Skip to content
ToolCargo

Docs · Updated 2026-09-11

Checks and limits

Exactly what Site Audit looks at on a page, how findings are ranked, how the score is worked out — and what it does not check, so nobody reads more into a report than it says.

Current check set: site-audit/2026-09-11. Saved audits record the version they ran with; comparing runs from different versions shows a notice, because a difference can come from a changed check rather than the page.

What audit_page checks

One URL per call, from the HTML the server returns (no JavaScript is run).

GroupChecksSeverity when failing
ResponseHTTP status (4xx/5xx is high), redirect chains (more than one hop), response time over 3 s, HTML over 2 MB, wrong Content-TypeHigh / Low / Medium
Indexingnoindex in meta robots or X-Robots-Tag; canonical missing, relative, pointing elsewhere, or several conflictingHigh / Medium
TitleMissing (high), under 15 or over 65 characters, more than one <title>High / Medium
Meta descriptionMissing (medium), over 170 characters (low), more than oneMedium / Low
Language and mobile<html lang> missing; viewport meta tag missingMedium
Headings and contentNo <h1> or several; skipped heading levels; images without alt; under 150 words of text in the served HTMLMedium / Low
Social previewsOpen Graph tags missing (og:image missing is medium), relative og:image, no twitter:cardMedium / Low
Structured dataJSON-LD that doesn't parse (high), missing @context, required properties for common types (Organization, Product, Article, FAQPage, Event…)High / Medium / Low
Internationalhreflang without a self-reference, invalid language codes, no x-defaultMedium / Low
SecurityNot served over HTTPS (high); missing HSTS, X-Content-Type-Options, CSP, Referrer-Policy (low, hygiene only)High / Low

audit_site runs these checks on several pages of a site at once (up to your plan's page limit). Three more tools go deeper on one topic: check_links (status of the page's links), check_crawl_rules (robots.txt and sitemaps for this URL) and check_social_preview (the preview image itself: status, type, size, dimensions).

Severity rule

  • High — blocks indexing, sharing or the page itself.
  • Medium — likely reduces visibility, click-through or preview quality.
  • Low — best practice or hygiene; fix when convenient.

Every failed finding shows the evidence we observed, why it matters and a fix. Checks that could not run are listed as not checked with the reason — never as passed.

The heuristic score

A completed audit gets a number out of 100: 100 − 12 per high − 5 per medium − 1 per low, never below 0. Passed and not-checked items don't change it. It is a quick way to see whether a page got better or worse between two runs of the same page. It is not a ranking prediction, not comparable across different sites, and not given at all when the page was blocked, returned an error or wasn't HTML.

When the real page can't be seen

  • Blocked — 401, 403, 429 or a bot-challenge page. We report the block, not the challenge page's content.
  • Page error — 404, 410 or 5xx. Only the response is checked.
  • Not HTML — PDFs, images, JSON. Page checks don't apply.
  • No response at all (DNS, TLS, timeout) or a refused URL is an error, and isn't counted against your quota.

What Site Audit does not check

  • Content rendered by JavaScript.
  • Core Web Vitals and real-user speed.
  • Rankings, traffic or keywords.
  • Whether Google has actually indexed the page.
  • Other pages on the site (no crawling).
  • Whether content is accurate, original or well written.
  • Accessibility beyond alt text, language and heading order — it is not an accessibility audit.

Fetch limits and safety

  • HTML read up to 2 MB, preview images up to 6 MB, robots.txt and sitemaps capped separately. Requests time out after 7–10 seconds; at most five redirects.
  • Only public http/https URLs on default ports. No credentials in URLs, no private, loopback, link-local, metadata or reserved addresses (IPv4 and IPv6) — checked on every redirect and at connection time, so DNS tricks don't get through.
  • We send no cookies or authorization headers to the sites we audit. Text quoted from a page is treated as untrusted data, shortened and cleaned before it reaches your assistant.

Quotas and history

PlanTool calls / monthLinks per checkPages per site auditCalls / minute
Free5025510
Pro50001002030
Agency2000020010060

Paid-plan availability is shown on pricing. Saved audits are kept 180 days on every plan, are visible only to your account, and can be switched off or deleted. See the usage policy for what counts as a call.