- 01
Performance
Core Web Vitals, mobile / desktop speed, asset optimisation, caching, CDN, render path. Where the buyer gives up before the fold appears.
- 02
SEO
Indexation integrity, canonical chains, internal linking, schema, content architecture, backlink health, migration readiness.
- 03
Security
HTTPS enforcement, security headers (HSTS, CSP, X-Frame), plugin and dependency CVEs, admin hygiene, rate limiting, WAF coverage.
- 04
Accessibility
WCAG 2.2 AA across contrast, keyboard navigation, screen reader, form labels, focus states, ARIA integrity. Legal exposure under UK Equality Act / EAA.
- 05
CMS & Ownership
Editability for non-technical staff, domain and hosting control, repo and credential ownership, handover readiness. How hostage are you.
- 06
Content
Thin and duplicate content, freshness, conversion-readiness of core pages, voice consistency, content-to-intent alignment.
- 07
Conversion
CTA placement and clarity, funnel friction, form complexity, trust signals, social proof positioning, abandoned-cart and lead-capture mechanics.
- 08
Code & Infrastructure
Technical debt, framework and dependency currency, version control hygiene, deployment pipeline, staging parity, observability.
- 09
Analytics & Privacy
Tracking integrity, GA4 / GTM ownership, consent mode and cookie compliance, GDPR / PECR posture, data retention, subject-access readiness.
- 10
Commercial Impact
Revenue or lead loss attributable to current issues, cost of inaction, ROI of the prioritised fix plan. The number that decides whether to proceed.