Loading scan status...
completed
HTTP 200
0 redirects
36 checks
Website audit scorecard for buildhop.io
The scanner fetched the public page, extracted deterministic facts, and stored scored results across SEO / AEO, security, accessibility, and design.
Submitted
https://buildhop.io/
Final URL
https://buildhop.io
Created
Jun 29, 2026, 3:46 AM
Safe fetch
59 ms
Four-score result
Ready to share (Strong): 35 passed, 1 failed, and 0 unknown. Strongest area: SEO / AEO. Weakest area: Design.
Overall
99
out of 100
SEO / AEO
100
out of 100
82/82 rule points
Security
100
out of 100
76/76 rule points
Accessibility
100
out of 100
94/94 rule points
Design
94
out of 100
103/110 rule points
Why this scored this way
Scores are deterministic: each category earns rule points for verified public signals and loses points for failed checks. Unknown checks are shown separately instead of guessed.
Category point breakdown
SEO / AEO82/82
Security76/76
Accessibility94/94
Design103/110
Biggest score-losing checks
low
Design
Runtime console healthDetected 0 console error(s) and 2 uncaught page error(s) during render.
Recommendations
Score-losing issues ordered by remediation priority, severity, and score impact.
1 fixes
4 opportunities
9 insights
1
low
Design
Priority 15
Fix runtime browser errors
-7 ptsWhat failed
The rendered page produced console or uncaught JavaScript errors.
Evidence
Detected 0 console error(s) and 2 uncaught page error(s) during render.
Priority
Priority 15: fix during launch polish.
Why it matters
Runtime errors can break forms, CTAs, animations, tracking, or responsive behavior even when the static HTML looks fine.
How to fix it
Open the page in a browser, reproduce the console errors, and fix missing assets, hydration problems, client-side exceptions, or failing third-party scripts.
Unknown and not detected states
FreeScan.app keeps partial public data explicit. It marks unverifiable signals as unknown or not detected instead of inventing evidence.
0 unknown
Safe public scans cannot see private cookies, authenticated content, browser-rendered state, or reliable contrast values unless they are present in static public markup.This scan did not produce unknown checks. If a future page has partial public data, the report will show those checks here instead of guessing.
Score aggregation details
Category scores come from earned rule points divided by available rule points. Failed checks are ordered by severity and score lost.
100/100
11 pass, 0 fail, 0 unknown
SEO / AEO
Severity mix: 0 critical, 3 high, 6 medium, 2 low.
No failed checks in this category.
100/100
6 pass, 0 fail, 0 unknown
Security
Severity mix: 2 critical, 3 high, 0 medium, 0 low.
No failed checks in this category.
100/100
8 pass, 0 fail, 0 unknown
Accessibility
Severity mix: 0 critical, 3 high, 5 medium, 0 low.
No failed checks in this category.
94/100
10 pass, 1 fail, 0 unknown
Design
Severity mix: 0 critical, 3 high, 6 medium, 2 low.
low
Runtime console health
-7 ptsDetected 0 console error(s) and 2 uncaught page error(s) during render.
Full check list
Failed, unknown, and passed checks are all shown so the report is transparent even when public data is partial.
Showing failed checks.
Failed checks
These checks need attention.
fail
low
Design
Runtime console health
0/7Detected 0 console error(s) and 2 uncaught page error(s) during render.
Failed: earned 0 of 7 points.
Priority: Priority 15: fix during launch polish.
Why it matters: Runtime errors can break forms, CTAs, animations, tracking, or responsive behavior even when the static HTML looks fine.
Fix: Open the page in a browser, reproduce the console errors, and fix missing assets, hydration problems, client-side exceptions, or failing third-party scripts.
Safe fetch metadata
Public headers and redirects captured during intake. Response bodies, cookies, and credentials are not stored.
Security and accessibility checks are basic automated public checks. They are not a complete security audit, penetration test, privacy review, or WCAG certification.
Landing page
Step 1HTTP 2007 captured header(s)Checked: https://buildhop.io
Next/final: https://buildhop.io
Content type: text/html; charset=utf-8
Landing page
Step 2HTTP 2007 captured header(s)Checked: https://buildhop.io
Next/final: https://buildhop.io
Content type: text/html; charset=utf-8
Content hash: 2f8d73deab0f03b0a951f780161e4852845b729c227eb5f7d05c55815ebdf92d
robots.txt
Step 3HTTP 2008 captured header(s)Checked: https://buildhop.io/robots.txt
Next/final: https://buildhop.io/robots.txt
Content type: text/plain; charset=utf-8
Content hash: 6115c91c76b507a54c35bd5b71e42f4baace05e32c71ae67e959cc02af833cfe
sitemap.xml
Step 4HTTP 2007 captured header(s)Checked: https://buildhop.io/sitemap.xml
Next/final: https://buildhop.io/sitemap.xml
Content type: application/xml
Content hash: e293e1876b1ff5be4a29fa1a701fc7b25b8cb4b0e36b13d7d8c0cccf37404cfb
llms.txt
Step 5HTTP 2007 captured header(s)Checked: https://buildhop.io/llms.txt
Next/final: https://buildhop.io/llms.txt
Content type: text/plain; charset=utf-8
Content hash: 624c57893daf2a7d08562c22120158f04cdc25e2aed0c009fbb990b48aa9a183
Security probe
Step 6HTTP 4047 captured header(s)Checked: https://buildhop.io/.env
Next/final: https://buildhop.io/.env
Content type: text/html; charset=utf-8
Fetch result: HTTP 404 returned for security_probe.
Security probe
Step 7HTTP 4047 captured header(s)Checked: https://buildhop.io/.git/config
Next/final: https://buildhop.io/.git/config
Content type: text/html; charset=utf-8
Fetch result: HTTP 404 returned for security_probe.
Security probe
Step 8HTTP 4031 captured header(s)Checked: https://buildhop.io/wp-config.php
Next/final: https://buildhop.io/wp-config.php
Content type: text/html; charset=utf-8
Fetch result: HTTP 403 returned for security_probe.
Security probe
Step 9HTTP 4047 captured header(s)Checked: https://buildhop.io/backup.zip
Next/final: https://buildhop.io/backup.zip
Content type: text/html; charset=utf-8
Fetch result: HTTP 404 returned for security_probe.
Captured public headers
content-type
text/html; charset=utf-8
referrer-policy
strict-origin-when-cross-origin
x-frame-options
DENY
permissions-policy
camera=(), microphone=(), geolocation=(), payment=(), usb=()
x-content-type-options
nosniff
content-security-policy
default-src 'self'; base-uri 'self'; form-action 'self'; frame-ancestors 'none'; object-src 'none'; script-src 'self' 'unsafe-inline'; style-src 'self' 'unsafe-inline'; img-src 'self' data: blob: https:; font-src 'self' data:; connect-src 'self' https://*.supabase.co wss://*.supabase.co https://react-tweet.vercel.app https://*.posthog.com https://*.i.posthog.com; frame-src 'self' http: https:; worker-src 'self' blob:; manifest-src 'self'
strict-transport-security
max-age=63072000; includeSubDomains; preload
Public report link
Markdown export
Share the website audit report
Copy a public report link or a Markdown version with scores, fixes, opportunities, insights, and a normal link back to the scanned site.
Share preview
buildhop.io website audit report
Ready to share: 99/100 overall, with prioritized fixes for SEO, security, accessibility, and design.
Public reports expose the scanned public URL, safe scores, sanitized public evidence, and fix guidance. They do not include credentials, cookies, hidden form values, or sensitive response bodies.
Rescan same URL
Rerun the full deterministic scanner for buildhop.io without re-entering the URL. The previous report stays saved so the next result can be compared against it.