What the free audit finds
Everything in this article is public. It is what a curious visitor, a vendor sizing you up, a journalist, or a scanner run by someone less friendly can read about your website in about a minute.
The free audit is that minute, run on your behalf. This is what it looks at, in the order a stranger would.
What the free audit finds
Ask a WordPress site for its list of users and, by default, it answers. Every author's login name, in a machine-readable list, at a fixed address. Attackers do not have to guess who the accounts are. They only have to guess the passwords.
What the free audit finds
Light gray text on white is the most common accessibility finding there is. It looks refined on a designer's screen and vanishes in sunlight, on a cheap monitor, or for anyone over fifty.
What the free audit finds
Paste a YouTube link into a page and the video appears. It also arrives with no name for a screen reader, no captions unless someone made them, and sometimes with sound that starts on its own.
What the free audit finds
A white page for a second is not slowness in the usual sense. The server answered quickly. The browser has the page and is refusing to draw it until a few files arrive: stylesheets, a font, a script in the wrong place.
On Monday I announced LFW on LinkedIn. By Friday the post had been seen 4,300 times, four proposals were out, and the site had changed 39 times. A short record of week one, with thanks.
Good hosting is essential, but it is only one layer of website operations. Here is how to evaluate a managed WordPress host, what the host should own, and what still needs a web team.
Website management is an operating relationship, not a plugin update package. These are the responsibilities, boundaries, and response expectations a useful agreement should make clear.
Uptime is only the first website check. Useful monitoring should detect changes in security policy, redirects, certificates, performance, and the pages people depend on.
