Report for: tonyherman.com ↗ Domain audited 31 times ↗
We found 19 items that need attention across 9 sections.
Top 1% of All Sites Scanned. Outperforms 99% of tested websites.
Worth up to +5 points in total score recovery.
Fix these first to unlock +6 points.
A website analysis is only useful if you know what to do next.
The Fix Your Website Help Guide explains all 144 checks used by SiteAnalyzerFree.com in straightforward language. You’ll learn what each result means, why it matters, and how to correct it.
Get your copy with step-by-step guides & checklists at: https://siteanalyzerfree.com/guide
Note: Printing the report gives you a white-label version with no logos or ads. Re-scan the site once you've made changes.
See which parts of the site are strong, which ones need work, and jump to any section below.
Note: This summary reflects the checks that were scored for this scan. Some checks are conditional or informational and may not count toward the passed total. There are 144 checks total.
Items needing attention are listed first, followed by checks that passed and any informational items from this scan.
1 item found in this section (worth up to +6 points if fixed).
A canonical tag helps search engines understand the preferred version of a page URL.
No canonical tag was detected on the homepage.
Consolidates 100% of your domain authority, backlinks, and ranking power to your primary live URL, eliminating duplicate content confusion and ranking cannibalization.
Add a self-referential canonical tag to the homepage and key pages.
No issues found for this section for this scan - good job!
Unlock backlinks, domain authority, 100 Google keyword rankings, and competitor gaps for tonyherman.com.
Items needing attention are listed first, followed by checks that passed and any informational items from this scan.
6 items found in this section (worth up to +11 points if fixed).
Structured data helps search engines and AI assistants understand your brand, organization details, and entity relationships.
No JSON-LD schema detected on the homepage.
Helps search engines understand your exact business identity, service catalog, and physical location, qualifying your site for rich search snippet displays.
Add Schema.org JSON-LD structured data (such as WebSite, Organization, or LocalBusiness) to the homepage to help search engines understand your entity details.
Adding width and height attributes helps browsers reserve space and reduce layout shift.
Found 1 homepage image(s) missing width and/or height attributes:
- https://www.tonyherman.com/wp-content/uploads/2025/04/th-logo-2025.png
Eliminates disruptive layout shifts (CLS) while images load, stabilizing the visual browsing experience and boosting Core Web Vitals scores.
Add width and height attributes to the flagged images so page layout is more stable while loading.
When both your root domain (/) and the index file (/index.html or /index.php) serve the same content independently without redirecting, search engines see duplicate copies of your homepage. This divides your PageRank and link authority.
Both the clean root URL (/) and the direct index URL (https://tonyherman.com/index.php) load independently with HTTP status 200 (no redirect detected):
https://tonyherman.com/ ➔ HTTP 200 OK (Clean Root URL)
https://tonyherman.com/index.html ➔ HTTP 404 Not Found (Safe, not served)
https://tonyherman.com/index.php ➔ HTTP 200 OK (Loads duplicate homepage with no redirect)
Eliminates duplicate content issues between /index.html and the root domain, consolidating link equity to your main homepage URL.
Add a 301 permanent redirect rule in your .htaccess or server config to redirect requests for /index.php back to the clean root URL (/).
Minifying code assets strips unnecessary spacing, comments, and line breaks to minimize file transfers and improve load speeds.
Found unminified assets: 2 CSS file(s) and 1 JS file(s).
Removes whitespace and comments from JavaScript and CSS bundles, reducing code download sizes and execution latency.
Minify CSS and JS files and update link references to use minified version outputs.
Modern formats like WebP, AVIF, and SVG compress images much more efficiently than legacy formats (JPEG, PNG), reducing file weight without losing quality.
Found 1 image(s) using legacy file formats.
Reduces image file weights by up to 80% without losing visual clarity by serving modern next-generation formats like WebP or AVIF.
Convert images to WebP or AVIF and update HTML tags accordingly.
Links pointing to external domains using target="_blank" without rel="noopener" or rel="noreferrer" allow the opened page to control the parent window via window.opener, creating a reverse tabnabbing phishing risk.
Found 2 external link(s) opening in a new tab without rel="noopener":
- https://fixyourwebsite.now/
- https://powdrift.com/
Prevents malicious phishing attacks where an external tab silently redirects users to a fraudulent login page in the background.
Add rel="noopener noreferrer" to all external links with target="_blank".
Items needing attention are listed first, followed by checks that passed and any informational items from this scan.
No issues found for this section for this scan - good job!
Items needing attention are listed first, followed by checks that passed and any informational items from this scan.
No issues found for this section for this scan - good job!
No issues found for this section for this scan - good job!
Items needing attention are listed first, followed by checks that passed and any informational items from this scan.
3 items found in this section (worth up to +0 points if fixed).
Open Graph tags are present, but some do not follow optimal character length or format guidelines.
Optimize these Open Graph settings on the homepage:
- og:description is very short (49 chars). Best practice is 100–150 characters.
Generates beautiful, eye-catching preview cards with your branding and image whenever anyone shares your link on Facebook, LinkedIn, Slack, or iMessage.
Update Open Graph tag contents to match best practice lengths (title: 40-60 chars, description: 100-150 chars).
Search engines and consumers look for active connections to official social media channels to verify the business is active, legitimate, and trusted.
No outbound links to primary social media profiles (Facebook, LinkedIn, X, Instagram) were detected.
Validates your business authenticity, provides fresh social proof, and opens secondary channels for ongoing customer engagement.
Add links to your official social profiles in the header or footer of your site.
Linking to high-authority educational, governmental, or industry sources signals to search engines and LLM systems that your statements are factually backed, enhancing E-E-A-T.
No authoritative citations or outbound links were found.
Associates your site with respected industry authorities, signaling to search engines that your content is trustworthy and thoroughly fact-checked.
Add outbound context links to reputable sources when referencing facts, data, or research.
No issues found for this section for this scan - good job!
Items needing attention are listed first, followed by checks that passed and any informational items from this scan.
No issues found for this section for this scan - good job!
No issues found for this section for this scan - good job!
Items needing attention are listed first, followed by checks that passed and any informational items from this scan.
No issues found for this section for this scan - good job!
No issues found for this section for this scan - good job!
Items needing attention are listed first, followed by checks that passed and any informational items from this scan.
3 items found in this section (worth up to +0 points if fixed).
Clarify organization identity for search engines and AI models. Connecting your business to verified external entities (like LinkedIn, official social channels, Google Business Profile, and industry registries) builds clear entity confidence.
No sameAs profile links detected in Organization or LocalBusiness JSON-LD schema.
Connects your business to verified knowledge bases (Wikidata, LinkedIn, Crunchbase), establishing your verified entity in Google's Knowledge Graph.
Add a "sameAs" array to your Organization or LocalBusiness JSON-LD schema containing links to your LinkedIn, official social profiles, Google Business Profile, and Wikidata/Wikipedia pages if available.
Declaring explicit expertise topics (knowsAbout) and structured offerings in your schema helps LLMs accurately categorize what queries your brand is an authority on.
Structured data does not define explicit "knowsAbout" topics or "hasOfferCatalog" services.
Explicitly communicates your specialized service catalog to AI search engines, making your site the premier match for niche queries.
Add "knowsAbout" (an array of core industry topics/specialties) and "hasOfferCatalog" to your Organization or Service JSON-LD schema.
Breadcrumbs map your site taxonomy for search engines and LLMs, aiding sitelink snippet grouping in Google search and navigation clarity for AI systems.
BreadcrumbList structured data was not detected on the page.
Displays clean navigational breadcrumbs in Google search snippets and helps AI systems understand your website's hierarchy.
Add JSON-LD BreadcrumbList markup to declare navigation parent-child links.
No issues found for this section for this scan - good job!
Items needing attention are listed first, followed by checks that passed and any informational items from this scan.
6 items found in this section (worth up to +0 points if fixed).
Clickjacking is a malicious technique where an attacker tricks a user into clicking on a button or link on another page when they think they are clicking on the parent page. This is prevented by blocking your site from being loaded inside an iframe.
No X-Frame-Options or Content-Security-Policy (frame-ancestors) headers were detected.
Reduces server bandwidth and speeds up asset delivery by serving modern pre-compressed resources to supporting browsers.
Add the 'X-Frame-Options: SAMEORIGIN' header to your web server responses to prevent framing.
DNSSEC adds cryptographic signatures to your DNS records. Without it, your domain DNS records are susceptible to cache poisoning or man-in-the-middle redirection attacks.
DNSSEC records (DNSKEY or DS) were not detected.
Protects your DNS lookups against spoofing and cache poisoning, ensuring visitors always reach your authentic server.
Enable DNSSEC in your domain registrar panel and add the DS records to your DNS provider settings.
A secure Referrer-Policy prevents your server from leaking sensitive internal page URLs, query parameters, or path structures to third-party sites in referral logs.
Referrer-Policy header is either missing or set to an insecure default.
Controls sensitive URL data leakage in HTTP Referrer headers when users navigate from your site to external destinations.
Add the 'Referrer-Policy: strict-origin-when-cross-origin' header to your web server configuration.
The X-Content-Type-Options: nosniff header prevents web browsers from MIME-sniffing a response away from the declared content type, protecting against drive-by download and script injection attacks.
The X-Content-Type-Options header was not detected in the server response.
Protects site visitors from malicious MIME-type confusion attacks and forced drive-by file downloads.
Add 'X-Content-Type-Options: nosniff' to your web server response headers.
The Permissions-Policy header allows site owners to restrict browser features (such as microphone, camera, or geolocation) from being accessed by embedded third-party iframes.
The Permissions-Policy header is not configured.
Hardens browser security by preventing embedded third-party widgets from accessing sensitive user device APIs like location, microphone, or camera.
Configure a basic Permissions-Policy header to restrict unauthorized third-party device access.
A Content Security Policy (CSP) header guards against cross-site scripting (XSS) and code injection by specifying exactly which scripts and assets are allowed to load.
No Content-Security-Policy header was detected.
Establishes a strict security boundary that prevents unauthorized scripts, tracking beacons, and cross-site scripting injections.
Add the Content-Security-Policy header to your web server settings to whitelist allowed sources.
No issues found for this section for this scan - good job!
Your free checkup analyzed 144 on-page and technical health factors. Upgrade to the Single Full SEO Audit ($29) to unlock in-depth domain authority, backlink intelligence, competitor keyword rankings, and a 90-day fix roadmap for tonyherman.com.
See who links to tonyherman.com, total live backlinks, dofollow vs nofollow distribution, domain trust scores, and competitor link gaps.
Discover the top 100 search queries driving traffic to tonyherman.com, exact ranking positions, monthly volume, keyword difficulty, and strike-zone targets (ranks #4–#20).
A structured step-by-step execution plan sequenced by ranking impact and implementation ease to boost organic search visibility over 90 days.
Click a star to rate your experience with this free website checkup.
A website analysis is only useful if you know what to do next.
The Fix Your Website Help Guide explains all 144 checks used by SiteAnalyzerFree.com in straightforward language. You’ll learn what each result means, why it matters, and how to correct it.
Get your copy with step-by-step guides & checklists at: https://siteanalyzerfree.com/guide
Copy this ready-to-send summary into an email or message to your client or prospective customer. Findings are automatically listed in order of priority (1 to 19) with an estimate callout.
Click to view estimated fix times, cost, and get a copy-and-paste work order
| Select | Estimated task | Occurrences | Minutes |
|---|---|---|---|
|
Canonical cleanup
Missing Canonical Tag • Duplicate Homepage URLs (Missing Canonical Redirect)
Review the canonical tags and correct them so they use the preferred live URLs consistently.
|
1 | 10 | |
|
No structured data
No Structured Data (Schema) • Missing Breadcrumb Structured Data
Add foundational structured data to the site so search engines can better understand the business and its pages.
|
1 | 20 | |
|
Key pages linked from homepage
Missing Social Media Connections
Make sure the homepage or footer clearly links to key pages such as Contact, About, Services, Privacy, and Terms.
|
1 | 12 | |
|
Homepage content depth
Missing Authoritative Outbound Links
Expand or strengthen the homepage copy so it better explains what the business does, who it serves, and what makes it different.
|
1 | 20 | |
|
Slow page response
Unminified Code Assets • Legacy Image Formats Used
Review the lighter page speed issues and make practical performance improvements that can help the page respond faster.
|
1 | 25 | |
|
Domain resolution missing
DNSSEC Security Disabled
Review the domain DNS setup so the correct domain versions resolve properly.
|
1 | 20 | |
|
HTTP security headers hardening
Missing Clickjacking Protection • Insecure Referrer-Policy • Missing Content Security Policy (CSP)
Configure the web server to suppress Server/X-Powered-By software version banners and enable clickjacking protection headers.
|
1 | 15 | |
|
Entity verification schema (sameAs)
Missing Organization Entity Identity Schema (sameAs)
Add sameAs array linking to official social channels, Google Business, and industry directories to establish entity authority for AI models.
|
1 | 15 | |
|
Schema topic & service taxonomy
Schema Lacks Topic Specialization (knowsAbout / hasOfferCatalog)
Include knowsAbout and hasOfferCatalog in JSON-LD schema to clearly declare business expertise to LLMs.
|
1 | 15 | |
| Total Minutes: | 152 | ||
This estimate groups related fixes together, adds up the total time, converts it into 30-minute Maintenance Blocks, and gives you an estimated cost for these fixes (1 block = 30 minutes).
Based on this report, the current estimate is 6 blocks at $68.00 per block. The closest pack level for pricing is the 6-block level, but Webstix also lets people buy the exact quantity needed.
Send this to support@webstix.com to verify the quote before you pay. There is no charge for an estimate.
If you’re getting traffic from Google, ads, social, referrals, or word-of-mouth — and people still aren’t taking action — it’s usually not a “marketing problem.” It’s a website problem. Something on the page is confusing, missing, or quietly creating doubt.
This book is a practical, plain-English guide to finding those issues fast and fixing them in the right order — without rebuilding your whole site, and without needing to be a designer or developer.
Get your copy with step-by-step guides & checklists at: https://siteanalyzerfree.com/book
Note: This is an automated algorithmic checkup limited to a small number of pages. It looks for common patterns and technical flags, but it is not a replacement for a deep manual audit by a human expert.
On-page fixes are only half the battle. Measure your off-page editorial citations, uncover high-authority unlinked brand mentions for easy link-building, and see how AI knowledge engines (ChatGPT, Perplexity, Google AI Overviews) recognize tonyherman.com.
Claim your online mentions. Run against your competition.
Find citations across top news, trade magazines, and niche blogs with domain authority metrics.
Turn unlinked brand mentions into powerful backlinks with auto-generated editor email templates.
Benchmark Volume, Diversity, Sentiment & Trust, and Topic Clarity against search standards.