with another text on the site.

  • What the page sets before the visitor chooses. In the EU, the ePrivacy Directive requires consent before non-essential cookies are stored or read on a visitor's device. A speed tool loads the page to time it; it doesn't ask what the page stored, or whether the banner offers "Reject" as plainly as "Accept".
  • The legal notice. A tool sees that a link exists. Whether the page names the publisher, the editor in charge and the host takes reading it. Our guide to the French legal notice lists what it must contain.
  • The law your providers answer to. A tool sees a server's IP address and the country it sits in. Whether a US company runs it, even in Europe, only shows up once you establish who supplies each layer of the site. That is what brings the CLOUD Act into play.
  • The pages the tool never opened. A tool that measures one URL measures that URL. A defect carried by the product page template or the blog template doesn't show on the home page.
  • What one text promises and another takes back. A description that advertises a benefit the terms of sale withdraw triggers no technical rule: someone has to read both.

Three extracts from a published report

In our sample report on an online store, three findings would not have come out of a home page measurement alone.

  • On accessibility, the home page scores better than the other pages. Product pages are the weakest, because their specification lists are poorly structured: the home page made the site look better than it is.
  • Google's tag manager loads as soon as the page opens, before any choice. The reject button only appears after a click on "Customize": rejecting takes two clicks, accepting takes one.
  • The descriptions Google shows promise a free 30-day return. The terms of sale put return costs on the buyer.

Our guide to auditing an e-commerce site covers what else the audit reads on an online store.

What we find on the sites we audit

70%load a third-party tracker before the visitor has made a choice

85%send personal data outside the European Union without safeguards, on a simple visit

25%publish a French legal notice missing at least three of the required details

These percentages cover about 20 to 30 websites we audited between August 14, 2026 and September 24, 2026. Each one counts only the sites where the point could be checked. Many were audited because a defect showed up quickly, so these figures describe our audits, not websites in general.

The free audit: one page, one pillar

It covers one page: the home page of the domain you give us. It covers one pillar: the one you choose. We read the page in a browser, the way a visitor does. There is nothing to install and no access to give us.

You get a simple report on that pillar by email. Allow at least 24 hours from your confirmation. If you pick compliance, it covers what the page sets before the visitor chooses and what your legal notice says; if you pick independence, it names your providers and the law they answer to.

It has the same limit as a tool that measures one URL: one page says nothing about the rest of your site, and the report says so. We may also publish the free report on this site, with the name of the audited site; the terms you accept when you request it say so.

The audit we sell covers the 9 pillars across the pages of your whole site. Its plans are on the Pricing page, and our guide to website audit cost explains what moves the price.

What this check doesn't tell you

What this page says about the tools comes from their official documentation, read on September 28, 2026. Their features change, and we have not published any comparative test between these tools and our audit.

The report records facts, measurements and observable signs. It is not a compliance certification, legal advice or a penetration test. Anything we could not verify from outside is written down as such, never counted as compliant.

By Quentin Mathis, Z29K · updated September 28, 2026

Read next

Website audit tools: what each type checks

SEO, speed, security and accessibility tools: what each type of website audit tool measures well, what it skips, and when a human review changes the result.

Read the guide →

Website imprint requirements in the EU

What an EU business website must publish about who runs it, what France adds, and the flaw few people check: a legal notice no page links to.

Read the guide →

CLOUD Act: is your website exposed?

The CLOUD Act reaches data held by US providers, even on servers in Europe. Which layers of your website it covers, and what the audit looks at.

Read the guide →

Try our method for free

One page. One pillar. A real report.

Enter your website, choose the pillar you want us to examine, and we’ll email you a report on your home page. Please allow at least 24 hours.

Our plans cover the 9 pillars across the pages of your whole site.