Website Audit: SEO, GEO, Security, WordPress & Speed
Pricing
from $490.00 / 1,000 site audits
Passive website audit for humans and AI agents: page-by-page SEO, AI visibility (GEO), HTTPS & security headers, SPF/DMARC/DKIM, broken links, PageSpeed, accessibility, WordPress/Shopify/CMS vulnerabilities. JSON + HTML/PDF report, EN/FR.
schemaVersion
Optional
Format version of this item ('3.3'). Minor bumps only add fields (3.1: v4 checks; 3.2: changes, alerts, monitorId, findings[].howDetected/sources; 3.3: platforms block, 'platform' score category, platform_/debug_ finding ids); major changes break field names.
url
Optional
Start URL as given (normalized).
finalUrl
Optional
URL after redirects; the audit was done on this address.
domain
Optional
Host name audited.
auditedAt
Optional
ISO 8601 UTC timestamp.
language
Optional
Language of all texts: 'en' or 'fr'.
summary
Optional
Compact block for programs and AI agents: read this first.
topPriorities
Optional
Up to 5 most important actionable findings, sorted by severity then confidence then category weight.
quickWins
Optional
Quick wins: up to 8 findings with high or medium impact that take about 5 or 30 minutes, sorted by impact, then effort, then severity. May be empty. Each object mirrors a finding (see findings[].id).
scores
Optional
Scores 0-100.
categoryLabels
Optional
Category key -> label in the report language.
findings
Optional
All findings, sorted by severity.
technologies
Optional
Detected technologies.
wordpress
Optional
WordPress facts: detected, version, versionConfidence, latestVersion, vulnerabilities[] (core, when insecure), activelyExploited, plugins[] and themes[] (each with slug, name, version, confidence, latestVersion, inDirectory, latestVersionNote (premium/custom: latest unknown), updateTo, activelyExploited, vulnerabilities[] {id, title, cve[], score (CVSS), severity (CVSS rating), fixedIn, unfixed, kev (in CISA Known Exploited Vulnerabilities), kevDateAdded, knownRansomwareUse, refs[]}), hardening, vulnDb {source, generatedAt, kevSource, kevCatalogVersion}.
shopify
Optional
Shopify facts: detected, evidence[], headless, theme {name, schemaName, schemaVersion, themeStoreId, custom}, apps[] {name, category, evidence}, productPagesChecked[], productSchema {pages, withProductSchema, missingFields}, cookieConsent[], speedImpact {appsDetected, source, thirdPartyMainThreadMs, thirdPartyTransferKB, top[]}.
platforms
Optional
v6 CMS/framework facts (absent platforms = empty list). detected[]: {key (drupal, joomla, prestashop, magento, magento1, typo3, symfony, laravel, nextjs, nuxt, wix, squarespace, webflow), name, kind (cms, ecommerce, framework, js-framework, hosted-builder), confidence, evidence[], version, versionSource, versionConfidence, versionExposed, branch, branchSource, branchConfidence, eol {cycle, eol, latest, isEol}, latestInBranch, latestOverall, updateTo, vulnerabilities[] {id, cve[], title, severity, score, fixedIn[], kev, source (ghsa, drupal, nvd, fop), refs[]}, modules[] (PrestaShop: {name, seen, knownVulnerabilities, fixedIn, unfixed}), buildId (Next.js)}. primary = main platform name. debugExposure[] {framework, what, url, status}. db {loaded, generatedAt, source}. attribution[] = licence/attribution lines of the data sources used (show them when you republish the data). A version is only used for vulnerability matching when the platform itself shows it; otherwise version is null and only end-of-life (branch) or 'version hidden' advice applies.
details
Optional
Raw facts per module: ssl, securityHeaders, redirects, cookies[] {name, secure, httpOnly, sameSite, missing[]} (values never kept), mixedContent, securityTxt, jsLibraries[] {name, npm, version, url, vulnerabilities, updateTo}, exposedFiles {enabled, checked[] {path, status, result: exposed|not-found|inconclusive|skipped|error, proof (redacted one line)}} (only with exposedFilesCheck), email (incl. spfLookups, spfLookupsComplete, spfMissingIncludes, mtaSts {txt, mode, mx, unmatchedMx}, tlsRpt, bimi), domain, php, robotsTxt, sitemap (incl. lastmod), geo (aiCrawlers, contentSignals, cdn, snippetControls, jsonLdTypes, jsonLdProblems, trust, freshness, answerStructure, bing, llmsTxt), accessibility (pagesChecked, formFields, unlabeledFields, emptyLinks, emptyButtons, vagueLinks, iframesWithoutTitle, skipLink, mainLandmark, zoomDisabled, lang, langValid, lighthouse {score, device, failedAudits[]}), links, performance (pagespeed.mobile/desktop with lab, field, mobileUsability, accessibility, thirdParties; devices = side-by-side summary; homeResponseSec), crawl.
pages
Optional
Compact facts per crawled page.
pagesCrawled
Optional
Pages fetched.
requestsMade
Optional
HTTP requests made to the audited site (excluding PageSpeed/RDAP/DNS).
durationSec
Optional
Audit duration in seconds.
limitations
Optional
What could not be checked, in the report language.
disclaimer
Optional
Scope and limits of a passive external audit.
billing
Optional
includedPages and extraPages (pay-per-event).
monitorId
Optional
The 'monitorId' input (sanitized), used to keep separate audit histories (e.g. one per agency client). null when not set.
changes
Optional
Comparison with the previous audit of the same start URL (same Apify account and monitorId), read from the named key-value store 'site-audit-history'. null when 'compareWithPrevious' is false or the store is unavailable.
alerts
Optional
Alert evaluation for this site when the 'alerts' input is set (null otherwise). The run sends ONE message per destination for all triggered sites.
type
Optional
Item type (3.4+): 'site' = one per audited site (older items have no type and are site items), 'page' = one per crawled page.
pageAudit
Optional
Site item only (3.4+): per-page aggregates: averageScore, categoryAverages, topIssues (max 20, ranked by pages affected), distribution (excellent/good/needsImprovement/poor), crawlCoverage (indexable, nonIndexable breakdown, turnedAway), duplicateTitles, duplicateDescriptions, resourceChecks, modules. Null when pageRecords is off.
siteUrl
Optional
Page item: final URL of the audited site.
pageUrl
Optional
Page item: audited page URL (after redirects).
httpStatus
Optional
Page item: HTTP status (0 = network error).
title
Optional
Page item: text.
overallScore
Optional
Page item: 0-100, average of enabled category scores excluding links; capped at 39 for non-indexable pages.
categoryScores
Optional
Page item: metaTags, headings, content, technical, schema, performance, links, images, accessibility (0-100 or null when disabled / not measurable).
issues
Optional
Page item: critical, warnings, info (sentences) and list (id, severity, category, message, fixHint, priority 1-5, estimatedImpact, pagesAffected).
indexable
Optional
Page item: false for 4xx/5xx, noindex (meta or X-Robots-Tag), canonicalized, or turned away.
nonIndexableReason
Optional
Page item: noindex, canonicalized, 4xx, 5xx, error, notHtml, turnedAway or null.
meta
Optional
Page item: title/description text, length in characters and approximate SERP pixel width, tag counts, Open Graph, Twitter card (with OG fallback), charset, viewport.
headings
Optional
Page item: full H1-H6 tree with texts, H1 list/count, skipped levels, empty headings, counts per level.
content
Optional
Page item: main-content words, characters, paragraphs, sentences, avgSentenceLength, language, readability (formula per language, null under 30 words), topKeywords, titleH1SharedKeywords.
technical
Optional
Page item: https, canonical (self, count, outside head), head closed early, robots (all robots/googlebot meta + X-Robots-Tag combined), lang, hreflang count, mixed content, doctype.
schema
Optional
Page item: JSON-LD types, JSON-LD errors, microdata/RDFa presence.
links
Optional
Page item: total/unique/internal/external counts, byRegion (nav/content/footer), nofollow/dofollow, first links checked with broken, redirects (with targets) and unverified (401/403/429/challenge).
images
Optional
Page item: total, withAlt, decorative, missingAlt, altCoverage, list (url, alt, format, bytes, status), oversized (>200 KB), broken, unverified.
accessibility
Optional
Page item: passive accessibility counts (unlabeled fields, empty links/buttons, vague links, iframes without title, zoom disabled...).
performance
Optional
Page item: source 'pagespeed' (Google PSI scores per device) or 'lightweight' (response time, HTML size, scripts).
redirectedFrom
Optional
Page item: URLs that redirected to this page.
error
Optional
Page item: network/analysis error, if any.
turnedAway
Optional
Page item: anti-bot, login-required or rate-limited when the page refused the audit.
rendering
Optional
3.5+. Site item: JavaScript rendering summary {mode, candidates, rendered, failed, pages[]}. Page item: {rendered, reason, rawWords, renderedWords, wordsInRawPct, rawInternalLinks, renderedInternalLinks, linksInRawPct, contentInvisibleWithoutJs, labLcpMs, labCls, consentBanner {detected, vendor}, screenshot {key, url}, requests, blockedRequests, seconds, error}. Absent when the page/site was not rendered.
intentionallyExcluded
Optional
Page item only (3.5+): noindex on an account/cart/checkout/login/search/thank-you page (many languages and platforms). Appropriate: no score cap, excluded from averageScore and distribution, counted in crawlCoverage.intentionallyExcluded.
