LFW Monitor

The things that fail quietly

A certificate expiring in three weeks. A plugin update that broke a form nobody's tested since. A page that quietly stopped being indexable. None of these announce themselves — they just accumulate until a visitor, or a board member, finds them first. LFW Monitor checks for all of it every day, and — the part that actually matters — surfaces only what changed, not a 40-item report nobody reads twice.

What's checked

• Accessibility against WCAG 2.2 AA — full axe-core, on every page
• Performance and Core Web Vitals
• Broken links, internal and external
• Email deliverability (SPF/DKIM/DMARC) and the domain's TLS certificate
• Integrity — cloaking and injected spam, caught by comparing what different visitors are served
• WordPress exposure — REST API leaks, outdated plugins, common misconfigurations — when the site runs WordPress

Everything above the last line is platform-independent: it tests what your site actually serves a visitor, so it works the same on Drupal, on WordPress, or on a static build. That matters for a public agency, where the CMS was chosen years ago and isn’t the thing up for discussion.

The full method — which tools, which settings, what auto-resolves and what never does — is documented in the open on the methodology page.

Try the first pass — free

The free audit is a first pass, built entirely from public information — what any visitor or search engine can already see. The full managed version goes further: every page, your forms, and — with your permission — what's behind the login.

Pricing

Bundled with the Web Operations Retainer — no add-on charge. The free audit above has no gate at all.