Free Website Checker: age, hosting and security

Is your website or blog getting old? In about a minute the checker runs 13 indicators — from hosting and HTTPS to outdated components and known vulnerabilities. Free: score out of 100, colours, one-line results and an infographic. For €25 — the full report: exactly what was found, why it matters and how to fix it, as a PDF. Works for company sites, online shops and blogs (WordPress, Blogger, Ghost, Medium, Substack and more).

Our own analysis program. Public data only: we do not hack, do not log in and do not touch your code. Takes about a minute — watch each step live.

✓ CHECK OUR RESULTS YOURSELF — after the check, every one of the first 4 results comes with links to free independent tools (SSL Labs, MXToolbox, BuiltWith and others), so you can confirm them in one click.

What is free and what is in the full report

The free check shows where the problems are. The full report explains exactly what is wrong, why it matters for your business and how to fix it — a ready task for your developer.

What you get	Free check	Full report
Score and colour for all 13 indicators	✓	✓
Exactly what was found (versions, dates, missing settings)	partly	✓
Why each problem matters for your business, in plain words	—	✓
How to fix it — step-by-step instructions for your developer	—	✓
One list of all fixes in priority order: red first, then yellow	—	✓
Source for every finding, to check it yourself	first 4	✓
PDF with your company name, date and report number	—	✓

Full report — €25. You can order it right after the free check.

Guarantee: the report within 24 hours after payment, or your money back. If the report has an error or you consider it incomplete, write to us within 14 days saying what and why — we will rework the report free of charge.

Website hosting checker: who is hosting my website?

Enter an address and the checker shows which network the site lives on, the server country where it is published, whether the site sits behind a CDN such as Cloudflare, and how fast the server starts answering. Useful when you inherited a website and nobody remembers where it is hosted. More about hosting →

Website age checker

We show when the domain was registered, when the site first appeared in the public web archive and the latest year in its copyright line. The creation year is always approximate — but an old copyright year is exactly what visitors notice first. More about website age →

Website security check

The security part looks at the HTTPS certificate and its expiry, four protective headers, email spoofing protection (SPF and DMARC), Google's list of dangerous sites, the platform version, outdated components and known vulnerabilities (CVE) in the versions the site shows. It is a passive check of public data — no scanning, no login. More about connection security →

Website health check score

Like an MOT for your website — or a website grader: every indicator gets up to 10 points and you get a score out of 100 with a clear verdict: in good shape, time to think about an update, or needs replacing. How we score →

Free website audit or a full audit?

This free check is automatic and covers what can be seen from outside. If you need a list of exactly what to fix, order the full report (€25) or a manual technical or accessibility audit from OLBO. Website audits and prices →

How we score

Each indicator gives up to 10 points; the total is shown out of 100. 75–100 — your website is in good shape; 45–74 — time to think about an update; 0–44 — your website is at risk and needs replacing. If an indicator cannot be checked (for example, versions are hidden), it is marked grey and does not count either way.

Hosting

Server response time: under 0.8 s — 10 points; under 1.5 s — 8; under 3 s — 5; slower — 3. Network owner and country come from the public IP registry.

Connection security

Trusted certificate — 4; more than 14 days before expiry — 1; TLS 1.2 or 1.3 — 1; http:// redirects to https:// — 1; HSTS — 1; Content-Security-Policy — 1; X-Content-Type-Options plus clickjacking protection — 1.

Email protection

SPF record — 4, and it really restricts senders (~all or -all) — 1; DMARC record — 3, and it blocks fakes (quarantine or reject) — 2. A DMARC policy that only monitors (p=none) caps the indicator at 7.

Platform

Hosted service updated by the provider — 10; latest version — 10; still-supported version or modern framework (for example Next.js) — 9; version found but no support dates — 7; outdated WordPress — 6; marked insecure — 4; old site builder — 4; support ended — 2; version hidden — 7. Not identified — not scored.

Outdated components

Start at 10. Each component whose support has ended — minus 4. Server that announces software versions — minus 1.

Blacklists

Not on Google's list of dangerous sites — 10; listed — 0.

Known vulnerabilities

Start at 10. Insecure WordPress core — minus 6; each library with high or critical vulnerabilities — minus 3, with lower ones — minus 2. Any known vulnerability caps the indicator at 7. No visible versions — not scored.

Site age

Latest year in the copyright line: last year — 10; this year — 9 (often a year updated automatically, which proves little); two years ago — 7; three or four — 5; older — 2. The creation year is always approximate (domain registry and web archive).

Accessibility

Our basic checks: page language — 2; page title — 1; zoom allowed on phones — 2; images with text alternatives — 2; labelled form fields — 2; main heading — 1. When Google answers, the result is averaged with Google's automated accessibility score (divided by 10). Not a full WCAG audit.

Privacy (GDPR)

Start at 10. Fonts loaded from Google's servers — minus 3. Tracking scripts in the page code without a known consent tool — minus 2.

Google search

Google's SEO score divided by 10 (10 if Google does not answer). Home page set to noindex — minus 6; robots.txt blocks the whole site — minus 5; no sitemap.xml — minus 1; no meta description — minus 1.

AI readiness

Start at 10. Each of GPTBot, OAI-SearchBot, ClaudeBot and PerplexityBot blocked in robots.txt — minus 2 (up to 6). Fewer than 50 words readable without JavaScript — minus 4, fewer than 150 — minus 2. No structured data — minus 2. No llms.txt — minus 1. No link-preview tags — minus 1. Blocking Google-Extended or Applebot-Extended is shown, not scored.

Mobile and speed

Google PageSpeed mobile score divided by 10. Where Google has enough data, we also show how real Chrome visitors experienced the site over the last 28 days (Chrome UX Report).

Check it yourself

Every result can be verified with free public tools:

Hosting and IP — any WHOIS or IP lookup service
Certificate and headers — any SSL checker, or the padlock icon in your browser
SPF and DMARC — any DNS lookup tool (TXT records of your domain and of _dmarc)
Platform and components — the page source in your browser (Ctrl+U)
Support dates — endoflife.date
Vulnerabilities — the OSV and CVE databases
Blacklists — Google Safe Browsing site status
First appearance online — the Internet Archive Wayback Machine
Speed, SEO and accessibility scores — Google PageSpeed Insights
robots.txt, sitemap.xml, llms.txt — open them in your browser: your-site.com/robots.txt
Structured data — Google Rich Results Test or the Schema.org validator

Explained in plain words: Hosting · Connection security · Email protection · Platform · Outdated components · Blacklists · Known vulnerabilities · Site age · Accessibility · Privacy (GDPR) · Google search · AI readiness · Mobile and speed

Questions

Is the website checker really free?

Yes, with no sign-up. For free you see the overall score out of 100 and, for each of the 13 indicators, a colour, a one-line result and an infographic; for the first four, also links to independent tools to verify them. Exactly what was found (versions, dates, settings), why it matters and how to fix it are only in the paid full report (€25) with a PDF. How we score →

Can I check someone else's website?

Yes, if you have a legitimate interest — for example, as a customer or partner. The program reads only public data and changes nothing. Terms of use →

How do I find out who is hosting my website?

Run the check: the Hosting indicator shows the network owner and the server country, or tells you that the real server is hidden behind a CDN. Website hosting checker explained →

How accurate is the website age?

Approximate. We combine the domain registration year, the first web archive capture and the copyright year on the page. Website age checker explained →

What does the full report include?

Every problem explained in plain words, step-by-step fixes for your developer, one list of fixes in priority order, sources for every finding, and a PDF with your company name. Run a free check first →

My website scored badly. What now?

Start with the red items. Each one links to a page that explains it and what OLBO can do — from a technical audit (from €490) to a website redesign. Website redesign →

What we do not do

We only read what your website shows to any visitor: the home page, public DNS records, public registries. We do not try passwords, do not scan ports, do not log in and do not change anything. You can run up to 5 checks an hour. Full conditions: terms of use.