Transport & TLS
HTTPS, the certificate, protocol versions, HSTS and the encrypted path a visitor actually takes.
Weighted 16%Website migration audit
Enter any website. We check the things that decide whether a migration is clean or expensive: HTTPS and the certificate, www and apex, metadata, HSTS, llms.txt,security.txt, well-known files, headers and more.
What we check
Most checks are ours: we fetch the pages, read the headers, parse the HTML and do the TLS handshake. We only call an outside service where a Worker genuinely cannot see the answer.
HTTPS, the certificate, protocol versions, HSTS and the encrypted path a visitor actually takes.
Weighted 16%Whether www, the apex and http all agree on one canonical address, without chains or duplicate content.
Weighted 10%Titles, descriptions, canonicals, Open Graph, structured data and the signals search engines and social platforms read.
Weighted 12%robots.txt, sitemaps, status codes, AI crawler rules and whether the site can be understood and indexed cleanly.
Weighted 12%security.txt, llms.txt, change-password, MTA-STS, app associations and the other machine-readable trust files.
Weighted 8%Security headers, CSP, cookie flags, mixed content, email authentication and the domain's own security posture.
Weighted 14%Server response, page weight, compression, render-blocking assets, caching and — when available — Lighthouse and Core Web Vitals.
Weighted 14%What the site runs on, how much content there is, and what moving it to Lexiphanic would involve.
Weighted 14%How it works
One domain is enough. We normalise it and audit the apex and www together, because that is where most migration surprises start.
HTTPS and the certificate, redirects, metadata, HSTS, llms.txt, security.txt, well-known files, headers, email DNS and the rest.
A shareable, printable report with the evidence, why each finding matters, and what we would do about it before the move.
Methodology
The overall score is a weighted average of eight categories. Individual checks are pass, warning, fail or informational. Checks that do not apply — or that we could not run — are shown honestly and excluded from the score.
Grades
| Category | Checks | Weight |
|---|---|---|
| Transport & TLS | 22 | 16% |
| Hosts & redirects | 10 | 10% |
| Metadata & social | 21 | 12% |
| Crawl & index | 19 | 12% |
| Well-known & trust | 19 | 8% |
| Security & privacy | 32 | 14% |
| Performance & UX | 19 | 14% |
| Migration readiness | 17 | 14% |
The signal is present and sensible.
Present, but weaker or incomplete.
Missing or actively working against the site.
Blocked, not applicable, or no data.
This is a public-page health check, not a penetration test. We fetch a small sample of pages, do not attempt to log in, and do not test for vulnerabilities.
Yes. It is a public tool, not a trial. There is no account and no card. We use it as the first conversation about a migration.
Around 90 signals across transport and TLS, host canonicalisation, metadata, crawlability, well-known files, security headers, performance and migration readiness. The full list is below.
We store the domain, the date and the public findings so the report URL stays stable. We do not use analytics or advertising cookies. See the privacy note.
Some sites block automated requests, some checks need a working PageSpeed Insights key, and some files are optional. We say so rather than turning a missing signal into a failure.
Ready when you are