Scanned sites / ptandme.com
SEO report for ptandme.com DR 41
The latest Site Spider scan of ptandme.com, with 1 scan on record. Each scan is at its own address, for example /domain/ptandme-com/2026-11-03-0026.
DR is Ahrefs Domain Rating (0-100, backlink strength), used under its Domain Rating License.
Latest scan
Scanned 2026-11-03 00:26:42 UTC, finished 2026-11-03 15:42:27 UTC. Found on page 5 of brave web search results
Site: https://ptandme.com/
Download SQLite databaseEvery page and asset from this scan, with the crawl events, in one file.
On November 3, 2026 the Site Spider crawled 3918 pages and 1532 assets of ptandme.com, starting from https://ptandme.com/. It scored 82 out of 100, a good result. 14 of 33 checks found something to fix, led by heavy assets (40), image alt text (19,712), sitemap coverage (1,280); 5 checks passed. Most of the points went to heavy assets (−6), image alt text (−2.5), headings (−2.4). 14 checks found something the score does not count, listed as noted. 4 checks were not run because the crawl fetched nothing for them. The list below shows each check's result, the fix plan, when present, explains what to do first, and the security review at the end of the page covers headers, transport, libraries and exposed files.
Security review: Medium6 medium and 3 low findings. See the security findings ↓
- Pages crawled
- 3918
- Assets fetched
- 1532
- Status
- Completed
- Checks with issues
- 14 of 33
5,450 of 5,452 discovered URLs were fetched, 2 blocked by robots.txt, 6,594 left out by the 5,000-page and 1,000-asset budget. The job finished, but the crawl did not reach everything it found. HTML only: nothing here ran JavaScript. 300 link destinations on other sites were checked, 1745 left unchecked.
- Title tags382 issues382 of 1334 pages have title issues. 1809 noindex or canonicalized pages excluded.−1.2 points
- Meta descriptions832 issues832 of 1334 pages have meta description issues. 1809 noindex or canonicalized pages excluded.−2.1 points
- Headings1,278 issues1278 of 1334 pages have heading issues. 1809 noindex or canonicalized pages excluded.−2.4 points
- Broken links43 issues2962 internal links point at 43 broken URLs.−0.3 points
- Links to other sites50 issues50 destinations answered with an error, 117 could not be determined (timeouts, rate limits or refusals), 1745 were left unchecked by the per-scan cap, of 300 destinations checked.−0.6 points
- Redirects313 issues706 redirecting URLs, 54 of them chained.−0.4 points
- Non-200 responses69 issues779 URLs did not return a 2xx response. 775 of them are pages, 69 with an error status; the rest are assets or redirects.−0.2 points
- Rate limitedOKThe site did not rate limit the crawler.
- Indexability2 issues2 of 1336 indexable pages have indexability warnings. 1807 pages noindex by design.
- Image alt text19,712 issues19712 of 47281 image references have no alt attribute. 9116 use an empty alt (decorative), which is fine.−2.5 points
- Heavy assets40 issues40 assets larger than 500 KB among 1532 fetched assets. 236 documents over that size are listed but not counted: downloads are not page weight.−6 points
- Orphan pages19 issues19 pages have no internal links pointing at them.
- Sitemap coverage1,280 issues3 sitemaps listing 1061 URLs: 773 crawled pages missing, 410 listed URLs broken or redirecting, 97 reachable only via the sitemap.−2.4 points
- Internal link counts391 notedInternal link counts for 500 pages; 391 worth a look.
- Thin content26 issues26 of 1334 pages have fewer than 200 words. 1809 noindex or canonicalized pages excluded.−0.1 points
- Duplicate content68 issues2 groups of pages with identical HTML.−0.2 points
- URL format156 noted156 of 3918 page URLs are harder to read, share or cache than they need to be.
- Canonicals1,809 noted1809 of 3143 pages have a canonical worth checking.
- Robots directives3,143 noted3143 pages carry a robots directive; 0 carry none.
- Anchor text522 noted522 destinations are linked without useful anchor text, or with nofollow.
- Title and heading structure260 noted260 of 1334 pages could use the title, heading and snippet space better. 1809 noindex or canonicalized pages excluded.
- Image weight and alt length336 noted328 images over 100 KB; 8 with alt text over 100 characters.
- Response anomalies4 noted4 URLs answered in a way worth looking at.
- HTML and head validationOKAll 3143 pages keep their head tags in <head>, once each, under Googlebot's 2 MB.
- hreflangOKNo page declares hreflang.
- Structured data17 noted3143 of 1334 indexable pages carry structured data: BreadcrumbList (3143), ListItem (3143), WebSite (3143), Organization (3143), ImageObject (2905). 17 pages with errors a rich result would fail on.
- Near duplicates44 noted44 pages in 12 groups read almost the same as another page (95% alike or more).
- Soft 404s10 noted10 pages answer 200 but say they are not there.
- AccessibilityNot checkedNot checked: the accessibility audit runs in the browser. Tick "Include JavaScript rendering checks" when you request a scan to run it.
- Link positions578 noted578 of 1327 linked pages are linked only from the template, never from another page's content.
- PaginationOK1208 pages in pagination sequences; 0 with problems.
- Headers and cookies1 noted1 cookie set by the site, 1 missing a protective flag; 13 response headers recorded across 5450 URLs.
- Orphans in searchNot checkedNot checked: import a Search Console Pages export on the scan page to find pages Google shows that the site does not link to.
- Link ScoreOKLink Score (internal PageRank, 0-100) for 3143 pages; 2984 hold almost none (10 or less).
- JavaScript renderingNot checkedNot checked: this scan did not render pages. Tick "Include JavaScript rendering checks" when you request a scan to compare the served HTML with what a browser builds.
- PageSpeed InsightsNot checkedNot checked yet: PageSpeed Insights runs on the top pages once the crawl has finished.
- Spelling271 noted271 words an English dictionary does not know, on 362 pages. Product names and jargon will appear here too.
Where this site sits among all scanned sites
2816 sites, median 80%, average 79%
ptandme.com scores 82%, higher than 57% of the 2816 scanned sites. See the full ranking.
Green 90% and up (Excellent), lime 75 to 89 (Good), amber 50 to 74 (Needs work), red below 50 (Poor).
Internal link map
Loading the link map...
Fix plan
Written by gpt-4o-mini from the scan findingsYour site has a good health score, but significant issues exist, particularly with internal links and content elements. Focus on fixing broken links, redirects, and optimizing title tags as priority fixes for maximum impact.
- 1
Fix Broken Links
Why: 2962 broken internal links hurt user experience and SEO.
How: Identify and update or remove broken links across your site. Check the URLs linking to broken references and consider replacing them with relevant content.
Checks: broken-links
- 2
Resolve Redirect Chains
Why: 706 URLs redirecting, with 54 being chained, can slow down access to content.
How: Simplify redirects by directly linking to the final destination without intermediate steps. Identify chained redirects and consolidate them.
Checks: redirects
- 3
Address Non-200 Status Codes
Why: 779 URLs return non-200 status, affecting crawlability.
How: Check your server responses and correct or remove pages with errors. Ensure assets are accessible.
Checks: status-codes
- 4
Optimize Title Tags
Why: 382 pages with title issues can harm keyword rankings.
How: Revise titles to be within 50-60 characters and unique for each page. Replace short or overly long titles.
Checks: titles
- 5
Enhance Meta Descriptions
Why: 832 pages with meta description issues limit click-through potential.
How: Craft unique and engaging meta descriptions within 150-160 characters for each affected page, focusing on keyword inclusion.
Checks: meta-descriptions
- 6
Clean Up Headings
Why: 1278 pages have heading issues that can confuse both users and search engines.
How: Ensure each page has a single H1 tag and appropriately use H2 and H3 for sub-headings to improve content structure.
Checks: headings
Generated automatically; verify each change against your own site before relying on it.
Security review
Written by gpt-4o-mini from 16 checks over the crawlThe website ptandme.com has several security deficiencies that expose it to potential vulnerabilities. Key issues include the absence of headers for strict transport security, content security policy, and clickjacking protection. Additionally, outdated JavaScript libraries and insecure cookies weaken site defenses. Immediate action is needed to enhance security configurations.
- 0 high
- 6 medium
- 3 low
- 0 info
- 1
Missing HTTP Strict Transport Security (HSTS)Medium
Why it matters: Without HSTS, initial requests can be intercepted when users type the URL without HTTPS.
Fix: Add the header: Strict-Transport-Security: max-age=63072000; includeSubDomains; preload
Evidence: HTTP Strict Transport Security
- 2
Missing Content Security Policy (CSP)Medium
Why it matters: Lack of CSP allows unrestricted loading of resources, increasing XSS risks.
Fix: Add a CSP header: Content-Security-Policy: default-src 'self';
Evidence: Content Security Policy
- 3
Missing X-Frame-OptionsMedium
Why it matters: Without this header, your site is vulnerable to clickjacking attacks.
Fix: Add the header: X-Frame-Options: DENY
Evidence: Clickjacking protection
- 4
Missing HttpOnly and Secure Cookie FlagsMedium
Why it matters: Cookies without these flags can be accessed by scripts and transmitted over insecure connections.
Fix: Set the following flags for cookie: HttpOnly; Secure; SameSite=Lax
Evidence: Cookie flags
- 5
Vulnerable JavaScript LibrariesMedium
Why it matters: Using outdated libraries increases susceptibility to known vulnerabilities.
Fix: Upgrade jQuery to at least 3.5.0, jQuery UI to at least 1.13.2, Bootstrap to at least 3.4.1
Evidence: Vulnerable JavaScript libraries
- 6
Leaked Google API KeyMedium
Why it matters: Exposing the API key can lead to misuse, potentially accruing costs or data leaks.
Fix: Implement restrictions on the API key in the Google Cloud console to limit usage to specific referrers.
Evidence: Keys and secrets in page code
- 7
Missing X-Content-Type-Options HeaderLow
Why it matters: Lack of this header allows the browser to incorrectly interpret file types, increasing security risks.
Fix: Add the header: X-Content-Type-Options: nosniff
Evidence: MIME sniffing protection
- 8
Missing Referrer Policy HeaderLow
Why it matters: Without this, sensitive URLs may be exposed to external sites when users navigate away.
Fix: Add the header: Referrer-Policy: no-referrer
Evidence: Referrer policy
- 9
Mixed Content IssueLow
Why it matters: Loading resources over HTTP on HTTPS pages can compromise security.
Fix: Change the resource URL to use HTTPS: https://ptandme.com/wp-content/themes/ptandme/images/logo.png
Evidence: Mixed content
What the checks found
- FoundHTTP Strict Transport SecurityMedium
No HTML page sends strict-transport-security. Without it a visitor who types the address without https:// can be intercepted on the first request.
- https://ptandme.com/ → no strict-transport-security
- https://ptandme.com/services/ → no strict-transport-security
- https://ptandme.com/services/aquatic-therapy/ → no strict-transport-security
- https://ptandme.com/services/balance-and-fall-prevention/ → no strict-transport-security
- https://ptandme.com/services/cancer-care-physical-therapy/ → no strict-transport-security
- https://ptandme.com/services/certified-hand-therapy/ → no strict-transport-security
- https://ptandme.com/services/industrial-rehabilitation/ → no strict-transport-security
- https://ptandme.com/services/pediatric-rehabilitation/ → no strict-transport-security
- https://ptandme.com/services/pelvic-health-physical-therapy/ → no strict-transport-security
- https://ptandme.com/services/pre-and-post-surgical-rehabilitation/ → no strict-transport-security
- https://ptandme.com/services/sports-medicine-physical-therapy/ → no strict-transport-security
- https://ptandme.com/services/vestibular-rehabilitation/ → no strict-transport-security
- FoundContent Security PolicyMedium
None of the 3143 HTML pages send a Content-Security-Policy header or meta tag, so the browser has no restriction on where scripts, styles and frames may load from.
- https://ptandme.com/ → no content-security-policy
- https://ptandme.com/services/ → no content-security-policy
- https://ptandme.com/services/aquatic-therapy/ → no content-security-policy
- https://ptandme.com/services/balance-and-fall-prevention/ → no content-security-policy
- https://ptandme.com/services/cancer-care-physical-therapy/ → no content-security-policy
- https://ptandme.com/services/certified-hand-therapy/ → no content-security-policy
- https://ptandme.com/services/industrial-rehabilitation/ → no content-security-policy
- https://ptandme.com/services/pediatric-rehabilitation/ → no content-security-policy
- https://ptandme.com/services/pelvic-health-physical-therapy/ → no content-security-policy
- https://ptandme.com/services/pre-and-post-surgical-rehabilitation/ → no content-security-policy
- https://ptandme.com/services/sports-medicine-physical-therapy/ → no content-security-policy
- https://ptandme.com/services/vestibular-rehabilitation/ → no content-security-policy
- FoundClickjacking protectionMedium
No HTML page sends x-frame-options. Without X-Frame-Options (or a CSP frame-ancestors directive) the pages can be embedded in a frame on another site and overlaid with invisible controls.
- https://ptandme.com/ → no x-frame-options
- https://ptandme.com/services/ → no x-frame-options
- https://ptandme.com/services/aquatic-therapy/ → no x-frame-options
- https://ptandme.com/services/balance-and-fall-prevention/ → no x-frame-options
- https://ptandme.com/services/cancer-care-physical-therapy/ → no x-frame-options
- https://ptandme.com/services/certified-hand-therapy/ → no x-frame-options
- https://ptandme.com/services/industrial-rehabilitation/ → no x-frame-options
- https://ptandme.com/services/pediatric-rehabilitation/ → no x-frame-options
- https://ptandme.com/services/pelvic-health-physical-therapy/ → no x-frame-options
- https://ptandme.com/services/pre-and-post-surgical-rehabilitation/ → no x-frame-options
- https://ptandme.com/services/sports-medicine-physical-therapy/ → no x-frame-options
- https://ptandme.com/services/vestibular-rehabilitation/ → no x-frame-options
- FoundMIME sniffing protectionLow
No HTML page sends x-content-type-options. Without X-Content-Type-Options: nosniff a browser may run a file as a script because of its contents rather than its declared type.
- https://ptandme.com/ → no x-content-type-options
- https://ptandme.com/services/ → no x-content-type-options
- https://ptandme.com/services/aquatic-therapy/ → no x-content-type-options
- https://ptandme.com/services/balance-and-fall-prevention/ → no x-content-type-options
- https://ptandme.com/services/cancer-care-physical-therapy/ → no x-content-type-options
- https://ptandme.com/services/certified-hand-therapy/ → no x-content-type-options
- https://ptandme.com/services/industrial-rehabilitation/ → no x-content-type-options
- https://ptandme.com/services/pediatric-rehabilitation/ → no x-content-type-options
- https://ptandme.com/services/pelvic-health-physical-therapy/ → no x-content-type-options
- https://ptandme.com/services/pre-and-post-surgical-rehabilitation/ → no x-content-type-options
- https://ptandme.com/services/sports-medicine-physical-therapy/ → no x-content-type-options
- https://ptandme.com/services/vestibular-rehabilitation/ → no x-content-type-options
- FoundReferrer policyLow
No HTML page sends referrer-policy. Without a Referrer-Policy the full page address, including any query string, is sent to every site a visitor clicks through to.
- https://ptandme.com/ → no referrer-policy
- https://ptandme.com/services/ → no referrer-policy
- https://ptandme.com/services/aquatic-therapy/ → no referrer-policy
- https://ptandme.com/services/balance-and-fall-prevention/ → no referrer-policy
- https://ptandme.com/services/cancer-care-physical-therapy/ → no referrer-policy
- https://ptandme.com/services/certified-hand-therapy/ → no referrer-policy
- https://ptandme.com/services/industrial-rehabilitation/ → no referrer-policy
- https://ptandme.com/services/pediatric-rehabilitation/ → no referrer-policy
- https://ptandme.com/services/pelvic-health-physical-therapy/ → no referrer-policy
- https://ptandme.com/services/pre-and-post-surgical-rehabilitation/ → no referrer-policy
- https://ptandme.com/services/sports-medicine-physical-therapy/ → no referrer-policy
- https://ptandme.com/services/vestibular-rehabilitation/ → no referrer-policy
- FoundPermissions policyInfo
No HTML page sends permissions-policy. A Permissions-Policy header turns off browser features the site does not use (camera, microphone, geolocation), limiting what an injected script could do.
- https://ptandme.com/ → no permissions-policy
- https://ptandme.com/services/ → no permissions-policy
- https://ptandme.com/services/aquatic-therapy/ → no permissions-policy
- https://ptandme.com/services/balance-and-fall-prevention/ → no permissions-policy
- https://ptandme.com/services/cancer-care-physical-therapy/ → no permissions-policy
- https://ptandme.com/services/certified-hand-therapy/ → no permissions-policy
- https://ptandme.com/services/industrial-rehabilitation/ → no permissions-policy
- https://ptandme.com/services/pediatric-rehabilitation/ → no permissions-policy
- https://ptandme.com/services/pelvic-health-physical-therapy/ → no permissions-policy
- https://ptandme.com/services/pre-and-post-surgical-rehabilitation/ → no permissions-policy
- https://ptandme.com/services/sports-medicine-physical-therapy/ → no permissions-policy
- https://ptandme.com/services/vestibular-rehabilitation/ → no permissions-policy
- FoundCookie flagsMedium
1 of 1 cookie are missing protective flags. Without HttpOnly a script can read the cookie; without Secure it travels over plain HTTP; without SameSite it is sent on cross-site requests.
- pvc_visits[0] (set by https://ptandme.com/blog/pain-is-scary-dont-let-it-spook-you/) lacks HttpOnly
- FoundMixed contentLow
1 resource on HTTPS pages are loaded over plain HTTP.
- https://ptandme.com/ loads image http://ptandme.com/wp-content/themes/ptandme/images/logo.png
- FoundVulnerable JavaScript librariesMedium
3 libraries with published vulnerabilities: jQuery 2.9.28, jQuery UI 1.10.4, Bootstrap 3.1.1. Whether they are exploitable depends on how the site uses them, but each has a fixed release.
- jQuery 2.9.28 in https://ptandme.com/wp-content/plugins/gravityforms/js/placeholders.jquery.min.…: CVE-2015-9251 (XSS via cross-domain AJAX), CVE-2019-11358 (prototype pollution), CVE-2020-11022, CVE-2020-11023 (XSS via HTML passed to DOM methods); fixed in 3.5.0
- jQuery UI 1.10.4 in https://ptandme.com/wp-content/themes/ptandme/js/jquery-ui.js: CVE-2016-7103, CVE-2021-41182, CVE-2021-41183, CVE-2021-41184, CVE-2022-31160 (XSS through widget options); fixed in 1.13.2
- Bootstrap 3.1.1 in https://ptandme.com/wp-content/themes/ptandme/js/bootstrap.min.js: CVE-2016-10735, CVE-2018-14040, CVE-2018-14041, CVE-2018-14042, CVE-2019-8331 (XSS through data attributes in tooltip, popover, collapse and scrollspy); fixed in 3.4.1
- FoundKeys and secrets in page codeMedium
1 credential-like value found in code served to every visitor: Google API key.
- Google API key AIzaSy…EQ (39 chars) in https://ptandme.com/find-a-pt/: browser keys are expected in pages, but must be restricted by HTTP referrer and API in the Google Cloud console
- NoteSoftware version disclosure
Responses name the framework in an X-Powered-By header but hide the version.
- server: nginx (5450 responses)
- x-powered-by: WP Engine (3375 responses)
- NoteThird-party scripts
Scripts run from 4 other domains without Subresource Integrity, so a compromise of any of them changes what runs on this site. (Tag managers and analytics rarely support SRI; a Content-Security-Policy that names these hosts is the usual control.)
- oss.maxcdn.com (80 script tags)
- js.hs-scripts.com (40 script tags)
- static.ctctcdn.com (39 script tags)
- maps.googleapis.com (1 script tag)
- NoteSensitive paths in robots.txt
robots.txt lists 1 path that look private. robots.txt is public and does not restrict access, so it doubles as a map for anyone probing the site; those paths need real access control.
- Disallow: /wp-admin/
3 checks passed
- OKHTTPS
All 3143 crawled pages were served over HTTPS.
- OKForms over HTTPS
59 forms found, all on HTTPS pages posting to HTTPS addresses.
- OKExposed files and listings
None of the crawled URLs is a configuration file, backup, dump, repository folder or directory listing.
A passive review of what the crawl recorded: response headers, page and script contents and the URLs it found. It does not probe the site, test TLS settings or look for files that were not linked. Generated automatically; verify each finding against your own site before acting on it.
Earlier scans of ptandme.com
No other scans of this site yet.
Sites scoring near ptandme.com
Their neighbours in the SEO rank table, which orders every scanned site by health score.
- fixauto.comDR 6082/100 · rank 1087 · 11 pages
- ctcelectricalcontracting.comDR 182/100 · rank 1087 · 24 pages
- deeslandscaping.comDR 382/100 · rank 1087 · 53 pages
- www.bootsmabakery.comDR 1982/100 · rank 1087 · 37 pages
- www.saskatoonphysiotherapy.comDR 582/100 · rank 1087 · 6 pages
- www.pursuitphysio.comDR 482/100 · rank 1087 · 116 pages
DR is Ahrefs Domain Rating (0-100, backlink strength), used under its Domain Rating License.
This report was produced by the DIY SEO Hub Site Spider crawling ptandme.com from its pages as published, the way a search engine does. It shows summary figures only.
Own ptandme.com?
- Claim this site to manage the listing, hide it from the public lists, or keep it.
- Want it gone instead? Ask through the support form or e-mail support@diyseohub.com, naming ptandme.com. Removal needs no account and no proof of purchase.