How long does an audit take?

Standard mode runs in about 30 seconds. Deeper mode (up to 25 internal pages) finishes in 60 to 90 seconds. Leave the tab open or come back to the report URL later.

Is the audit private?

Every report lives at an unguessable URL with 32 random hex characters (about 10³⁸ possibilities). We do not log the IP of report viewers, and we never share a report with anyone but you.

crocky.host is a hosting company in Romania, and the audit is how we introduce ourselves. If the report leads you to consider us for hosting, a rebuild, or a migration, that is what keeps the tool running. Whether or not it does, the report is yours.

Can I run it on a staging site?

Often, yes. Open "Password or maintenance mode?" on the form and paste the password. We handle HTTP basic auth, Shopify password pages, Netlify password protection, Cloudflare Access, and Vercel preview deployments. WordPress maintenance mode is detected but cannot be bypassed from outside.

Do you store the data?

We keep the findings and the underlying Lighthouse JSON for as long as the report URL exists. Email audit@crocky.host with the URL to have it deleted any time.

Does it check whether a site is AI slop?

Yes, if you tick the box on the form. The report then carries a verdict with the quoted evidence and a fix per finding. It never says a site is human-made; it reports what it found.

See what's actually wrong with your website.

Performance, SEO, security, hosting, accessibility, carbon, and an opt-in check for AI slop. One shareable report in about 30 seconds, free, no account.

Standard scan Just this page, about 30 seconds Are you sure? Deeper scan Up to 25 pages, about 90 seconds

Also check for AI slop / vibe coding Adds a verdict with quoted evidence and a fix per finding. Opt-in; about 5 s more. How the check works

Same checks on both modes. Standard scans only the URL you entered. Deeper goes up to 25 pages (about 90 seconds).

Password or maintenance mode?

Use this for a basic HTTP auth popup, a Shopify password page, WordPress maintenance mode, or similar gates. Username is optional (leave blank for screens that only ask for a password). We send the credentials only for this scan, then forget them.

No login. Your report lives at a private link only you can share.

Required ARIA attributes must be provid…

Mail server unreachable

Largest Contentful Paint (mobile)

Sample report, click to open

What we look at

Lighthouse is the starting point. The rest is what a hosting company checks before it takes a site on.

Performance
SEO and meta
Accessibility
Security
Hosting and infra
Tech stack
Carbon

Paste the address, press Audit, and in about 30 seconds you get a link you can share. Deeper mode reads up to 25 pages in about 90 seconds. No account, no install, nothing to wait for by email.

Read the full methodology

What's in the report

One page, five zones, every finding with its evidence and a fix. Nothing inflated, nothing buried.

Profile: How the site looks on Google, Facebook and X, its declared identity, languages and structured data.
Infrastructure: Server response time, protocol support, TLS certificate and its expiry, DNS and email authentication, CDN and hosting provider.
Risk and compliance: Security headers, cookie attributes, exposed paths, mixed content, accessibility violations against WCAG 2.2.
Content and reach: Titles and descriptions, canonical and sitemap sanity, page weight, image formats, carbon per visit.
Findings: Every issue on one grid, sorted by severity, each with the evidence it was taken from and a recommended fix. Optional: the AI slop verdict with the quoted elements.

Open the sample report

Questions before you start

The things people ask before their first run. Still stuck? Write to audit@crocky.host.

How long does an audit take?: Standard mode runs in about 30 seconds. Deeper mode (up to 25 internal pages) finishes in 60 to 90 seconds. Leave the tab open or come back to the report URL later.
Is the audit private?: Every report lives at an unguessable URL with 32 random hex characters (about 10³⁸ possibilities). We do not log the IP of report viewers, and we never share a report with anyone but you.
Why is it free?: crocky.host is a hosting company in Romania, and the audit is how we introduce ourselves. If the report leads you to consider us for hosting, a rebuild, or a migration, that is what keeps the tool running. Whether or not it does, the report is yours.
Can I run it on a staging site?: Often, yes. Open "Password or maintenance mode?" on the form and paste the password. We handle HTTP basic auth, Shopify password pages, Netlify password protection, Cloudflare Access, and Vercel preview deployments. WordPress maintenance mode is detected but cannot be bypassed from outside.
Do you store the data?: We keep the findings and the underlying Lighthouse JSON for as long as the report URL exists. Email audit@crocky.host with the URL to have it deleted any time.
Does it check whether a site is AI slop?: Yes, if you tick the box on the form. The report then carries a verdict with the quoted evidence and a fix per finding. It never says a site is human-made; it reports what it found. How the check works, with its error rates.

See what's actually wrong with your website.

Start an audit

What we look at

What's in the report

Questions before you start