Skip to main content

wpmultitool.com — Website Report

Scored 73/100 · Scanned with Foglift

Site Technical HealthMean of SEO, Performance, Security, and Accessibility. AI Readiness is reported separately.
C
Site Technical Health

Mean of SEO, Performance, Security, and Accessibility.

wpmultitool.com scored 73. Addressing the 8 listed issues could raise its estimated score to 88.

SEOSearch Engine Optimization — how well your site ranks in traditional search engines like Google
AI ReadinessAI Readiness: this saved audit's weighted combination of Technical (T1) and Authority (T2) signals.
PerformancePerformance — how fast your site loads (Core Web Vitals, page weight, render speed)
SecuritySecurity — how well your site protects against threats (HTTPS, headers, CSP, HSTS)
AccessibilityAccessibility — how usable your site is for people with disabilities, including screen readers and keyboard navigation
3 critical5 warnings8 total issues

Quick wins

~27 min total fix time
1AI search engines can't read your site~2m
2Missing HSTS header~2m
3Missing X-Content-Type-Options header~2m

https://wpmultitool.com/ · 2026-04-20

Scanned with Foglift · Technical Audit + AI Readiness analysis

AI Action Plan

Website Analysis for https://wpmultitool.com/ Great news — your site has strong AI visibility (76/100). Site Technical Health: 73/100. AI engines like ChatGPT and Perplexity are likely to find and cite your content. We found 3 critical issues and 5 warnings. Here's your prioritized action plan:

FIX FIRST (Critical): 1. AI search engines can't read your site — Your site blocks 6 AI crawlers (GPTBot, ChatGPT-User, Claude-Web...). This means ChatGPT, Perplexity, and other AI assistants won't recommend your site in their answers. Ask your developer to update the robots.txt file to allow these crawlers.

2. Missing HSTS header — Enable HTTP Strict Transport Security to force HTTPS connections. 3. Missing Content Security Policy header — Add a Content-Security-Policy header to prevent XSS and injection attacks. QUICK WINS (Warnings): 1. Missing X-Content-Type-Options header — Set X-Content-Type-Options: nosniff to prevent MIME-type sniffing. 2. Missing X-Frame-Options header — Set X-Frame-Options to prevent clickjacking attacks. 3. Missing Referrer Policy header — Add a Referrer-Policy header to

7 more critical fixes + quick wins in your full report

Create a free account to save this audit and unlock the complete action plan.

Save and unlock my full report

Free account. No credit card required.

Share This Technical Audit

Send this Technical Audit to a teammate or contact. The shareable link includes all scores and issues.

Email to Contact

AI Readiness

Technical and authority signals that support AI systems in accessing, understanding, and reusing your content

73C
Technical76
Authority70
Set up all 6 tiers free →
85
Brand Mentions
Found 16+ web mentions of "wpmultitool"
53
Domain Authority
PageRank: 3.1/10, 15+ external references
98
Content Freshness
39 of 39 pages updated in the last 30 days
76
Technical Readiness
Moderate technical readiness — some improvements possible

Technical Issues

AI search engines can't read your sitecritical~2 min fix

Your site blocks 6 AI crawlers (GPTBot, ChatGPT-User, Claude-Web...). This means ChatGPT, Perplexity, and other AI assistants won't recommend your site in their answers. Ask your developer to update the robots.txt file to allow these crawlers.

Quick Fix
# Add to your robots.txt to allow AI crawlers:
User-agent: GPTBot
Allow: /

User-agent: ChatGPT-User
Allow: /

User-agent: ClaudeBot
Allow: /

User-agent: PerplexityBot
Allow: /

User-agent: Google-Extended
Allow: /
Allow AI crawlers to index your content so you appear in ChatGPT, Perplexity, and Google AI Overviews.

How does AI see Wpmultitool?

When users ask AI about your industry, are you recommended?

G
C
P
Ge
A

Start with weekly Perplexity checks for Wpmultitool. Paid plans add ChatGPT, Google AI Overview, Gemini, and Claude.

SEO & Technical Issues (7)

Missing HSTS headercriticalSecurity~2 min fix

Enable HTTP Strict Transport Security to force HTTPS connections.

Quick Fix
# Nginx:
add_header Strict-Transport-Security "max-age=31536000; includeSubDomains" always;

# Apache (.htaccess):
Header always set Strict-Transport-Security "max-age=31536000; includeSubDomains"

# Next.js (next.config.js headers):
{ key: 'Strict-Transport-Security', value: 'max-age=31536000; includeSubDomains' }
HSTS forces browsers to use HTTPS, preventing downgrade attacks and cookie hijacking.
Missing Content Security Policy headercriticalSecurity~5 min fix

Add a Content-Security-Policy header to prevent XSS and injection attacks.

Quick Fix
# Nginx:
add_header Content-Security-Policy "default-src 'self'; script-src 'self' 'unsafe-inline'; style-src 'self' 'unsafe-inline';" always;

# Apache (.htaccess):
Header set Content-Security-Policy "default-src 'self'; script-src 'self' 'unsafe-inline'; style-src 'self' 'unsafe-inline';"

# Next.js (next.config.js headers):
{ key: 'Content-Security-Policy', value: "default-src 'self'; script-src 'self' 'unsafe-inline'" }
Content-Security-Policy prevents XSS attacks by controlling which resources the browser can load.
Missing X-Content-Type-Options headerwarningSecurity~2 min fix

Set X-Content-Type-Options: nosniff to prevent MIME-type sniffing.

Quick Fix
# Nginx:
add_header X-Content-Type-Options "nosniff" always;

# Next.js (next.config.js headers):
{ key: 'X-Content-Type-Options', value: 'nosniff' }
Prevents browsers from MIME-type sniffing, which can lead to security vulnerabilities.
Missing X-Frame-Options headerwarningSecurity~2 min fix

Set X-Frame-Options to prevent clickjacking attacks.

Quick Fix
# Nginx:
add_header X-Frame-Options "SAMEORIGIN" always;

# Next.js (next.config.js headers):
{ key: 'X-Frame-Options', value: 'SAMEORIGIN' }
X-Frame-Options prevents clickjacking by controlling who can embed your page in an iframe.
Missing Referrer Policy headerwarningSecurity~2 min fix

Add a Referrer-Policy header to control information leakage.

Quick Fix
# Nginx:
add_header Referrer-Policy "strict-origin-when-cross-origin" always;

# Next.js (next.config.js headers):
{ key: 'Referrer-Policy', value: 'strict-origin-when-cross-origin' }
Controls how much referrer information is sent with requests, protecting user privacy.
Missing Permissions Policy headerwarningSecurity~2 min fix

Add a Permissions-Policy header to control browser feature access.

Quick Fix
# Nginx:
add_header Permissions-Policy "camera=(), microphone=(), geolocation=()" always;

# Next.js (next.config.js headers):
{ key: 'Permissions-Policy', value: 'camera=(), microphone=(), geolocation=()' }
Permissions-Policy restricts which browser features your site can use, reducing attack surface.
Server response could be fasterwarningPerformance

Server responded in 1.3s. Aim for under 200ms TTFB. Consider caching, CDN, or server-side optimizations.

Your Potential Score

73

Now

88

Estimated potential

+15 points estimated improvement from addressing 8 listed issues

Estimate based on the measured category scores and the issues listed in this audit.

Track your AI visibility over time

AI Visibility Monitoring

Free checks Perplexity weekly while you're active. Paid plans add ChatGPT, Google AI Overview, Gemini, and Claude with daily, twice-daily, or hourly monitoring.

Competitor Tracking

Compare your AI visibility against competitors. Know when they overtake you.

Weekly Digest

Get AI-generated insights emailed every Monday with action items.

Set up Free monitoring

Weekly Perplexity while active · No credit card required

Compare paid plans — from $49/mo

Industry Benchmark

SEO
Avg: 62+38Ahead
AI Readiness
Avg: 35+38Ahead
Performance
Avg: 55+35Ahead
Security
Avg: 40-40At risk
Accessibility
Avg: 68+32Ahead

Based on 120+ websites scanned across industries. See full benchmark report →

What This Score Means for You

Security gaps — Missing security headers may flag your site as unsafe in browsers, hurting trust and conversions.

Most of these issues have simple, copy-paste fixes. Check the code snippets above for quick solutions.

Security score: 0/100

Most security issues are 5-minute fixes — adding HTTP headers to your server config. Check the code fixes above for the exact headers to add — we include copy-paste code for Nginx, Apache, Vercel, and Netlify.

Score of 0 means your site has no security headers at all. Browsers may show security warnings to visitors.

Recent scans on Foglift

Scan your own site free →