Frequently asked questions

Yes. The scan is passive: it reads only what any visitor or search engine can already see, so it is not a penetration test and it does not stress the server.

At most 16 requests: the page and its redirects, the http:// and www variants, robots.txt, the sitemap, security.txt, llms.txt, one made-up path to test the 404 page, and the favicon and share image the page names. Our bot page lists them.

Usually 20 to 40 seconds. The Google Lighthouse lab test is the slowest part; the report fills in section by section while it runs.

Both run Google Lighthouse, but a lab test measures one load at one moment: server load, network and third-party scripts change from run to run, so a few points of difference are normal. Run both a few times and compare the trend.

Add “User-agent: PerfoMetrixBot” with “Disallow: /” to your robots.txt. We read it before every scan and refuse to scan a site that opts out.

Each section gets a score from its checks, weighted by severity. The overall grade combines performance, security and SEO; AI readiness, the site profile and malware signs are shown separately, but a site on a malware blocklist gets an F overall.

They follow the letter grades: green from 90 (A), yellow from 70 (B and C), orange from 60 (D) and red below 60 (F).

Anyone you share the link with. Reports are not listed anywhere and search engines are told not to index them.

Seven days for visitors and free accounts, 90 days on Pro and a year on Business. Expired reports are deleted.

Yes, on paid plans: the report has a Download PDF button that prints every section with its fixes.

Scanning is free, with a daily limit. A free account raises the limit and keeps your history; Pro adds desktop tests, longer history and daily monitoring; Business covers many sites. See the pricing page.

Free plan limits, monitors and alerts are tied to a verified address, so we can send alerts and so one person can’t open many accounts to get around the limits.

A monitored address is scanned on a schedule (weekly on Free, daily on paid plans) and we e-mail you when something important changes: a certificate about to expire, a score drop, a new critical issue or the site going down.

Cancel any time from the billing portal on your account page; the plan stays active to the end of the period you paid for. You can ask for a refund within 14 days of the first payment and within 7 days of a renewal.

No. For daily limits we keep a one-way hash of it that changes every day. Visit statistics are daily totals without anything that identifies a person.

No. Scan results and account data are never sold or shared for advertising.

No. We never guess paths, send payloads or submit forms. Deeper tests will only ever be offered for domains whose owners have verified them.

On a server in Germany (Hetzner, Falkenstein) behind Cloudflare. Backups are encrypted.