Free tool
Free website audit: is your site legal, fast and winning you customers?
Type your website address and within seconds we'll tell you what's wrong, in five questions: can customers reach you, is it legal, does it work on mobile, can Google and ChatGPT find you, and is it secure. In plain English, with how to fix it.
Would you rather a person looked at it? We'll review it by hand, free
Only worried about your emails going to spam? Check it in a few seconds
What the audit looks at
The five questions a business owner has about their website, checked from the outside, the way a customer on a phone and Google see it. Here is what each one covers and why it matters to your business.
Can customers reach you?
Whether people on a phone can call you or message you on WhatsApp in one tap, whether your number, hours and area are visible, and whether there's a form. It's what loses the most customers: someone who needs a plumber in a hurry doesn't copy a number by hand, they ring the next one. No SEO tool checks this.
why a site with visitors gets no enquiriesIs your website legal?
Legal notice, privacy policy, cookie banner and what loads before a visitor agrees, plus changes few owners know about: prices including tax, customer reviews, dead links and chatbots that must say they are AI. The legal checks follow Spanish and EU law, and they're guidance on what to look at, not legal advice.
the legal requirements for a website in SpainDoes it work on mobile?
How long it takes to appear on a typical phone, measured with Google's speed test, what's slowing it down, with a screenshot of how it looks, and whether it reads well on a phone and for older people.
why a slow website loses customersCan Google and AI find you?
Whether Google can index your site (no forgotten noindex, a robots.txt and a sitemap), how it shows in the results, your local business details, how your Google Business Profile compares with competitors nearby, and whether ChatGPT or Perplexity can read you.
getting found in ChatGPTIs it secure, and do your emails arrive?
The padlock and certificate expiry, an out-of-date WordPress or scripts with known flaws, and whether your domain has SPF, DKIM and DMARC, the records that decide whether your emails arrive or land in spam. Without DMARC, anyone can send fake invoices in your name.
the "Not secure" browser warningSpanish law
Legal notice, privacy and cookies: what the audit checks in Spain
For businesses in Spain, this is what the legal part of the audit looks at, which rule each point comes from and, where there is one, a real AEPD case. It tells you what to review; whether your site is in order is a question for a lawyer.
Legal notice
Every business website must say who runs it, even an informational one: name or company name, tax ID, address and email, plus Companies Register details for a limited company.
LSSI, art. 10 (BOE)Privacy policy
If you have a form, you need a policy saying who handles the data, why, on what basis, for how long, and how to complain to the AEPD. The AEPD fined one company €1,000 because its policy did not say who was responsible (PS/00212/2024).
GDPR, art. 13Notice next to forms
Each form needs a short first-layer notice: who handles the data, why, and where to read the rest. A contact form needs no "I agree" box; a box is only needed for consent-based things like a newsletter, and it can never come pre-ticked.
AEPD model noticesCookies before consent
Non-essential cookies such as analytics and advertising need permission before they load, and rejecting must be as easy as accepting. A restaurant paid €1,600 over a banner with no way to reject (PS/00405/2023).
AEPD cookie guidePrices including tax
If you sell to consumers, the price shown must be the final one, tax included.
TRLGDCU, art. 20 (Ley 10/2025)Customer reviews
If you show reviews or testimonials, say whether you check they come from real customers and how you handle them.
TRLGDCU, art. 20.4 (Ley 10/2025)Customer phone line
If customers reach you on a 901, 902 or premium-rate number, the call cannot cost them more than a normal one: add an ordinary number.
TRLGDCU, art. 21.2 (Ley 10/2025)EU disputes platform link
The ODR platform closed on 20 July 2025; a link to it now goes nowhere.
Regulation (EU) 2024/3228Chatbots
Since 2 August 2026 a chatbot must say it is an AI.
EU AI Act, art. 50Complaint forms in Andalusia
If your business is in Andalusia and has no premises open to the public, your website must say that complaint forms are available, on paper and electronically (Hoj@, mandatory since 20 May 2026).
Decreto 82/2022, art. 7.3 (BOJA)
An automated, indicative review. It does not replace legal advice or a professional audit.
How it works
Type the address
Your site, or any public site: WordPress, Wix, Shopify or custom-built. Add a competitor's if you like and we'll compare you. No sign-up, no card.
We check it from outside
The way a customer on a phone and Google see it. The quick checks take seconds; Google's speed test takes up to a minute and the report fills itself in.
Traffic lights and what to fix first
The three things I'd fix first, every point in red, amber or green with how to fix it, and a link to the report to share or save as PDF.
Common Questions
Is it really free?
Yes. No sign-up and no card, the email is optional, and the full report is on screen. We do it because some of the people who audit their site end up wanting us to fix it; if that's not you, that's fine.
Do you keep my data?
We keep the site you audit, your approximate location (country, region and city), your browser, the page you came from and, if you give it to us, your email, to improve the tool, prevent abuse and send you the report; that record is deleted after 90 days. Your IP address is not logged: we only use it to work out that location and to limit how many audits are run. The report is kept for 90 days, with no personal data, so you can share it. We don't add you to any list or pass your details to anyone.
Does it replace a professional audit or a lawyer?
No. It's an automated, indicative review of what can be checked from the outside. It can't see your admin panel or Search Console, and on the legal side it tells you what to review, not whether your site is in order. It's a first step to know where to start.
What does a website audit include?
Usually a check of a site's technical and SEO health. This one is built around the five questions a business owner has: can customers reach you, is the site legal (for businesses in Spain), does it work on a phone, can Google and AI find you, and is it secure, email included. Every point is a traffic light with how to fix it.
How much does a website audit cost?
This one is free, with no sign-up. Agencies usually charge for a manual audit because it takes hours. If you'd rather a person looked after you've seen the report, we'll review it by hand for free and tell you what we'd fix first.
Can I compare myself with a competitor?
Yes. Add a competitor's site and we'll show the two side by side: score, load time on a phone, Google reviews, one-tap calling and the legal basics.
Does it check my Google Business Profile?
Yes, the basics. It finds the Google Business Profile that links to your site and checks whether it shows as open, has opening hours and the same phone number as your site, and how its rating and review count compare with nearby businesses in the same trade. It can't see inside the profile, such as categories or photos; we can review that for you.
Can it tell me if my website is secure?
It checks what can be seen from the outside: the padlock and when the certificate expires, whether visitors are sent to the secure version, basic security headers, an out-of-date WordPress or scripts with known flaws, and whether your domain's SPF, DKIM and DMARC records protect your email. It is not a penetration test.
Can it check whether my site is GDPR compliant?
It checks the parts you can see from the outside, as they apply to businesses in Spain: whether there is a privacy policy and which GDPR article 13 items it seems to be missing, a notice next to your forms, and whether analytics or advertising cookies load before the visitor agrees. It tells you what to review, not whether you are compliant: only a lawyer can say that.
Does it work for any website?
Yes, any public site: WordPress, Wix, Shopify, Squarespace or custom-built, whether you made it or an agency did. It only looks at what's visible from the outside, so it needs no passwords or admin access.
Does it work for websites outside Spain?
Yes, nearly all of it. Contact, mobile, Google and AI, security and email are checked the same way in any country. The legal part checks Spanish rules (the LSSI, GDPR and the AEPD cookie guide), so it only counts when your site looks Spanish, which we tell from the domain, the phone number, the address or the tax ID. If it looks like it's from somewhere else, the report says so and leaves that part out of the score.
My site works, so why is anything red?
Because working is not the same as turning visitors into customers. A red point is something that can cost you calls, Google rankings or trouble on the legal side, even if the site looks fine.
What do I do about the red points?
Each one comes with how to fix it, and you can do plenty of them yourself. If you'd rather we did, much of it is part of website maintenance from £49 a month with no contract, even if somebody else built your site. The rest gets a fixed quote.
How long does it take?
The quick checks take a few seconds. Google's speed test on a phone takes up to a minute, and the report fills itself in meanwhile.