Website Health Report
Enter a website you own and get a scored report on security headers, TLS, DNS and email authentication, performance and SEO basics. Checks are passive only, with no intrusive scanning. The report opens at a private link, a PDF copy can be emailed with your consent, and a magic-link dashboard keeps your history, rescans and comparisons.
Delete your data at any time. It is removed after 30 days. Performance scores can be missing when the free PageSpeed quota is reached.
How it is built
- Custom WordPress 7.1 block theme and plugin: custom tables, Action Scheduler queue, scoring and report pages
- Laravel 13 scanner service for the passive checks
- n8n pipeline with HMAC-signed messages, leads in Google Sheets and report emails through Brevo
- Cloudflare Turnstile bot check and Wordfence firewall
- Optional AI summary with a rule-based fallback
- Docker on a self-hosted Coolify server
Quality
- PHPUnit for WordPress and Laravel
- PHPCS and PHPStan
- Playwright browser tests at desktop and phone width
- Secret scanning on every push