Speed
Google PageSpeed scores for mobile and desktop, Core Web Vitals (LCP, CLS, INP) and your server’s Time to First Byte.
How healthy is your website’s hosting?
A free, honest check of your site’s speed, security, domain and WordPress health — with an itemized score in under 30 seconds.
What we check
Security
SSL certificate validity and expiry, SSL Labs grade, HTTPS redirect, key security headers and malware blocklists.
Domain health
Domain expiration date, nameservers and DNS resolution, email (MX) records and whether the site is up right now.
WordPress health
Core version vs. the latest release, known plugin/theme vulnerabilities, exposed xmlrpc.php, readme files, debug logs and wp-config.php.
Our scoring is honest by design: a well-hosted site can score 90+, checks we can’t complete never count against you, and we’ll tell you when your setup is already great.
Frequently asked questions
Is my WordPress site slow?
Enter your domain above. We run Google PageSpeed Insights for mobile and desktop and report Core Web Vitals: Largest Contentful Paint (good is 2.5 seconds or less), Cumulative Layout Shift (0.1 or less) and Interaction to Next Paint (200 ms or less), plus your server’s Time to First Byte (good is 800 ms or less). A slow TTFB usually points to hosting; poor LCP or INP with a fast TTFB usually points to heavy images, themes or plugins.
How do I check if my hosting is secure?
A secure host serves a valid SSL/TLS certificate with an A or A+ SSL Labs grade, forces HTTPS with a redirect, sends security headers such as HSTS, X-Content-Type-Options and X-Frame-Options, and keeps the site off malware blocklists. This tool checks all of these for free, along with WordPress-specific risks like an outdated core version, known plugin vulnerabilities, an exposed xmlrpc.php and publicly readable debug logs.
Is the Hosting Health Check free? Do I need to give my email?
Yes, it’s free, and no email is needed to run a check. You’ll see your overall score and top findings right away. If you’d like the full itemized report, enter your email and it appears on the page instantly, with a copy sent to your inbox.
Will this scan harm or slow down my website?
No. The tool only performs passive checks of publicly available information — the same requests any visitor or search engine makes — plus lookups in public services like Google PageSpeed Insights, SSL Labs, DNS and domain registration records. It does not attempt logins, exploits or intrusive scanning.
How is the score calculated?
Each check is rated good, warning or needs fixing and weighted by impact. These roll up into sub-scores for Speed, Security, Domain Health and WordPress Health (only shown when WordPress is detected), and a weighted overall score out of 100: 90–100 Excellent, 75–89 Good, 50–74 Needs Attention, below 50 At Risk. Checks that couldn’t be completed are left out rather than counted against you, and a well-run site can score 90 or higher.
Can I check a website I don’t own?
The checks only use publicly available information, but you should only check domains you have the right to check — for example your own site, a client’s site, or one you’re considering buying or managing.