Scanned sites / tradesmanmfg.ca / 2026-11-03-0457
tradesmanmfg.ca scan from 2026-11-03 04:57:19 UTC DR 14
DR is Ahrefs Domain Rating (0-100, backlink strength), used under its Domain Rating License.
Scan 2026-11-03-0457
Scanned 2026-11-03 04:57:19 UTC, finished 2026-11-03 18:00:56 UTC. Found on page 5 of brave web search results
Site: https://tradesmanmfg.ca/
Download SQLite databaseEvery page and asset from this scan, with the crawl events, in one file.
On November 3, 2026 the Site Spider crawled 222 pages and 1001 assets of tradesmanmfg.ca, starting from https://tradesmanmfg.ca/. It scored 79 out of 100, a good result. 8 of 33 checks found something to fix, led by heavy assets (22), meta descriptions (114), sitemap coverage (84); 11 checks passed. Most of the points went to heavy assets (−6), meta descriptions (−5.6), sitemap coverage (−3.1). 14 checks found something the score does not count, listed as noted. 4 checks were not run because the crawl fetched nothing for them. The list below shows each check's result, the fix plan, when present, explains what to do first, and the security review at the end of the page covers headers, transport, libraries and exposed files.
Security review: Medium4 medium, 1 low and 1 info findings. See the security findings ↓
- Pages crawled
- 222
- Assets fetched
- 1001
- Status
- Completed
- Checks with issues
- 8 of 33
1,223 of 5,054 discovered URLs were fetched, 3,830 blocked by robots.txt, 38 left out by the 5,000-page and 1,000-asset budget. The job finished, but the crawl did not reach everything it found. HTML only: nothing here ran JavaScript. 48 link destinations on other sites were checked.
- Title tags47 issues47 of 154 pages have title issues. 8 noindex or canonicalized pages excluded.−2.9 points
- Meta descriptions114 issues114 of 154 pages have meta description issues. 8 noindex or canonicalized pages excluded.−5.6 points
- Headings14 issues14 of 154 pages have heading issues. 8 noindex or canonicalized pages excluded.−0.5 points
- Broken linksOK0 internal links point at 0 broken URLs.
- Links to other sites27 noted0 destinations answered with an error, 19 could not be determined (timeouts, rate limits or refusals), of 48 destinations checked.
- Redirects61 issues67 redirecting URLs, 2 of them chained.−1.5 points
- Non-200 responses85 noted85 URLs did not return a 2xx response. 60 of them are pages, 0 with an error status; the rest are assets or redirects.
- Rate limitedOKThe site did not rate limit the crawler.
- Indexability6 issues6 of 161 indexable pages have indexability warnings. 1 page noindex by design.−0.4 points
- Image alt textOK0 of 339 image references have no alt attribute. 39 use an empty alt (decorative), which is fine.
- Heavy assets22 issues22 assets larger than 500 KB among 1001 fetched assets. 85 documents over that size are listed but not counted: downloads are not page weight.−6 points
- Orphan pages40 issues40 pages have no internal links pointing at them.−1 points
- Sitemap coverage84 issues7 sitemaps listing 188 URLs: 5 crawled pages missing, 39 listed URLs broken or redirecting, 40 reachable only via the sitemap.−3.1 points
- Internal link counts23 notedInternal link counts for 162 pages; 23 worth a look.
- Thin contentOK0 of 154 pages have fewer than 200 words. 8 noindex or canonicalized pages excluded.
- Duplicate contentOK0 groups of pages with identical HTML.
- URL format9 noted9 of 222 page URLs are harder to read, share or cache than they need to be.
- Canonicals8 noted8 of 162 pages have a canonical worth checking.
- Robots directives162 noted162 pages carry a robots directive; 0 carry none.
- Anchor text30 noted30 destinations are linked without useful anchor text, or with nofollow.
- Title and heading structure23 noted23 of 154 pages could use the title, heading and snippet space better. 8 noindex or canonicalized pages excluded.
- Image weight and alt length32 noted32 images over 100 KB; 0 with alt text over 100 characters.
- Response anomalies4 noted4 URLs answered in a way worth looking at.
- HTML and head validationOKAll 162 pages keep their head tags in <head>, once each, under Googlebot's 2 MB.
- hreflangOKNo page declares hreflang.
- Structured data65 noted162 of 154 indexable pages carry structured data: BreadcrumbList (162), ListItem (162), WebSite (162), Organization (162), SiteNavigationElement (159). 65 pages with errors a rich result would fail on.
- Near duplicates53 noted53 pages in 3 groups read almost the same as another page (95% alike or more).
- Soft 404sOKNone of 162 pages answering 200 reads like an error page.
- AccessibilityNot checkedNot checked: the accessibility audit runs in the browser. Tick "Include JavaScript rendering checks" when you request a scan to run it.
- Link positions5 noted5 of 114 linked pages are linked only from the template, never from another page's content.
- PaginationOK8 pages in pagination sequences; 0 with problems.
- Headers and cookiesOK0 cookies set by the site; 16 response headers recorded across 1223 URLs.
- Orphans in searchNot checkedNot checked: import a Search Console Pages export on the scan page to find pages Google shows that the site does not link to.
- Link ScoreOKLink Score (internal PageRank, 0-100) for 162 pages; 103 hold almost none (10 or less).
- JavaScript renderingNot checkedNot checked: this scan did not render pages. Tick "Include JavaScript rendering checks" when you request a scan to compare the served HTML with what a browser builds.
- PageSpeed InsightsNot checkedNot checked yet: PageSpeed Insights runs on the top pages once the crawl has finished.
- Spelling23 noted23 words an English dictionary does not know, on 154 pages. Product names and jargon will appear here too.
Where this scan sits among all scanned sites
2790 sites, median 80%, average 79%
tradesmanmfg.ca scores 79%, higher than 44% of the 2790 scanned sites. See the full ranking.
Green 90% and up (Excellent), lime 75 to 89 (Good), amber 50 to 74 (Needs work), red below 50 (Poor).
Internal link map
Loading the link map...
Fix plan
Written by gpt-4o-mini from the scan findingsYour website has some issues that need fixing, including redirects, title and meta description problems, and orphaned pages. Implementing these fixes will enhance your site's SEO performance.
- 1
Fix Redirects
Why: 67 redirecting URLs can slow down site performance and dilute link equity.
How: Review and eliminate unnecessary redirects. Ensure all URLs point directly to their final destination without chaining.
Checks: redirects
- 2
Correct Title Tags
Why: 47 pages with title issues could negatively impact click-through rates from search results.
How: Revise titles to ensure they are within 60 characters and accurately describe each page.
Checks: titles
- 3
Add Meta Descriptions
Why: 114 pages lack proper meta descriptions, potentially reducing search visibility.
How: Write unique and relevant meta descriptions for affected pages, keeping within 160 characters.
Evidence: 29 pages have no meta description at all.
29 pages affected
Checks: meta-descriptions
- 4
Resolve Non-200 Responses
Why: 85 URLs not returning a 2xx response can result in a poor user experience.
How: Identify and fix or remove URLs that are not functioning correctly, ensuring all pages return a valid response.
Checks: status-codes
- 5
Internal Linking for Orphan Pages
Why: 40 orphan pages lack internal links, making them difficult for users and search engines to find.
How: Add internal links from relevant pages to the orphan pages to improve their visibility and indexing.
Checks: orphan-pages
- 6
Improve Sitemap Coverage
Why: Missing and redirecting URLs in your sitemap can hinder proper indexing.
How: Update the sitemap to include all relevant URLs and remove those that are redirecting.
Evidence: 39 URLs: sitemap url returns 302.
39 pages affected
Checks: sitemap-coverage
Generated automatically; verify each change against your own site before relying on it.
Security review
Written by gpt-4o-mini from 16 checks over the crawlYour site has several security issues that could expose users to risks, including lack of strict transport security, content security policy, and protection against clickjacking. Additionally, an API key is exposed, which should be addressed. Implementing recommended headers and protecting sensitive data will enhance security.
- 0 high
- 4 medium
- 1 low
- 1 info
- 1
Missing HTTP Strict Transport Security HeaderMedium
Why it matters: Without HSTS, users may be vulnerable to man-in-the-middle attacks if they enter the site without HTTPS.
Fix: Add the header: Strict-Transport-Security: max-age=31536000; includeSubDomains; preload.
Evidence: HTTP Strict Transport Security
- 2
Missing Content Security PolicyMedium
Why it matters: Lacking a CSP allows any script to run, increasing the risk of XSS attacks.
Fix: Add a Content-Security-Policy header: Content-Security-Policy: default-src 'self';.
Evidence: Content Security Policy
- 3
Missing X-Frame-Options HeaderMedium
Why it matters: Absence of X-Frame-Options leaves the site open to clickjacking attacks.
Fix: Add the header: X-Frame-Options: DENY or X-Frame-Options: SAMEORIGIN.
Evidence: Clickjacking protection
- 4
Exposed API KeyMedium
Why it matters: The Google API key found in the code can be exploited if not restricted properly.
Fix: Restrict the API key in Google Cloud Console to specific HTTP referrers.
Evidence: Keys and secrets in page code
- 5
Third-party Scripts Lack Subresource IntegrityLow
Why it matters: Scripts from external domains can change site behavior if compromised.
Fix: Implement a Content-Security-Policy that limits sources or use Subresource Integrity (SRI) where possible.
Evidence: Third-party scripts
- 6
Sensitive Paths in robots.txtInfo
Why it matters: Listing sensitive paths publicly can aid attackers in probing the site.
Fix: Consider removing sensitive entries or implementing access controls for these paths.
Evidence: Sensitive paths in robots.txt
What the checks found
- FoundHTTP Strict Transport SecurityMedium
No HTML page sends strict-transport-security. Without it a visitor who types the address without https:// can be intercepted on the first request.
- https://tradesmanmfg.ca/ → no strict-transport-security
- https://tradesmanmfg.ca/products/ → no strict-transport-security
- https://tradesmanmfg.ca/hvac-union-products/ → no strict-transport-security
- https://tradesmanmfg.ca/oem-services/ → no strict-transport-security
- https://tradesmanmfg.ca/locate-hvac-dealers/ → no strict-transport-security
- https://tradesmanmfg.ca/become-a-dealer/ → no strict-transport-security
- https://tradesmanmfg.ca/terms-conditions/ → no strict-transport-security
- https://tradesmanmfg.ca/tradesman-manufacturing-reviews-residential-hvac-parts-on-a-new-home/ → no strict-transport-security
- https://tradesmanmfg.ca/tradesman-hvac-manufacturing/ → no strict-transport-security
- https://tradesmanmfg.ca/blog/ → no strict-transport-security
- https://tradesmanmfg.ca/hvac-careers/ → no strict-transport-security
- https://tradesmanmfg.ca/contact-us/ → no strict-transport-security
- FoundContent Security PolicyMedium
None of the 162 HTML pages send a Content-Security-Policy header or meta tag, so the browser has no restriction on where scripts, styles and frames may load from.
- https://tradesmanmfg.ca/ → no content-security-policy
- https://tradesmanmfg.ca/products/ → no content-security-policy
- https://tradesmanmfg.ca/hvac-union-products/ → no content-security-policy
- https://tradesmanmfg.ca/oem-services/ → no content-security-policy
- https://tradesmanmfg.ca/locate-hvac-dealers/ → no content-security-policy
- https://tradesmanmfg.ca/become-a-dealer/ → no content-security-policy
- https://tradesmanmfg.ca/terms-conditions/ → no content-security-policy
- https://tradesmanmfg.ca/tradesman-manufacturing-reviews-residential-hvac-parts-on-a-new-home/ → no content-security-policy
- https://tradesmanmfg.ca/tradesman-hvac-manufacturing/ → no content-security-policy
- https://tradesmanmfg.ca/blog/ → no content-security-policy
- https://tradesmanmfg.ca/hvac-careers/ → no content-security-policy
- https://tradesmanmfg.ca/contact-us/ → no content-security-policy
- FoundClickjacking protectionMedium
No HTML page sends x-frame-options. Without X-Frame-Options (or a CSP frame-ancestors directive) the pages can be embedded in a frame on another site and overlaid with invisible controls.
- https://tradesmanmfg.ca/ → no x-frame-options
- https://tradesmanmfg.ca/products/ → no x-frame-options
- https://tradesmanmfg.ca/hvac-union-products/ → no x-frame-options
- https://tradesmanmfg.ca/oem-services/ → no x-frame-options
- https://tradesmanmfg.ca/locate-hvac-dealers/ → no x-frame-options
- https://tradesmanmfg.ca/become-a-dealer/ → no x-frame-options
- https://tradesmanmfg.ca/terms-conditions/ → no x-frame-options
- https://tradesmanmfg.ca/tradesman-manufacturing-reviews-residential-hvac-parts-on-a-new-home/ → no x-frame-options
- https://tradesmanmfg.ca/tradesman-hvac-manufacturing/ → no x-frame-options
- https://tradesmanmfg.ca/blog/ → no x-frame-options
- https://tradesmanmfg.ca/hvac-careers/ → no x-frame-options
- https://tradesmanmfg.ca/contact-us/ → no x-frame-options
- FoundKeys and secrets in page codeMedium
1 credential-like value found in code served to every visitor: Google API key.
- Google API key AIzaSy…ec (39 chars) in https://tradesmanmfg.ca/locate-hvac-dealers/: browser keys are expected in pages, but must be restricted by HTTP referrer and API in the Google Cloud console
- NoteThird-party scripts
Scripts run from 5 other domains without Subresource Integrity, so a compromise of any of them changes what runs on this site. (Tag managers and analytics rarely support SRI; a Content-Security-Policy that names these hosts is the usual control.)
- www.googletagmanager.com (60 script tags)
- analytics.ahrefs.com (40 script tags)
- www.google.com (2 script tags)
- hcaptcha.com (1 script tag)
- workforcenow.adp.com (2 script tags)
- NoteSensitive paths in robots.txt
robots.txt lists 1 path that look private. robots.txt is public and does not restrict access, so it doubles as a map for anyone probing the site; those paths need real access control.
- Disallow: /wp-admin/
9 checks passed, 1 not applicable
- OKHTTPS
All 162 crawled pages were served over HTTPS.
- OKMIME sniffing protection
x-content-type-options is set on all 162 HTML pages.
- OKReferrer policy
referrer-policy is set on all 162 HTML pages.
- OKPermissions policy
permissions-policy is set on all 162 HTML pages.
- OKSoftware version disclosure
The Server header names a product without a version, and there is no X-Powered-By header.
- OKMixed content
No HTTPS page loads a script, stylesheet, font or image over plain HTTP.
- OKForms over HTTPS
49 forms found, all on HTTPS pages posting to HTTPS addresses.
- OKVulnerable JavaScript libraries
2 library versions recognised, none with known vulnerabilities.
- OKExposed files and listings
None of the crawled URLs is a configuration file, backup, dump, repository folder or directory listing.
- Not applicableCookie flags
The crawl set no cookies, so there are no cookie flags to check.
A passive review of what the crawl recorded: response headers, page and script contents and the URLs it found. It does not probe the site, test TLS settings or look for files that were not linked. Generated automatically; verify each finding against your own site before acting on it.
Sites scoring near tradesmanmfg.ca
Their neighbours in the SEO rank table, which orders every scanned site by health score.
- gtplumbingfargo.comDR 280/100 · rank 1326 · 28 pages
- apslandscaping.caDR 380/100 · rank 1326 · 15 pages
- amanblaze.inDR 080/100 · rank 1326 · 22 pages
- www.lumentek.caDR 579/100 · rank 1452 · 92 pages
- www.blazehvac.comDR 379/100 · rank 1452 · 31 pages
- www.strategiccriminaldefence.comDR 2979/100 · rank 1452 · 569 pages
DR is Ahrefs Domain Rating (0-100, backlink strength), used under its Domain Rating License.
This report was produced by the DIY SEO Hub Site Spider crawling tradesmanmfg.ca from its pages as published, the way a search engine does. It shows summary figures only.
Own tradesmanmfg.ca?
- Claim this site to manage the listing, hide it from the public lists, or keep it.
- Want it gone instead? Ask through the support form or e-mail support@diyseohub.com, naming tradesmanmfg.ca. Removal needs no account and no proof of purchase.