What the audit examines
The 9 pillars that decide whether your site works for you or against you, examined page by page across the pages of your plan. Each has its own scoring, and each says what it could not verify.
Audit your home page for free
We look at your home page for the pillar you pick, and we email you our report within 48 working hours.
One page, one pillar. The plans cover the 9 pillars across your whole site.
The 9 pillars
Each pillar is scored out of a hundred and leans, wherever one exists, on a law, a standard or a specification. Our criteria are not personal preferences: you can read them, and argue them with your team or your provider.
Security and encryption
Recommended TLS versions, RFC 9116Certificate validity, the cipher versions still accepted, the security headers sent, and the sensitive files left in plain sight.
Performance
Core Web VitalsHow fast each page actually renders, measured in a browser: the speed indicators Google publishes and counts among its signals, page weight, and what slows the first paint.
Search visibility
schema.org, RFC 9309What search engines actually read on your pages: titles, descriptions, canonical addresses, structured data, language versions, sitemap. A site can be beautiful and unreadable to a search engine.
Accessibility
WCAG 2.2 AA, RGAA, EU Directive 2019/882Keyboard use, contrast, alternatives to images, and the structure of the pages.
Compliance and privacy
GDPR, ePrivacy, CNIL, LCENThe information the law requires you to display, cookie consent as it actually works (what is set before you agree), the privacy policy, and what gets sent to third parties during a visit.
Domain and network
SPF, DKIM, DMARC (RFC 7489), DNSSECThe expiry date of the domain and its protection against a transfer, the signing of the zones, and what does, or does not, stop a third party writing to your customers in your name.
Independence and resilience
GDPR, CLOUD ActWhere the site is hosted and under which jurisdiction, which suppliers it depends on, and what stops if one of them stops. Questions your customers, and their lawyers, may well ask.
Content and trust
Google's E-E-A-T, schema.orgHow fresh the content is, the authority signals engines look for, how readable your pages are to answer engines and assistants, and whether what the site promises matches what it does.
Experience and reliability
no dedicated standard: measured facts and human reviewThe errors that happen inside the pages, the broken links and resources, the error pages, the display on a phone, and the journeys that matter: contact, quote, purchase.
Our method
Measured, not declared
We open each page in a browser, the way a visitor would, and we record what actually happens there: what loads, what appears, what gets sent to third parties.
On a phone as much as on a computer
Speed is measured twice: once under phone conditions (mobile network and throttled processor, like a visitor away from wifi), once under desktop conditions. The same site can feel fine on one and be far too slow on the other, so the report gives both figures.
Display is checked at three widths: phone, tablet, computer. Some faults are only visible at certain widths: a button pushed off screen with no horizontal scrolling to signal it, a menu that no longer opens, a control covered by a banner. At each width, we check which controls stay genuinely reachable.
In every language you order
A site in several languages cannot be measured in one. For every language you order, we go looking for the translated versions even when no link leads to them: on many sites the language switcher is a form, and ordinary crawling never reaches the other-language version. We then check that the versions declare each other, that the page served is the one that was asked for, and that the content is translated rather than copied from one language to the other, or simply missing.
Without an extra language, the audit stays within one language, and the methodology note names those that were not examined. Every further language is analysed like your main language, its pages scored one by one, and it is an option on the pricing page.
What the server sends, and what the browser shows
We read the same page twice: the raw answer your server sends, before any processing, then the page as the browser displays it. What counts is the gap between the two. A title, a description or a canonical address built by the browser alone may never be visible to search engines or to other automated systems.
Documented scoring
Each pillar receives a score out of a hundred under documented, stable scoring, applied to the facts recorded during the audit. Each point counts against criteria set in advance, rather than against how the auditor happens to see it that day.
Weighting matched to your business
An overall score has to weigh what matters for your business. On a brochure site, search visibility carries 18% of the overall score and security 10%: being found is what counts. On an application where people log in, those two weights are reversed: search 4%, security 25%. On a public-sector site, accessibility becomes the first item, at 24%, because French law requires it. The report always states which weighting produced your score, and each chapter publishes the weight of its pillar under the six weightings.
What artificial intelligence adds
The measurements come from deterministic tools; we add a reading assisted by artificial intelligence, which cross-checks them against each other and from one page to the next. That is how we catch gaps no single check can see: a page that promises one thing while the site does another. It invents no measurement and sets no score.
A method that changes, and says so
Every version of the method carries a number, printed on the report. Measure your site again later and we compare the two under the same weighting, so a score that moves means something really changed.
What we do not do
Nothing is installed on your site, and nothing is asked of you. No code to add, no extension, no access to your hosting, no password. We examine only what your site shows any visitor, and that is precisely the point: the report describes what your customers, your partners and search engines see, not what privileged access would let us guess.
The audit covers what is observable from outside your site, and it is non-intrusive: no access attempt, no form sent, no account created, no order placed. Your site only sees read-only visits, comparable to those of any visitor. Whatever is not reachable or not verifiable that way is flagged as such, never presented as compliant.
What “compliance” means here
The audit checks what your site displays and must display: the information French law requires about the publisher and the host, cookie consent as it actually works, the privacy policy, what gets sent to third parties. The personal data regulation also imposes internal obligations (processing records, contracts with processors) that cannot be seen from outside: they are out of scope, and the report never claims to have checked them.
For the same reason, the report records facts, measurements and observable signs. It is neither a conformity certificate, nor legal advice, nor a penetration test: the methodology note writes down what the audit could not verify, and what to do about it is yours to decide, with your adviser if need be.
The deliverable
Three PDF documents, written in French or English. You choose the language when you order. The report opens on a summary that reads without technical background, then gives the overall score, its weighting, and each pillar scored and justified. The page-by-page analysis takes your pages one by one, with what was observed on each. The methodology note says what was checked, how, and what could not be. The report is fully yours: hand it on unchanged to your teams, your provider, a buyer or an investor.
Every limit of the examination is stated in the methodology note of your audit. A point that cannot be verified is never presented as compliant.
What it costs, by the size of your site
Four plans by number of pages, delivered in 5 working days up to 60 pages, payment collected on delivery.