The Site Integrity Index
A published, scored framework for what “a trustworthy website” actually means — grounded in real standards, not opinion. 100 points across six pillars. Score your site, see exactly where it stands, and get a defensible plan for what to fix.
Why a framework, not just a checklist
Most audit tools return a number with no explanation of what it means or why it matters. The Site Integrity Index is different: every one of its 109 checks cites the exact standard behind it — a GDPR article, an OWASP Top 10 category, an IETF RFC, a W3C WCAG success criterion, or documented Google Search Central guidance. Nothing here is invented. If a check fires, you can trace it back to the published rule it's testing against.
Full check-to-standard mapping: Standards & Methodology →
The six pillars
Security Posture
25 pts17 checks
OWASP Top 10 and IETF/W3C transport + content-security specs: HSTS, CSP, X-Frame-Options, Referrer-Policy, Permissions-Policy, mixed content, SRI, security.txt (RFC 9116).
Privacy & Legal Compliance
20 pts11 checks
GDPR (Art. 5, 7, 13, 14, 28, 32) and the ePrivacy Directive: privacy policy, cookie consent, data controller disclosure, subject rights, retention statements.
Technical SEO
12 pts30 checks
Google Search Central guidance, the Robots Exclusion Protocol (RFC 9309), Sitemaps.org, and schema.org: crawlability, structured data, Core Web Vitals, HTTP response hygiene — the technical infrastructure that precedes any editorial layer.
Content Quality
8 pts14 checks
The editorial layer above technical SEO: framework-name placement, E-E-A-T credibility signals, content depth, quantified proof claims, and CTA specificity. Best-practice heuristics, honest about their provenance.
AI & Answer Readiness
20 pts33 checks (17 AEO + 16 GEO)
Whether AI assistants — ChatGPT search, Perplexity, Google AI Overviews, Bing Copilot — can confidently read and cite your site: llms.txt, direct-answer structure, FAQ/HowTo schema, author entity, citable authority.
Accessibility (WCAG)
15 pts18 checks
WCAG 2.1 and 2.2 and WAI-ARIA 1.2, covering the subset verifiable from static HTML: alt text, heading hierarchy, form labels, ARIA landmarks, skip-nav, focus indicators, colour contrast.
What the score means
A high Site Integrity score is necessary-but-not-sufficient evidence of a well-run site: it covers everything observable from the public surface — response headers, on-page markup, well-known files. It can't verify offline policies, incident-response runbooks, or staff training. Those sit on top of what an automated scan can reach.
Every finding in the report cites the article, RFC, or WCAG success criterion it maps to, so you — or an auditor reviewing your posture — can verify it against the source standard directly.
Run your Site Integrity score.
109 checks, six pillars, 100 points. Free, instant, no sign-up — the same scan surface the paid plans wrap workflow, history, and multi-site tracking around.
Run your Site Integrity score →