Laser Graffiti — draw on walls with a laser pointer

Failing · 12

• CompressionNo compression: pages ship larger than they need to
• Asset cachingNo caching headers: repeat visits refetch everything
• HSTSVerify that you own this domain to see this finding.
• Content-Security-PolicyVerify that you own this domain to see this finding.
• MIME-sniff guardVerify that you own this domain to see this finding.
• Clickjacking guardVerify that you own this domain to see this finding.
• robots.txt & sitemapNo robots.txt or sitemap: search engines are guessing
• llms.txtNo llms.txt: AI crawlers have no quick brief of your site
• Structured dataNo structured data: rich results and AI parsing are harder
• Organization schemaNo JSON-LD to hold an Organization/Product type
• Privacy policyNo privacy policy linked: a trust and compliance gap
• Contact methodNo visible contact method: visitors can't reach you

Partial · 16

• Modern HTTPHTTP/2+ not advertised (or hidden by the CDN)
• Referrer-PolicyVerify that you own this domain to see this finding.
• Permissions-PolicyVerify that you own this domain to see this finding.
• security.txtVerify that you own this domain to see this finding.
• Supabase row-level security (data exposure)Verify that you own this domain to see this finding.
• AnalyticsNo analytics in the HTML — if it loads as a module, only a browser audit can see it
• AI crawlers allowedNo robots.txt to check AI-crawler rules
• Semantic landmarksSome landmarks missing (add main/nav/header/footer)
• Apple touch iconNo apple-touch-icon: ugly when saved to a phone home screen
• Web app manifestNo web app manifest: not installable as a PWA
• Theme colorNo theme-color: the mobile browser chrome stays default
• TermsNo terms of service linked
• Company identityNo copyright or company identity (reads as unfinished)
• Social presenceOnly GitHub linked: one channel is a single point of failure
• Payment pathNo pricing or checkout found. Fine for a plain landing page; add one once you're selling
• Primary call to actionNo obvious primary CTA: tell visitors what to do next