Site check for itovio.com
Security and email trust, findability in Google, readiness for AI assistants, and speed. Forty checks, a score out of 100, and the three fixes to make first. No sign-up, nothing stored.
Checks run from the Netherlands against the public internet only. One domain per request, fair use.
Little to fix. The next gains are in content and reach.
Checked 2 Nov 2026, 16:22 CET at https://itovio.com/. Results are cached for thirty minutes.
- Time to first byte1019 ms from the Netherlands. Cache pages at the edge or on the server; move hosting closer to your visitors.
- Content-Security-PolicyPresent, allows inline scripts. Add a Content-Security-Policy that lists the script and frame sources you use.
- PassSPF record
One SPF record, soft fail (~all).
- PassDMARC policy
DMARC p=quarantine, reports on.
- PassDKIM signing
DKIM key found for selector x.
- NoteMTA-STS
No MTA-STS policy (optional, protects mail in transit). Publish an MTA-STS policy if the mail provider supports it.
- PassHTTP redirects to HTTPS
Plain HTTP sends visitors to HTTPS.
- PassHTTPS reachable
Answered over HTTPS with status 200.
- PassHSTS
max-age 63072000 seconds.
- ImproveContent-Security-Policy
Present, allows inline scripts. Add a Content-Security-Policy that lists the script and frame sources you use.
- PassX-Content-Type-Options
nosniff
- PassClickjacking protection
Framing restricted.
- PassReferrer-Policy
strict-origin-when-cross-origin
- PassPermissions-Policy
Present.
- PassServer version hidden
Server header: Vercel
- Passsecurity.txt
Published.
- PassNameserver redundancy
3 nameservers.
- NoteCAA record
No CAA record (optional). Add a CAA record naming your certificate authority.
- PassTitle tag
"ITovio | Your digital department for websites, CRM, SEO and security" (68 characters)
- PassMeta description
156 characters.
- PassOne H1 heading
1 H1 heading in the HTML.
- PassCanonical URL
Self-referencing.
- PassIndexable
No noindex on the home page.
- PassMobile viewport
Present.
- PassLanguage declared
lang=en-NL
- PassSocial preview tags
Open Graph title and image present.
- PassImage alt text
0 of 59 images without alt text.
- Passrobots.txt
Present, names the sitemap.
- PassXML sitemap
85 entries.
- Passllms.txt
Published: a plain-text summary for language models.
- PassStructured data
Organization, WebSite, WebPage, FAQPage
- PassOrganization identity
Organization schema present.
- PassQuotable answers
FAQ schema present.
- PassContent in the server HTML
3397 words of text in the HTML response.
- PassPlain description
Meta description present.
- PassAI crawler policy
robots.txt states a policy for AI crawlers.
- ImproveTime to first byte
1019 ms from the Netherlands. Cache pages at the edge or on the server; move hosting closer to your visitors.
- PassHTML download
1026 ms for 152 KB.
- PassText compression
br compression.
- PassHTML size
152 KB of HTML.
- PassExternal scripts
0 script files on the home page.
- PassCaching headers
Cache-Control: no-cache
- PassModern delivery
Could not confirm HTTP/2 or HTTP/3 from the headers.
A person reads this and writes the priorities
The instant check reads what the public internet can see. The full report adds what a person finds: exposed services and admin panels, certificate and DNS details, which fixes matter for your customers' security questionnaires, and what to change on the pages that should rank and be quoted. A short PDF within one business day, free, no sales call unless you ask for one.
- Exposed services and admin panels
- Email authentication alignment, not only presence
- Page-by-page findability and AI readiness
- The three fixes we would do first, in order
