Loading scan status...
completed
HTTP 200
0 redirects
36 checks
Website audit scorecard for buildhop.io
The scanner fetched the public page, extracted deterministic facts, and stored scored results across SEO / AEO, security, accessibility, and design.
Submitted
https://buildhop.io/founder/jacob-counsell
Final URL
https://buildhop.io/founder/jacob-counsell
Created
Jul 1, 2026, 11:58 PM
Safe fetch
112 ms
Four-score result
Close to ready (Strong): 32 passed, 4 failed, and 0 unknown. Strongest area: Security. Weakest area: Design.
Overall
91
out of 100
SEO / AEO
89
out of 100
82/92 rule points
Security
100
out of 100
76/76 rule points
Accessibility
91
out of 100
86/94 rule points
Design
83
out of 100
91/110 rule points
Why this scored this way
Scores are deterministic: each category earns rule points for verified public signals and loses points for failed checks. Unknown checks are shown separately instead of guessed.
Category point breakdown
SEO / AEO82/92
Security76/76
Accessibility86/94
Design91/110
Biggest score-losing checks
high
SEO / AEO
Schema presenceDetected 0 JSON-LD schema block(s).
medium
Design
Rendered speed signalsDOMContentLoaded: 558ms. Load complete: 839ms. First contentful paint: 360ms. Resources: 59. Scripts: 25. Images: 0. Third-party origins: 1. Transfer: not available.
medium
Design
Rendered layout ergonomicsHorizontal overflow: 0px. Small tap targets: 12.
medium
Accessibility
Basic contrast8 of 100 rendered text color sample(s) missed WCAG contrast targets. Worst rendered ratio: 1.
Recommendations
Score-losing issues ordered by remediation priority, severity, and score impact.
4 fixes
7 opportunities
9 insights
1
fail
high
SEO / AEO
Priority 12
Add basic structured data
-10 rule ptsWhat failed
No JSON-LD schema was detected on the page.
Evidence
Detected 0 JSON-LD schema block(s).
Priority
Priority 12: fix during launch polish.
Why it matters
Structured data gives search and answer engines explicit facts about your product.
How to fix it
Add JSON-LD for SoftwareApplication, Product, Organization, or WebSite using only accurate public facts.
2
fail
medium
Design
Priority 13
Fix rendered layout ergonomics
-9 rule ptsWhat failed
The browser-rendered page has layout or tap-target issues.
Evidence
Horizontal overflow: 0px. Small tap targets: 12.
Priority
Priority 13: fix during launch polish.
Why it matters
Horizontal overflow and tiny tap targets make the page feel broken on real devices, especially for mobile visitors.
How to fix it
Remove elements wider than the viewport, add responsive constraints, and make important links, buttons, inputs, and controls at least 40px tall and wide where possible.
3
fail
medium
Design
Priority 14
Improve rendered speed signals
-10 rule ptsWhat failed
The browser-rendered page shows slow or heavy speed signals.
Evidence
DOMContentLoaded: 558ms. Load complete: 839ms. First contentful paint: 360ms. Resources: 59. Scripts: 25. Images: 0. Third-party origins: 1. Transfer: not available.
Priority
Priority 14: fix during launch polish.
Why it matters
Slow pages lose impatient visitors and make every SEO, social, and paid-traffic visit work harder.
How to fix it
Reduce render-blocking scripts/styles, compress and size images, defer non-critical JavaScript, reduce third-party tags, and keep above-the-fold content quick to paint.
4
fail
medium
Accessibility
Priority 20
Improve detectable color contrast
-8 rule ptsWhat failed
The scanner found text/background color pairs that may be hard to read, or could not verify contrast.
Evidence
8 of 100 rendered text color sample(s) missed WCAG contrast targets. Worst rendered ratio: 1.
Priority
Priority 20: lower-risk cleanup after urgent launch blockers.
Why it matters
Low contrast makes a launch page feel less polished and can exclude users with low vision.
How to fix it
Review key text, buttons, and links against a 4.5:1 contrast target for normal text.
Unknown and not detected states
FreeScan.app keeps partial public data explicit. It marks unverifiable signals as unknown or not detected instead of inventing evidence.
0 unknown
Safe public scans cannot see private cookies, authenticated content, browser-rendered state, or reliable contrast values unless they are present in static public markup.This scan did not produce unknown checks. If a future page has partial public data, the report will show those checks here instead of guessing.
Score aggregation details
Category scores come from earned rule points divided by available rule points. Failed checks are ordered by severity and score lost.
89/100
10 pass, 1 fail, 0 unknown
SEO / AEO
Severity mix: 0 critical, 6 high, 3 medium, 2 low.
high
Schema presence
-10 rule ptsDetected 0 JSON-LD schema block(s).
100/100
6 pass, 0 fail, 0 unknown
Security
Severity mix: 2 critical, 3 high, 0 medium, 0 low.
No failed checks in this category.
91/100
7 pass, 1 fail, 0 unknown
Accessibility
Severity mix: 0 critical, 3 high, 5 medium, 0 low.
medium
Basic contrast
-8 rule pts8 of 100 rendered text color sample(s) missed WCAG contrast targets. Worst rendered ratio: 1.
83/100
9 pass, 2 fail, 0 unknown
Design
Severity mix: 0 critical, 3 high, 6 medium, 2 low.
medium
Rendered speed signals
-10 rule ptsDOMContentLoaded: 558ms. Load complete: 839ms. First contentful paint: 360ms. Resources: 59. Scripts: 25. Images: 0. Third-party origins: 1. Transfer: not available.
medium
Rendered layout ergonomics
-9 rule ptsHorizontal overflow: 0px. Small tap targets: 12.
Full check list
Failed, unknown, and passed checks are all shown so the report is transparent even when public data is partial.
Showing failed checks.
Failed checks
These checks need attention.
fail
high
SEO / AEO
Schema presence
0/10Detected 0 JSON-LD schema block(s).
Failed: earned 0 of 10 points.
Priority: Priority 12: fix during launch polish.
Why it matters: Structured data gives search and answer engines explicit facts about your product.
Fix: Add JSON-LD for SoftwareApplication, Product, Organization, or WebSite using only accurate public facts.
fail
medium
Accessibility
Basic contrast
0/88 of 100 rendered text color sample(s) missed WCAG contrast targets. Worst rendered ratio: 1.
Failed: earned 0 of 8 points.
Priority: Priority 20: lower-risk cleanup after urgent launch blockers.
Why it matters: Low contrast makes a launch page feel less polished and can exclude users with low vision.
Fix: Review key text, buttons, and links against a 4.5:1 contrast target for normal text.
fail
medium
Design
Rendered speed signals
0/10DOMContentLoaded: 558ms. Load complete: 839ms. First contentful paint: 360ms. Resources: 59. Scripts: 25. Images: 0. Third-party origins: 1. Transfer: not available.
Failed: earned 0 of 10 points.
Priority: Priority 14: fix during launch polish.
Why it matters: Slow pages lose impatient visitors and make every SEO, social, and paid-traffic visit work harder.
Fix: Reduce render-blocking scripts/styles, compress and size images, defer non-critical JavaScript, reduce third-party tags, and keep above-the-fold content quick to paint.
fail
medium
Design
Rendered layout ergonomics
0/9Horizontal overflow: 0px. Small tap targets: 12.
Failed: earned 0 of 9 points.
Priority: Priority 13: fix during launch polish.
Why it matters: Horizontal overflow and tiny tap targets make the page feel broken on real devices, especially for mobile visitors.
Fix: Remove elements wider than the viewport, add responsive constraints, and make important links, buttons, inputs, and controls at least 40px tall and wide where possible.
Safe fetch metadata
Public headers and redirects captured during intake. Response bodies, cookies, and credentials are not stored.
Security and accessibility checks are basic automated public checks. They are not a complete security audit, penetration test, privacy review, or WCAG certification.
Landing page
Step 1HTTP 2007 captured header(s)Checked: https://buildhop.io/founder/jacob-counsell
Next/final: https://buildhop.io/founder/jacob-counsell
Content type: text/html; charset=utf-8
Landing page
Step 2HTTP 2007 captured header(s)Checked: https://buildhop.io/founder/jacob-counsell
Next/final: https://buildhop.io/founder/jacob-counsell
Content type: text/html; charset=utf-8
Content hash: 4e48eaf6a7f553ded19805e3918c89a4cae75c1c8309991d042fdd48b83845e5
robots.txt
Step 3HTTP 2008 captured header(s)Checked: https://buildhop.io/robots.txt
Next/final: https://buildhop.io/robots.txt
Content type: text/plain; charset=utf-8
Content hash: 6115c91c76b507a54c35bd5b71e42f4baace05e32c71ae67e959cc02af833cfe
sitemap.xml
Step 4HTTP 2007 captured header(s)Checked: https://buildhop.io/sitemap.xml
Next/final: https://buildhop.io/sitemap.xml
Content type: application/xml
Content hash: b6c3db2113a9c8435e1bf3d5c440ce0d34ecd4cf272cbb5011e9c1931fb9bbad
llms.txt
Step 5HTTP 2007 captured header(s)Checked: https://buildhop.io/llms.txt
Next/final: https://buildhop.io/llms.txt
Content type: text/plain; charset=utf-8
Content hash: 624c57893daf2a7d08562c22120158f04cdc25e2aed0c009fbb990b48aa9a183
Security probe
Step 6HTTP 4047 captured header(s)Checked: https://buildhop.io/.env
Next/final: https://buildhop.io/.env
Content type: text/html; charset=utf-8
Fetch result: HTTP 404 returned for security_probe.
Security probe
Step 7HTTP 4047 captured header(s)Checked: https://buildhop.io/.git/config
Next/final: https://buildhop.io/.git/config
Content type: text/html; charset=utf-8
Fetch result: HTTP 404 returned for security_probe.
Security probe
Step 8HTTP 4031 captured header(s)Checked: https://buildhop.io/wp-config.php
Next/final: https://buildhop.io/wp-config.php
Content type: text/html; charset=utf-8
Fetch result: HTTP 403 returned for security_probe.
Security probe
Step 9HTTP 4047 captured header(s)Checked: https://buildhop.io/backup.zip
Next/final: https://buildhop.io/backup.zip
Content type: text/html; charset=utf-8
Fetch result: HTTP 404 returned for security_probe.
Captured public headers
content-type
text/html; charset=utf-8
referrer-policy
strict-origin-when-cross-origin
x-frame-options
DENY
permissions-policy
camera=(), microphone=(), geolocation=(), payment=(), usb=()
x-content-type-options
nosniff
content-security-policy
default-src 'self'; base-uri 'self'; form-action 'self'; frame-ancestors 'none'; object-src 'none'; script-src 'self' 'unsafe-inline'; style-src 'self' 'unsafe-inline'; img-src 'self' data: blob: https:; font-src 'self' data:; connect-src 'self' https://*.supabase.co wss://*.supabase.co https://react-tweet.vercel.app https://*.posthog.com https://*.i.posthog.com; frame-src 'self' http: https:; worker-src 'self' blob:; manifest-src 'self'
strict-transport-security
max-age=63072000; includeSubDomains; preload
Public report link
Markdown export
Share the website audit report
Copy a public report link or a Markdown version with scores, fixes, opportunities, insights, and a normal link back to the scanned site.
Share preview
buildhop.io website audit report
Close to ready: 91/100 overall, with prioritized fixes for SEO, security, accessibility, and design.
Public reports expose the scanned public URL, safe scores, sanitized public evidence, and fix guidance. They do not include credentials, cookies, hidden form values, or sensitive response bodies.
Rescan same URL
Rerun the full deterministic scanner for buildhop.io without re-entering the URL. The previous report stays saved so the next result can be compared against it.