www.nikaarts.com

Standards-mode <!doctype html> present.

<html> declares a language.

Character encoding declared.

Responsive viewport meta present.

Page has a non-empty <title>.

Meta description present.

Canonical link present.

Icon link(s) declared.

No theme-color — mobile browser UI will not match your brand.

No color-scheme — form controls and scrollbars will not adapt to dark mode.

Open Graph tags present.

No feed discovery link found — only relevant if the site publishes a feed.

Feed content quality cannot be assessed from a page scan.

No popover attributes — only applies if the page has popovers/menus.

robots.txt is served.

An XML sitemap is present or referenced.

Sitemap index in use.

No image/video sitemap extensions detected.

URL path is clean and readable.

http:// redirects to https with a 3xx status.

Nonexistent paths return a real 404/410.

Indexing is not being blocked by robots meta / X-Robots-Tag.

3 <h1> elements found — prefer a single <h1> per page.

21 internal links found.

JSON-LD structured data present.

No breadcrumb structured data or navigation found.

IndexNow integration cannot be detected from a page scan.

Colour contrast requires rendering analysis — review with an automated contrast checker.

All 47 images declare alt text.

10 form fields appear to have labels.

Keyboard operability needs interactive testing.

Focus-indicator visibility needs rendering review.

Skip-to-content link present.

Semantic landmark elements in use.

1 generic element(s) with interactive ARIA roles — prefer native <button>/<a>/<nav>.

Link-text quality needs manual review.

No empty links or buttons detected.

Form-error accessibility needs interactive testing.

Document language is declared.

prefers-reduced-motion handling detected.

No accessibility-overlay widget detected.

Audio/video present without caption <track>s or transcripts.

No data tables on the page.

Touch-target sizing needs rendering measurement.

Not used — only relevant for collapsible/accordion content.

Could not confirm use of native interactive elements.

CSS selector strategy needs source review.

Page is served over HTTPS.

HSTS header present.

No CSP header — the page has no defence-in-depth against injected scripts.

No /.well-known/security.txt — researchers have no disclosure contact.

nosniff header present.

No frame-ancestors or X-Frame-Options — the page can be framed for clickjacking.

No Referrer-Policy — full URLs may leak to third parties.

No Permissions-Policy — powerful browser features are not locked down.

0/41 cross-origin scripts use SRI — add integrity hashes to the rest.

3/5 cookies missing Secure/HttpOnly/SameSite.

CAA records are not collected by the scanner — check your DNS provider.

DNSSEC status is not collected by the scanner.

No /.well-known/ resources found.

No change-password redirect — recommended if the site has accounts.

Not present — only relevant for OIDC identity providers.

Not present — recommended if the site exposes public APIs.

Not present — only relevant for federated identity.

Not present — only needed for iOS Universal Links.

Not present — only needed for Android App Links.

Not present — only relevant for Fediverse servers.

Not present — optional prefetch-proxy control file.

Some agent-readiness signals present (llms.txt and/or structured data).

/llms.txt is published.

No /llms-full.txt — optional full-content variant.

No Markdown source endpoint detected — recommended for content/doc sites.

robots.txt has no explicit AI-crawler rules — state your stance on GPTBot/ClaudeBot/etc.

No Content-Signal directives — optional usage-preference signalling.

Web Bot Auth support cannot be detected from a scan.

URL has no obvious session/volatile parameters.

JSON-LD structured data present for agents.

No machine-readable alternates detected — recommended for listings/data pages.

HTTP Link header present for discovery.

No MCP/tool discovery endpoint — optional.

No A2A agent card — optional.

Agent Skills discovery cannot be detected automatically.

DNS-AID records are not collected by the scanner.

NLWeb support cannot be detected automatically.

WebMCP support cannot be detected automatically.

Schemamap support cannot be detected automatically.

Lab load completed in 910ms (a proxy). Confirm LCP/INP/CLS with field data.

None of 26 raster images use WebP/AVIF — convert from PNG/JPEG.

loading="lazy" is used.

Resource hints (preload/preconnect/…) present.

Cache-Control set on the document (private,max-age=0,must-revalidate).

Not set — optional; helps cache/prefetch URLs that differ only by tracking params.

Document is compressed (br).

Font-display/font preload optimisation detected.

3 render-blocking stylesheets in <head> — inline critical CSS and defer the rest.

15/41 external scripts use defer/async/module — add defer to the rest.

HTTP/3 advertised via Alt-Svc.

Speculation Rules present for instant navigations.

Resource hints are in use.

View Transitions API in use.

BFCache eligibility needs runtime testing.

No content-visibility detected — optional offscreen-render optimisation.

CSS containment in use.

Not detected — optional.

No scrollbar-gutter — optional; prevents layout shift when scrollbars toggle.

No privacy policy link found — link one from every page (usually the footer).

Cookies are set but no consent manager was detected — non-essential cookies need consent.

GPC handling is server-side and cannot be confirmed from a scan.

2 third-party script origin(s) — audit each for data collection.

No analytics detected, or an unrecognised provider.

Data-minimisation practices need a manual review of forms and backend.

Missing pages return 404 with a substantial (likely custom) error page.

Maintenance behaviour can only be observed during downtime.

A service worker is registered for offline support.

No <link rel="manifest"> — add a web app manifest for installability.

Monitoring is operational and cannot be detected from the page.