Scanned sites / ahrefs.com / 2026-10-05-1758

ahrefs.com scan from 10/5/2026, 5:58:00 PM

Scan 2026-10-05-1758

Scanned 10/5/2026, 5:58:00 PM, finished 10/5/2026, 7:09:35 PM. Found with 42backlinks.com tool directory

Site: https://ahrefs.com/

Download SQLite databaseEvery page and asset from this scan, with the crawl events, in one file.

81/ 100Good

On October 5, 2026 the Site Spider crawled 4947 pages and 1046 assets of ahrefs.com, starting from https://ahrefs.com/. It scored 81 out of 100, a good result. 12 of 22 checks found something to fix, led by heavy assets (51), image alt text (103,137), sitemap coverage (2,467); 3 checks passed. Most of the points went to heavy assets (−6), image alt text (−4.2), sitemap coverage (−3.1). 7 checks found something the score does not count, listed as noted. 1 check was not run because the crawl fetched nothing for it. The list below shows each check's result, the fix plan, when present, explains what to do first, and the security review at the end of the page covers headers, transport, libraries and exposed files.

Security review: Medium1 medium, 1 low and 1 info findings. See the security findings ↓

Pages crawled
4947
Assets fetched
1046
Status
Completed
Checks with issues
12 of 22
CoverageJob finished, partial coverage

5,993 of 6,000 discovered URLs were fetched, 7 blocked by robots.txt, 43,806 left out by the 5,000-page and 1,000-asset budget. The job finished, but the crawl did not reach everything it found. HTML only: nothing here ran JavaScript. 11,096 link destinations on other sites have not been checked.

  • Title tags1,308 issues
    1308 of 3080 pages have title issues. 1658 noindex or canonicalized pages excluded.
    −2.8 points
  • Meta descriptions1,518 issues
    1518 of 3080 pages have meta description issues. 1658 noindex or canonicalized pages excluded.
    −2.6 points
  • Headings12 issues
    12 of 3080 pages have heading issues. 1658 noindex or canonicalized pages excluded.
  • Broken links20 issues
    39 internal links point at 20 broken URLs.
    −0.1 points
  • Links to other sitesNot checked
    Not checked: the crawl fetched nothing this check can look at.
  • Redirects190 issues
    188 redirecting URLs, 2 of them chained.
    −0.2 points
  • Non-200 responses21 issues
    209 URLs did not return a 2xx response. 209 of them are pages, 21 with an error status; the rest are assets or redirects.
  • Rate limitedOK
    The site did not rate limit the crawler.
  • Indexability54 issues
    54 of 4738 indexable pages have indexability warnings.
    −0.1 points
  • Image alt text103,137 issues
    103137 of 148318 image references have no alt attribute. 1640 use an empty alt (decorative), which is fine.
    −4.2 points
  • Heavy assets51 issues
    51 assets larger than 500 KB among 1046 fetched assets. 13 documents over that size are listed but not counted: downloads are not page weight.
    −6 points
  • Orphan pages4 issues
    4 pages have no internal links pointing at them.
  • Sitemap coverage2,467 issues
    7 sitemaps listing 1965 URLs: 2466 crawled pages missing, 1 listed URL broken or redirecting, 0 reachable only via the sitemap. 1,377 listed URLs not crawled within the 5000-page budget.
    −3.1 points
  • Internal link counts425 noted
    Internal link counts for 500 pages; 425 worth a look.
  • Thin content2 issues
    2 of 3080 pages have fewer than 200 words. 1658 noindex or canonicalized pages excluded.
  • Duplicate contentOK
    0 groups of pages with identical HTML.
  • URL format1,688 noted
    1688 of 4947 page URLs are harder to read, share or cache than they need to be.
  • Canonicals1,658 noted
    1658 of 4738 pages have a canonical worth checking.
  • Robots directivesOK
    No page carries a robots directive; all 4738 pages are open to search engines.
  • Anchor text336 noted
    336 destinations are linked without useful anchor text, or with nofollow.
  • Title and heading structure2,525 noted
    2525 of 3080 pages could use the title, heading and snippet space better. 1658 noindex or canonicalized pages excluded.
  • Image weight and alt length3,000 noted
    86 images over 100 KB; 2914 with alt text over 100 characters.
  • Response anomalies45 noted
    45 URLs answered in a way worth looking at.

Where this scan sits among all scanned sites

2082 sites, median 79%, average 78%

ahrefs.com scores 81%, higher than 56% of the 2082 scanned sites. See the full ranking.

0541070%: 0 sites1%: 0 sites2%: 0 sites3%: 0 sites4%: 0 sites5%: 0 sites6%: 0 sites7%: 0 sites8%: 0 sites9%: 0 sites10%: 0 sites11%: 0 sites12%: 0 sites13%: 0 sites14%: 0 sites15%: 0 sites16%: 0 sites17%: 0 sites18%: 0 sites19%: 0 sites20%: 0 sites21%: 1 site22%: 0 sites23%: 0 sites24%: 0 sites25%: 0 sites26%: 0 sites27%: 1 site28%: 0 sites29%: 0 sites30%: 0 sites31%: 0 sites32%: 0 sites33%: 1 site34%: 0 sites35%: 2 sites36%: 2 sites37%: 1 site38%: 3 sites39%: 2 sites40%: 2 sites41%: 1 site42%: 0 sites43%: 1 site44%: 1 site45%: 4 sites46%: 5 sites47%: 4 sites48%: 4 sites49%: 4 sites50%: 4 sites51%: 5 sites52%: 9 sites53%: 7 sites54%: 8 sites55%: 8 sites56%: 7 sites57%: 11 sites58%: 16 sites59%: 6 sites60%: 13 sites61%: 11 sites62%: 19 sites63%: 23 sites64%: 16 sites65%: 39 sites66%: 28 sites67%: 32 sites68%: 33 sites69%: 34 sites70%: 39 sites71%: 62 sites72%: 70 sites73%: 61 sites74%: 57 sites75%: 74 sites76%: 78 sites77%: 91 sites78%: 96 sites79%: 85 sites80%: 94 sites81%: 100 sites82%: 107 sites83%: 87 sites84%: 94 sites85%: 69 sites86%: 64 sites87%: 62 sites88%: 61 sites89%: 49 sites90%: 33 sites91%: 42 sites92%: 25 sites93%: 19 sites94%: 13 sites95%: 7 sites96%: 4 sites97%: 11 sites98%: 2 sites99%: 1 site100%: 57 sites81% here100%90%80%70%60%50%40%30%20%10%0%

Green 90% and up (Excellent), lime 75 to 89 (Good), amber 50 to 74 (Needs work), red below 50 (Poor).

Internal link map

Loading the link map...

Start page (centre)OKRedirectErrorOrphanLinked from most pagesOne inbound link or noneRings = clicks from the start page. Size = inbound links. Drag to pan, scroll to zoom, click a page to see only its links.

Fix plan

Written by gpt-4o-mini from the scan findings

Your site has a solid health score but requires attention on broken links, redirects, and issues with titles. Prioritize fixes for the highest impact.

  1. 1

    Fix Broken Links

    Why: 39 internal links direct to broken URLs, impacting user experience and SEO.

    How: Identify broken links and either update, remove or redirect them to valid URLs.

    Checks: broken-links

  2. 2

    Address Redirects

    Why: 188 URLs redirect, with 2 chained redirects that can harm SEO.

    How: Optimize redirects by eliminating chains and ensuring they point to relevant content.

    Checks: redirects

  3. 3

    Improve Title Tags

    Why: 1308 pages have title issues, affecting search visibility and click-through rates.

    How: Revise titles to be concise (60 characters), clear, and keyword-rich.

    Checks: titles

  4. 4

    Enhance Meta Descriptions

    Why: 1518 pages lack optimal meta descriptions, reducing click appeal in search results.

    How: Revise descriptions to ensure they are compelling and under 160 characters.

    Checks: meta-descriptions

  5. 5

    Review Indexability Issues

    Why: 54 pages have indexability warnings which may prevent them from being indexed.

    How: Check indexable pages for canonical and robots directives impacting indexing.

    Checks: indexability

  6. 6

    Update Sitemap Coverage

    Why: 2466 crawled pages are missing from the sitemap, affecting indexing and search ranking.

    How: Add missing URLs to the sitemap and correct any broken or redirecting URLs listed.

    Evidence: 2466 URLs: not in sitemap.

    2,466 pages affected

    Checks: sitemap-coverage

Generated automatically; verify each change against your own site before relying on it.

Security review

Written by gpt-4o-mini from 16 checks over the crawl

The website has several security concerns that need attention, particularly related to cookie security and the absence of a permissions policy. Implementing these fixes will enhance the protection of user data and reduce potential exploitation risks from injected scripts.

  • 0 high
  • 1 medium
  • 1 low
  • 1 info
  1. 1

    Weak Cookie FlagsMedium

    Why it matters: Most cookies lack essential flags, making them vulnerable to access and interception.

    Fix: Set `Secure`, `HttpOnly`, and `SameSite=Strict` for all cookies being set.

    Evidence: Cookie flags

  2. 2

    Third-Party Scripts Lack Subresource IntegrityLow

    Why it matters: Scripts from external domains can be compromised, altering functionality without notice.

    Fix: Implement Subresource Integrity or use a Content-Security-Policy to control allowed sources.

    Evidence: Third-party scripts

  3. 3

    Missing Permissions PolicyInfo

    Why it matters: No Permissions-Policy header limits the capabilities of injected scripts on the site.

    Fix: Add the header: `Permissions-Policy: geolocation=(), camera=(), microphone=()`.

    Evidence: Permissions policy

What the checks found

  • FoundPermissions policyInfo

    No HTML page sends permissions-policy. A Permissions-Policy header turns off browser features the site does not use (camera, microphone, geolocation), limiting what an injected script could do.

    • https://ahrefs.com/ → no permissions-policy
    • https://ahrefs.com/search-marketing → no permissions-policy
    • https://ahrefs.com/site-explorer → no permissions-policy
    • https://ahrefs.com/keywords-explorer → no permissions-policy
    • https://ahrefs.com/rank-tracker → no permissions-policy
    • https://ahrefs.com/gsc-insights → no permissions-policy
    • https://ahrefs.com/brand-radar → no permissions-policy
    • https://ahrefs.com/ai-prompt-tracking → no permissions-policy
    • https://ahrefs.com/website-performance → no permissions-policy
    • https://ahrefs.com/site-audit → no permissions-policy
    • https://ahrefs.com/web-analytics → no permissions-policy
    • https://ahrefs.com/bot-analytics → no permissions-policy
  • FoundCookie flagsMedium

    2729 of 2732 cookies are missing protective flags. Without HttpOnly a script can read the cookie; without Secure it travels over plain HTTP; without SameSite it is sent on cross-site requests.

    • 05 Oct 2026 18:28:09 GMT (set by https://ahrefs.com/robots.txt) lacks Secure, HttpOnly, SameSite
    • 05 Oct 2026 18:28:10 GMT (set by https://ahrefs.com/sitemap.xml) lacks Secure, HttpOnly, SameSite
    • 05 Oct 2026 18:28:38 GMT (set by https://ahrefs.com/search-marketing) lacks Secure, HttpOnly, SameSite
    • 05 Oct 2026 18:28:40 GMT (set by https://ahrefs.com/rank-tracker) lacks Secure, HttpOnly, SameSite
    • 05 Oct 2026 18:28:41 GMT (set by https://ahrefs.com/brand-radar) lacks Secure, HttpOnly, SameSite
    • 05 Oct 2026 18:28:42 GMT (set by https://ahrefs.com/website-performance) lacks Secure, HttpOnly, SameSite
    • 05 Oct 2026 18:28:43 GMT (set by https://ahrefs.com/web-analytics) lacks Secure, HttpOnly, SameSite
    • 05 Oct 2026 18:28:44 GMT (set by https://ahrefs.com/bot-analytics) lacks Secure, HttpOnly, SameSite
    • 05 Oct 2026 18:28:45 GMT (set by https://ahrefs.com/content-explorer) lacks Secure, HttpOnly, SameSite
    • 05 Oct 2026 18:28:46 GMT (set by https://ahrefs.com/social-media-manager) lacks Secure, HttpOnly, SameSite
    • 05 Oct 2026 18:28:47 GMT (set by https://ahrefs.com/portfolios) lacks Secure, HttpOnly, SameSite
    • 05 Oct 2026 18:28:48 GMT (set by https://ahrefs.com/local-seo) lacks Secure, HttpOnly, SameSite
  • NoteThird-party scripts

    Scripts run from 2 other domains without Subresource Integrity, so a compromise of any of them changes what runs on this site. (Tag managers and analytics rarely support SRI; a Content-Security-Policy that names these hosts is the usual control.)

    • cdn-cookieyes.com (40 script tags)
    • www.googletagmanager.com (40 script tags)
12 checks passed, 1 not applicable
  • OKHTTPS

    All 4738 crawled pages were served over HTTPS.

  • OKHTTP Strict Transport Security

    strict-transport-security is set on all 4738 HTML pages.

  • OKContent Security Policy

    A Content-Security-Policy is set.

  • OKClickjacking protection

    x-frame-options is set on all 4738 HTML pages.

  • OKMIME sniffing protection

    x-content-type-options is set on all 4738 HTML pages.

  • OKReferrer policy

    referrer-policy is set on all 4738 HTML pages.

  • OKSoftware version disclosure

    The Server header names a product without a version, and there is no X-Powered-By header.

  • OKMixed content

    No HTTPS page loads a script, stylesheet, font or image over plain HTTP.

  • OKForms over HTTPS

    3 forms found, all on HTTPS pages posting to HTTPS addresses.

  • OKKeys and secrets in page code

    No API keys, tokens or private keys were found in the sampled HTML and scripts.

  • OKExposed files and listings

    None of the crawled URLs is a configuration file, backup, dump, repository folder or directory listing.

  • OKSensitive paths in robots.txt

    robots.txt does not point at admin, backup or private paths.

  • Not applicableVulnerable JavaScript libraries

    No recognisable library versions were found in the sampled scripts.

A passive review of what the crawl recorded: response headers, page and script contents and the URLs it found. It does not probe the site, test TLS settings or look for files that were not linked. Generated automatically; verify each finding against your own site before acting on it.

Sites scoring near ahrefs.com

Their neighbours in the SEO rank table, which orders every scanned site by health score.

This report was produced by the DIY SEO Hub Site Spider crawling ahrefs.com from its pages as published, the way a search engine does. It shows summary figures only.

Own ahrefs.com?

ahrefs.com scan 2026-10-05-1758 | DIY SEO Hub