SEO audit of michelecandura.com

Audit requested on 5 November 2026 at 14:41:29 (Italian time).

Some firewalls and bot protections (Cloudflare, Vercel and the like) block automated scans: if the results look odd or partial, that is almost always why.

Performance

100

SEO

Accessibility

Best practices

AI Crawlability Score

Lighthouse measures the homepage by simulating a mid range phone on a slow mobile connection.

How the Performance score is built

Lighthouse weighs five measures: each bar is the measure's own score out of 100, the weight says how much it counts in the total. That is why a faster LCP can still end in a lower score, if the blocking time grows.

First Contentful Paintweight 101.8 s | 90/100 | 1 point lost
Speed Indexweight 104.0 s | 81/100 | 2 points lost
Largest Contentful Paintweight 253.0 s | 78/100 | 6 points lost
Total Blocking Timeweight 30330 ms | 76/100 | 7 points lost
Layout stability (CLS)weight 250 | 100/100 | no points lost

Lighthouse's 3 runs

84
Run 1
82
Run 2
87
Run 3

Lighthouse measures the homepage several times in a row and the report shows the average: runs always land a few points apart, because of the network and the server's load.

Lighthouse's total is 84 out of 100, the average of the single runs' scores: the parts, computed on the average times, can be off it by a few points.

// fix first

The fixes that matter most

1
Performance
The phone stays busy running JavaScript: 330 ms of blocking, against the 200 ms Lighthouse counts as good. Remove or defer the scripts that are not needed right away, starting with third party ones.
Lighthouse score 84 out of 100: 90 and up is good.
2
HTTP to HTTPS
Redirect every HTTP address to its HTTPS version with a 301.
The HTTP version does not send visitors to HTTPS with a permanent redirect (301 or 308).
3
Best practices
Lighthouse finds technical problems on the homepage: usually errors in the browser console, resources loaded without HTTPS, distorted images or libraries with known vulnerabilities.
Lighthouse score 77 out of 100: 90 and up is good.

// checks

What we checked

Domain and server

HTTPS
The site is served over HTTPS.
HTTP to HTTPS
The HTTP version does not send visitors to HTTPS with a permanent redirect (301 or 308).
www and no www
The www and bare versions lead to the same address.
robots.txt
The robots.txt file exists.
robots.txt and AI
The robots.txt lets AI crawlers read the site.
Sitemap
The XML sitemap exists.
llms.txt
The llms.txt file is missing.
ARD manifest
The site publishes no ARD (Agentic Resource Discovery) manifest, the list of the resources it offers to AI agents.
Google Search Console
We do not see a Google Search Console verification (it can also be done in ways we cannot see).
Spam blocklists
The server's IP is not on the spam blocklists we check.

Homepage

Title
The homepage has a title.
Meta description
The homepage has a meta description.
Canonical
The homepage declares its canonical address.
Structured data (JSON LD)
The homepage has structured data.
Social preview (Open Graph)
The homepage has Open Graph tags.
Headings in the text
The homepage has headings (H1, H2...) in its text.
Homepage response
The homepage answers without errors.
Empty page (soft 404)
The homepage is not an empty page.
Content without JavaScript
The homepage's content can be read without JavaScript.

// technologies

Technologies on the site

Analytics: Google AnalyticsSite Kit
CMS: WordPress
Databases: MySQL
Font scripts: Font AwesomeTwitter Emoji (Twemoji)
JavaScript frameworks: React
JavaScript libraries: core-jsjQueryjQuery MigratejQuery UI
Miscellaneous: HTTP/3Open GraphRSS
Operating systems: Debian
PaaS: Cloudways
Page builders: Elementor
Performance: Priority Hints
Programming languages: PHP
Security: reCAPTCHA
SEO: All in One SEO Pack
Tag managers: Google Tag Manager
Web servers: Apache HTTP Server
WordPress plugins: Elementor Header & Footer BuilderElementsKit

Detected on the homepage. We never show version numbers, so as not to give hints to anyone looking for holes.

PHP2Shell: worth checking on this site

We detected PHP and could not confirm it is a release with the fix. This does not mean the site is vulnerable: hosts often apply the fix without changing the version number, and we do not test for the flaw. Ask your host or developer whether PHP was updated on or after 21 October 2026.

Read our PHP2Shell guide

// contacts and forms

How a visitor can reach you

We look at what the homepage shows to be contacted and at its forms. We never show numbers, addresses or handles, and we never submit a form: we only look at it.

Contacts on the homepage

Phone: not shown
Email: not shown

Messaging

Social

Differences between desktop and mobile

To look atLinkedIn: shown on mobile, missing on desktop.

Forms

Contact form

Custom form (tool not recognised)

To look atThe privacy consent checkbox is missing.

We never submit forms: we make a single check request to the address they send to.

Contact page

https://michelecandura.com/#contact-block

The contact page is the page we audited: its contacts are the ones above.

Shown means visible on screen or inside a collapsed navigation menu. None of this enters a score.

// comparison

How does your site compare with the rest?

Compare the site with the businesses we scanned in a city or across the country, with another audit of the same site, or with another site.

Loading the cities' data

Audit this site again Scan another site

// frequently asked questions

SEO, email, speed and AI:
the short answers.

What is an SEO audit, and what does your SEO website analyzer check?

An SEO audit checks everything that can hold a site back in search results. Our analyzer reads the site's homepage and checks its title, meta description, canonical, structured data, social preview, headings, errors, robots.txt, the sitemap, llms.txt, HTTPS and redirects, then measures it with Lighthouse.

Is the SEO audit free?

Yes, with no sign up and no card. You can scan up to 4 different websites an hour, one scan at a time, and audit the same site again after 30 minutes: before that we show you the audit already made. API keys with a priority get wider limits. Every audit keeps its own page, so you can compare them over time.

How long does a scan take, and why is there a queue?

Usually a few minutes. Public scans start in order of arrival and give way to the studio's own work, so while you wait you see your place in line and an estimated time that updates on its own. You can also close the page and get the report by email.

What is a good SEO score?

Lighthouse scores SEO from 0 to 100: 90 and above is good, 50 to 89 needs improvement, below 50 is poor. It is a technical check, not a ranking prediction: a site can score 100 and stay invisible if its content does not answer what people are searching for.

How do I read the loading times in the report?

They are lab measurements: Lighthouse loads the homepage as a mid range phone on a slow mobile network. By Google's measure, Largest Contentful Paint is good within 2.5 seconds and layout stability (CLS) within 0.1. Interactivity (INP) can only be measured on real users, so it is not shown.

What is the AI Crawlability Score, and how do you check AI visibility?

It measures how ready the site is to be read and cited by ChatGPT, Perplexity, Gemini and Google's AI answers. It is a weighted mean of eleven checks: content readable without JavaScript, llms.txt, robots.txt open to AI crawlers, structured data, sitemap, title, meta description, canonical, HTTPS, SEO score and the ARD (Agentic Resource Discovery) manifest. A check we cannot verify never lowers the score.

Is this a GEO audit? Will it help me show up in ChatGPT?

Yes, on the technical side. Generative engine optimization (GEO), or AI search optimization, is SEO for AI answers: before an assistant can cite a site, it has to be able to read it. The AI Crawlability Score checks exactly that, through llms.txt, AI crawlers and structured data. Being cited then depends on content, which the audit does not judge.

What is my site compared with?

With the business websites of a city we scanned for the State of the Web, or with the national average. For every measure we tell you how many of those sites yours does better than, and what the median value is. You pick the city to compare with.

Why do my audit results look odd or partial?

Almost always because of a firewall or bot protection, such as Cloudflare's or Vercel's: it blocks automated visits, so the scan reads a checkpoint page instead of the site. When we notice it we show no scores. If the site is yours you can let the scanner through, or write to us and we will look at it.

Can I stop NFW from auditing my site?

Yes. Our scanner is called NFW-Audit and respects a robots.txt group that names it (User-agent: NFW-Audit, Disallow: /) and the TDM-Reservation signal. Or write to audits@nfw.run with the domain: we stop scanning it, remove its audits and delete the data. If the owner has disabled audits, the request ends with a notice and no scores. The scanner's page explains it all.

Which sites don't you audit?

We do not perform public audits of adult or gambling sites and the like (drugs, violence, hate, dating, malware and phishing, piracy), because every audit has a public page carrying the site's name. In that case the audit does not start and we store no result. If you think that is a mistake, write to audits@nfw.run.

What do you do with my email and my results?

The email is optional: we only use it if you accept both the privacy policy and marketing communications, and we send you the report. You can unsubscribe from every email. Every audit has its own page; your browser keeps only a reference to your latest audits, to reopen them.

The report says something's off.
We can fix it.

SEO errors, slow pages, sites invisible to AI: these are exactly the problems we solve for businesses and professionals every day.

Let's talk about your site Read the case studies