Is your website out of date?
Our free check will score your site out of 100 and list what's old, exposed or slow, in plain English. It opens soon.
One email, when it opens. Nothing else, and we don't share your address.
A score out of 100 and a grade
Judged against 2026 standards
The three biggest problems
- Security
- Software age
- Speed
- Modern standards
What we check
Four things, checked on your live site.
- 01
Is it locked down?
Your secure connection and certificate, the six security headers browsers look for, insecure files on secure pages and whether your server gives away its software versions. On WordPress, the remote login and the public user list too.
- 02
How old is the software?
Your WordPress version against the latest release, your PHP version against PHP's own support dates, the plugins we can see, old jQuery and retired technology like Flash.
- 03
Is it fast on a phone?
Google's PageSpeed score on a phone, how heavy your home page is, how many scripts it loads and what makes browsers wait before showing it.
- 04
Is it built to today's standards?
Whether it fits a phone screen, serves modern image formats, shows a current footer year, publishes a sitemap and describes itself with structured data.
We judge strictly, against what a well-built site does in 2026. Anything we can't see from outside shows as “Couldn't check” and is left out of your score.
Why it matters
An out-of-date site costs you more than it looks.
Old software is how sites get broken into
Patchstack counted 11,334 new security holes in WordPress and its plugins and themes in 2025, 91% of them in plugins. About half of the serious ones were attacked within a day of going public.
Unsupported software stays broken
Once a PHP version reaches its end of life, PHP stops fixing it and warns that sites still on it may be exposed to security holes that stay unpatched. WordPress says only its most recent release is safe to use.
Source: PHP supported versionsSource: WordPress.org releases
Google judges your site on a phone
Google ranks the mobile version of your site and recommends fast, stable pages for success in its results. A slow page on a phone works against you in Google.
After the check
From your report to a site that passes.
- Step 1
Free check
Coming soon to this page. Until then, book a call and we'll run it on your site with you.
- Step 2
A 30-minute call
We go through your report with you: what's worth fixing on the site you have, and what a rebuild would cost if patching isn't worth it.
- Step 3
The rebuild
If a rebuild makes sense, we build your new site on the same modern foundation this site runs on:
- Security headers on from day one
- No plugins to keep patching
- Images in modern formats, sized for phones
- Fast pages on a phone signal
- Hosted and run by us, end to end
For the technical reader: we build on Next.js, Payload CMS, Neon Postgres and Vercel.
How a rebuild worksQuestions
What people ask us.
Does the check change anything on my site?
No. It reads your home page and a few public files, the way any visitor or search engine does, and changes nothing.
My site works fine. Why is my score low?
A site can look fine and still run software that no longer gets security fixes, miss the settings browsers use to protect visitors or load slowly on a phone. We judge against what a well-built site does in 2026, and every finding says what we saw.
What does "Couldn't check" mean?
We couldn't see it from outside. Often that's good news: a server that hides its software version, for example. Anything we couldn't check is left out of your score, never counted against you.
Is this a full security audit?
No. It reads what anyone can see from outside, mostly your home page. It doesn't log in, test your forms or look for malware. It shows how current and exposed your site looks from outside.
Where does the speed score come from?
Google's own PageSpeed test, run on a phone. If Google's test doesn't answer in time, we say so and leave it out of your score.
Can't I just fix these myself?
Some of them, yes. A developer can add security headers or switch off a setting in an afternoon. When the list includes old software, lots of plugins and a slow page, a rebuild is often less work than patching. We'll tell you which it is on the call.
Do you keep my details?
We keep the web address and the result, so your report link works. We don't store your IP address with a check.
Book a call
Let's go through your site together.
A 30-minute call. We'll look at what's out of date on your site, what it's costing you and whether patching or a rebuild makes more sense.
Book a call and we'll run the check on your site with you.