CEO
Business owner.
- Know what your site is actually doing for the business.
- Spot the gaps costing you replies, leads, revenue.
- No need to ask your dev or take your agency's word.
How much business is your website quietly losing?
Most websites are quietly failing at things their owner has no idea about. Emails landing in spam. Legal exposure. Invisible to AI. Slow on mobile. We check 27 of them in 60 seconds and tell you, in plain English, what's costing you business.
Free. Nothing to install. No signup. Results in 60 seconds.
SAMPLE REPORT A grademyweb.com — we ran it on ourselves See where we still lost points Who can benefit from this
04 profiles Who uses GradeMyWeb and why.
Departments
Legal, marketing, operations.
- Cross-functional snapshot for the management meeting.
- Not a replacement for your specialist tools.
- Answers one question: is our online presence working?
Agency
Agencies and consultants.
- QA your own work before client handoff.
- Prove the monthly retainer is delivering.
- Pitch new business by showing what the current agency is missing.
Candidate
Job interview prep.
- Run it on the company you're interviewing with.
- Run it on their closest competitor.
- Walk in knowing more than the room.
Why people run this
What people do with it.
Find out why their emails aren't arriving.
Most businesses never notice when a third of their outbound quietly lands in spam. No bounce, no reply, just silence. We catch the spoofing risk and the delivery risk before another customer drops off the thread.
Check if the agency they paid actually delivered.
You spent five to fifty thousand on a website. Did they ship the structural work, or did they just make it look nice? Pull a report, forward it to your provider, ask why half the boxes are unchecked.
Walk into the interview knowing more than the room.
Pull a report on the company you are interviewing with, and one on a competitor. Show up with a read their own team doesn't have. Solid people notice solid prep.
Audit a prospect's site before the first call.
Know what is broken before you pitch. Use the findings as the opener. A concrete "your DMARC is open to spoofing" beats a generic "we do websites" every time.
See if the site is actually readable by ChatGPT and Claude.
AI assistants are becoming the new front door. Most sites quietly fail the structural signals that get them cited. We check schema, robots, hreflang, and the llms.txt conventions that are emerging.
Compare themselves to competitors, honestly.
An A means the same thing across any site. A C means the same thing across any site. Benchmark in minutes, not in a quarterly review meeting that never happens.
The idea
Every tool grades one silo. We grade the whole business.
QCan prospects find us.
QCan prospects contact us.
QDo our emails actually arrive.
QAre we legally exposed.
QAre we visible to AI in 2026.
QIs the site embarrassing us.
Your mail provider says DMARC is fine. Your SEO dashboard says your sitemap is fine. Your legal tool says your GDPR page is fine. Everyone reports on their own corner. Nobody reports on the one question a board member actually asks: is our online presence, as a whole, working.
What we check 27 tests. Six categories.
27 tests. Six categories.
One grade.
Every check is passive. We read what your site shows the open web. No installation, no login needed to run the scan. Each check is wired into the overall grade and into the category score you see in the report.
01
Does your email arrive?
SPF, DKIM, DMARC. Domain blocklist status. If your outbound is landing in spam, you find out here.
- SPF record
- DKIM record
- DMARC policy
- Domain blocklist status
4 checks
02
Legal & privacy checks
Legal page detection, SSL validity, cookie consent manager, GDPR consent firing order, and privacy policy quality scored against 20+ GDPR disclosure points.
- Legal page
- SSL
- GDPR consent firing
- Consent manager
- Privacy policy quality
5 checks
03
Do you know what's happening?
Analytics, Search Console, session tooling. No analytics means flying blind. No Search Console means Google can delist you and you won't know.
- Analytics installed
- Search Console verified
- Session / visitor tooling
3 checks
04
Can people find you?
Open Graph, sitemap, contact page, mobile viewport, social linkage, freshness, broken links. The basics search engines and humans both use to find you.
- Open Graph
- Sitemap
- Mobile viewport
- Contact page
- Social links
- Broken links
6 checks
05
Are you visible to AI?
Schema markup, robots.txt, hreflang, llms.txt, image format. The structural signals that get you cited by ChatGPT, Claude, and Perplexity.
- robots.txt
- Schema markup
- hreflang
- llms.txt
- Image formats
5 checks
06
Is the site fast and working?
PageSpeed, response time, site freshness. A slow, stale, or broken site costs you customers before they ever read a word.
- PageSpeed (mobile)
- Response time
- Content freshness
- HTTPS
4 checks
How it runs Run the scan in 60 seconds.
Run the scan in 60 seconds.
No login. No install.
- 01
Enter a domain.
No account, no install. Your domain is all we need.
- 02
Tests run in parallel.
27 tests, email through site quality, usually in about 60 to 90 seconds.
- 03
Read your grade.
A through F. Your email unlocks the full report, in the language your business actually reads.
Frequently asked Answers, shorter
Answers, shorter
than you'd expect.
Q.01 What does GradeMyWeb check?
27 passive tests across 6 outcome-focused categories: does your email arrive (SPF, DKIM, DMARC, blocklist), are you legally safe (legal notice, SSL, consent, cookie manager, privacy policy content quality), do you know what is happening (analytics, Search Console, session tooling), can people find you (Open Graph, sitemap, contact page, mobile viewport, social links, broken links), are you visible to AI (robots.txt, schema, hreflang, llms.txt, image formats), and is the site fast and working (PageSpeed, response time, freshness, HTTPS).
Q.02 Why should I trust GradeMyWeb over the other 30 audit tools?
We do not invent findings to scare you into buying. Some tools flag fabricated risks or score your privacy policy at 15% when it actually covers most of what regulators require. We check what is publicly visible, show our work, and grade on the same scale regardless of who you are. If a check cannot tell the answer from a passive scan, we say so honestly rather than guess.
Q.03 How is this different from PrivacyChecker, HubSpot Grader, or other website scanners?
Other tools grade one slice of your site: privacy, SEO, email, accessibility. We grade all of it together so you see the full picture in one report. We also report what we actually find and skip the speculative findings (like fake typosquatting risks) some scanners use to nudge you toward an upgrade.
Q.04 Is the scan free?
Yes. The scan, the grade, and the category scores are all free. Your email unlocks the full per-check report.
Q.05 How long does a scan take?
Usually 60 to 90 seconds. All 27 tests run in parallel. PageSpeed, which queries Google's Lighthouse API, is usually the slowest of them.
Q.06 Is the scan safe for my site?
All checks are passive. We read public DNS, public HTTP headers, and public HTML. Nothing on your site is modified, no forms are submitted, nothing is logged in to.
Q.07 What do the grades mean?
A through F. Any category scoring 3 or below caps the overall grade at C. Two or more weak categories cap it at D. A failing email authentication check (B3) also caps the grade. The letter is anchored to the categories that actually hurt you if they fail.
Q.08 Why do you ask for an email to see the full report?
To stop scraping and abuse, and because we occasionally improve the report format and want to let people who used the tool know. We send a one-time code, we do not share your address, and you can use a VIP access code to skip the gate entirely.
Q.09 How often should I rescan?
After any change to your site, DNS, hosting, or legal pages. SSL certificates expire. Consent managers get reconfigured. Content goes stale. Running a scan once a quarter catches most drift before it bites.