Popular domains audited

The most-trafficked sites on the web set the technical baseline that the rest of the industry implicitly compares itself against. When a household-name brand ships a misconfigured SPF record, it shows up in deliverability reports for thousands of downstream senders. When a major SaaS vendor lets a TLS chain expire, the postmortem becomes a reference. Auditing those sites is partly competitive intelligence, partly quality-baseline calibration, and partly a useful exercise in seeing what good — and occasionally not-so-good — looks like under real production traffic.

Each domain on this page links to a full breakdown built from persisted check results. Where we have recent crawler data the report includes per-tool scores, raw findings extracted from the underlying jsonb result, and a one-click way to re-run any of the underlying checks against your own copy of the same site. Where we do not have recent data — typically because the crawler has not yet visited that domain — the report falls back to a CTA that runs the full meta-tool live, in your browser, without an account.

The audit pipeline behind these reports runs the same code as the live /check meta-tool — 17 fast checks across email authentication, SSL, DNS, SEO, WHOIS, tech-detector, redirects, Open Graph, schema, accessibility, headers, CSP, cookies, PWA, favicon, robots, and sitemap, plus separate page-speed and broken-links runs. Scores are normalised to a 0–100 scale per tool and aggregated to a domain-level average for at-a-glance comparison, publishing, badges, and monitoring handoff.

A few pragmatic notes on what the score badges actually represent: the green band (80+) reflects domains where every audited tool has produced a clean result with no critical findings. The amber band (50–79) typically means one actionable issue — a missing security header, an unaligned DKIM key, an underspecified DMARC policy, an unoptimized Open Graph image. The red band (under 50) is reserved for domains where multiple checks produced critical findings or where a check failed entirely. A grey dash means the domain is in our seed list but the crawler has not yet captured a persisted report — running a live check from the per-domain page will produce one.

We surface popular-domain audits publicly because most of the technical findings here are not secret. Whether a brand has DMARC at p=reject, whether their SSL chain validates without warnings, whether their meta tags pass current SEO guidance — all of this is observable from the open web with a couple of DNS queries and an HTTP request. The value of a programmatic audit hub is not the data, which is public, but the aggregation: putting the same nine checks against the same hundred domains in one place makes patterns visible that are otherwise invisible.

If your domain is missing from this list and you would like a public report, run a check from the meta-tool. Public-shareable reports get persisted automatically and start showing up in our programmatic-SEO surface area within an hour.