na.mxns.com

Standards-mode <!doctype html> present.

<html> declares a language.

Character encoding declared.

Responsive viewport meta present.

Page has a non-empty <title>.

Meta description present.

Canonical link present.

Icon link(s) declared.

No theme-color — mobile browser UI will not match your brand.

No color-scheme — form controls and scrollbars will not adapt to dark mode.

Open Graph tags present.

No feed discovery link found — only relevant if the site publishes a feed.

Feed content quality cannot be assessed from a page scan.

No popover attributes — only applies if the page has popovers/menus.

robots.txt is served.

An XML sitemap is present or referenced.

No sitemap index — only needed once you exceed 50k URLs / 50MB.

Image/video sitemap extensions present.

URL path is clean and readable.

http:// redirects to https with a 3xx status.

Nonexistent paths return a real 404/410.

Indexing is not being blocked by robots meta / X-Robots-Tag.

Exactly one <h1> heading.

66 internal links found.

JSON-LD structured data present.

No breadcrumb structured data or navigation found.

IndexNow integration cannot be detected from a page scan.

Colour contrast requires rendering analysis — review with an automated contrast checker.

All 18 images declare alt text.

6 form fields but only 3 label/aria-label associations — label every input.

Keyboard operability needs interactive testing.

Inline styles remove outlines without a :focus-visible replacement — verify focus stays visible.

No skip link — keyboard users must tab through the nav on every page.

Semantic landmark elements in use.

3 generic element(s) with interactive ARIA roles — prefer native <button>/<a>/<nav>.

Link-text quality needs manual review.

3 empty link(s)/button(s) with no accessible name — add text or aria-label.

Form-error accessibility needs interactive testing.

Document language is declared.

No inline prefers-reduced-motion rule — verify external CSS respects reduced motion.

Accessibility overlay detected (accessibe). Overlays do not provide real accessibility — fix the underlying markup.

No audio/video requiring captions.

No data tables on the page.

Touch-target sizing needs rendering measurement.

Not used — only relevant for collapsible/accordion content.

Could not confirm use of native interactive elements.

CSS selector strategy needs source review.

Page is served over HTTPS.

HSTS header present.

Content-Security-Policy header present.

No /.well-known/security.txt — researchers have no disclosure contact.

No X-Content-Type-Options: nosniff — browsers may MIME-sniff responses.

No frame-ancestors or X-Frame-Options — the page can be framed for clickjacking.

Referrer-Policy header present.

No Permissions-Policy — powerful browser features are not locked down.

0/17 cross-origin scripts use SRI — add integrity hashes to the rest.

All response cookies set Secure, HttpOnly and SameSite.

CAA records are not collected by the scanner — check your DNS provider.

DNSSEC status is not collected by the scanner.

No /.well-known/ resources found.

No change-password redirect — recommended if the site has accounts.

Not present — only relevant for OIDC identity providers.

Not present — recommended if the site exposes public APIs.

Not present — only relevant for federated identity.

Not present — only needed for iOS Universal Links.

Not present — only needed for Android App Links.

Not present — only relevant for Fediverse servers.

Not present — optional prefetch-proxy control file.

Some agent-readiness signals present (llms.txt and/or structured data).

No /llms.txt — agents have no curated map of your key content.

No /llms-full.txt — optional full-content variant.

No Markdown source endpoint detected — recommended for content/doc sites.

robots.txt has no explicit AI-crawler rules — state your stance on GPTBot/ClaudeBot/etc.

No Content-Signal directives — optional usage-preference signalling.

Web Bot Auth support cannot be detected from a scan.

URL has no obvious session/volatile parameters.

JSON-LD structured data present for agents.

No machine-readable alternates detected — recommended for listings/data pages.

HTTP Link header present for discovery.

No MCP/tool discovery endpoint — optional.

No A2A agent card — optional.

Agent Skills discovery cannot be detected automatically.

DNS-AID records are not collected by the scanner.

NLWeb support cannot be detected automatically.

WebMCP support cannot be detected automatically.

Schemamap support cannot be detected automatically.

Lab load completed in 1778ms (a proxy). Confirm LCP/INP/CLS with field data.

None of 10 raster images use WebP/AVIF — convert from PNG/JPEG.

loading="lazy" is used.

No resource hints — preconnect to critical origins and preload the LCP asset.

Cache-Control set on the document (no-store, no-cache, must-revalidate).

Not set — optional; helps cache/prefetch URLs that differ only by tracking params.

Document is compressed (br).

Font-display/font preload optimisation detected.

9 render-blocking stylesheets in <head> — inline critical CSS and defer the rest.

14/27 external scripts use defer/async/module — add defer to the rest.

HTTP/3 advertised via Alt-Svc.

No Speculation Rules — optionally prerender/prefetch likely next pages.

No resource hints found on the page.

No View Transitions detected — optional polish for navigations.

BFCache eligibility needs runtime testing.

No content-visibility detected — optional offscreen-render optimisation.

No CSS containment detected — optional.

Not detected — optional.

No scrollbar-gutter — optional; prevents layout shift when scrollbars toggle.

A privacy policy link/reference is present.

Consent manager detected (cookieconsent).

GPC handling is server-side and cannot be confirmed from a scan.

11 third-party script origins — a large external surface; trim where possible.

Tracking-based analytics (Google Analytics) detected — consider a cookieless alternative.

Data-minimisation practices need a manual review of forms and backend.

Missing pages return 404 with a substantial (likely custom) error page.

Maintenance behaviour can only be observed during downtime.

No service worker detected — optional offline/PWA support.

No <link rel="manifest"> — add a web app manifest for installability.

Monitoring is operational and cannot be detected from the page.