WebMeter/Sample report
A report you’ll understand even without an IT department.
A 0–100 score and an A–F grade, risks in plain language and a list of fixes sorted by impact. Download the result as a PDF.
Report · 24 Sep 2026
example.com
- 75–100 in order
- 40–74 worth attention
- 0–39 risk
Fix first · 05
Block non-essential cookies until demonstrable opt-in consent is given.
- 01Could someone misuse the website against your visitors?Security headers49 — worth attention
What it means: Security headers are instructions through which the website tells the browser how to protect it. When they are missing, an attacker can misuse the page more easily, for example by embedding it in a fraudulent website or slipping unauthorised code into it.
- 02Could someone send e-mail in your name?SPF, DKIM, DMARC100 — OK
What it means: Sender verification (SPF, DKIM, DMARC) tells other mail servers which emails really come from you. Without it, a fraudster can send emails using your company's address, such as fake invoices to your customers.
- 03Is the connection to the website encrypted and the certificate valid?HTTPS and certificate89 — OK
What it means: The encrypted connection (HTTPS) and the certificate protect the data visitors enter on the website. When the setup fails, the browser shows a warning instead of the website, and some visitors may leave.
- 04Is the domain in order, and is the registration not about to expire?DNS and domain · Partial89 — OK
What it means: DNS is the directory the internet uses to find your website and email. Gaps in it can cause website and email outages or make it easier to spoof your address.
- 05Is the cookie banner compliant?Cookies and GDPR60 — worth attention
What it means: Analytics and advertising tools may only run after the visitor gives consent. WebMeter checks whether they start earlier.
What to do: Block non-essential cookies until demonstrable opt-in consent is given.
- 06Does the website load fast on mobile too?Speed (Core Web Vitals)74 — worth attention
What it means: Loading speed matters most on mobile. Slow loading can put visitors off before they see your offer. Google treats speed as one of many signals; content comes first.
What to do: Speed up the main image or block (size, format, priority loading), reduce the server response time and limit blocking JS/CSS.
- 07Will customers find you on Google?SEO · capped: basic titles and descriptions missing59 — worth attention
What it means: SEO determines how easily people find you in search engines. When it falls short, customers looking for your services are more likely to find your competitors.
- 08Can a person with a disability use the website?Accessibility60 — worth attention
What it means: Accessibility means that the website can also be used by people with poorer eyesight, older people or people on mobile devices. For online shops and some other services, it has been required by the Czech Accessibility Act since 28 June 2025 (micro-enterprises are exempt).
- 09Is the website running on an outdated system?CMS and technology · capped: software probably without patches59 — worth attention
What it means: The content management system, plugins and libraries the website runs on. Outdated versions often have known flaws that bots on the internet deliberately look for.
What to do: Have the administrator update WordPress to the latest version and turn on automatic updates. If updates have not been done for a long time, have the website checked for misuse.
- 10Does the website reveal more than it should?Exposure · Partial100 — OK
What it means: What public traces reveal about the website, such as admin logins or auxiliary subdomains. Every public login is a place where bots can try passwords.
- 11Will ChatGPT and other AI recommend you?AI search · info100 — OK
What it means: More and more people search using AI assistants such as ChatGPT or Perplexity. If the website is blocked for their crawlers or empty without JavaScript, AI may not know about you and may recommend your competitors instead.
- 12Does the website show the legally required company details?Company and e-shop · Partial100 — OK
What it means: The law requires a company website to state who operates it (name, registered office, company ID (IČO)), and an online shop must also provide terms and conditions, a complaints (warranty claims) policy and information on withdrawal from the contract. Missing information reduces customer trust and risks penalties, for example from the Czech Trade Inspection Authority.
- 13Can Seznam, Bing and other search engines find you?Search engines beyond Google · info97 — OK
What it means: People in the Czech Republic do not search only with Google and Seznam (those are assessed in the SEO area) but also with Bing, DuckDuckGo or Apple. If the website blocks their bots, has a faulty sitemap or links to websites that no longer work, it can be harder to find in these search engines.
- 14How are you doing on cybersecurity basics?Cyber hygiene (NIS2)3/8 — 3 of 8 basics in order
What it means: Eight security basics of the website and e-mail that are visible from outside. They are useful for any website, and partners covered by the new Czech Cyber Security Act (NIS2) ask about them too. This is not a legal compliance assessment.
- 15Who does your website send visitor data to?Third parties2 — 2 services loaded before consent
What it means: Services from other companies that the website loads as soon as it opens, before the visitor consents: analytics, fonts, maps or videos. The visitor’s browser connects to them, so it is good to know which ones they are and where they are based.
After the measurement
What appears below the result.
The block below the result changes depending on how the website did. Switch between all three variants.
Congratulations
The website is in good shape
But websites age — certificates expire and systems stop getting updates. Save the report and measure the website again in a few months.
ON Consulting & Advisory
Your web administrator can handle the fix
Send them the report — each finding describes what to do. If you’d rather have a new website from scratch instead of fixes, I’ll build it.
Recommendation based on the result
A fix probably isn’t worth it — consider a new website
According to the automated estimate from the check, fixing could cost more than a new website:
- WordPress 5.8 is probably outdated and without security updates.
- On mobile the main content loads in 6.4 s (recommended under 2.5 s).
- 4 serious findings in the website’s security and configuration.