Scanned sites / www.heritagedentalcentre.ca / 2026-09-28-1637

www.heritagedentalcentre.ca scan from 9/28/2026, 4:37:52 PM

A newer scan exists. See the latest report for www.heritagedentalcentre.ca.

Scan 2026-09-28-1637

Scanned 9/28/2026, 4:37:52 PM, finished 9/28/2026, 4:44:06 PM. Found with openstreetmap overpass

Site: https://www.heritagedentalcentre.ca/

Download SQLite databaseEvery page and asset from this scan, with the crawl events, in one file.

97/ 100Excellent

On September 28, 2026 the Site Spider crawled 46 pages and 472 assets of www.heritagedentalcentre.ca, starting from https://www.heritagedentalcentre.ca/. It scored 97 out of 100, an excellent result. 3 of 16 checks found something to fix, led by meta descriptions (13), title tags (5), links to other sites (2); 10 checks passed. Most of the points went to meta descriptions (−2.3), title tags (−1.1), links to other sites (−0.8). 3 checks found something the score does not count, listed as noted. The list below shows each check's result, the fix plan, when present, explains what to do first, and the security review at the end of the page covers headers, transport, libraries and exposed files.

Security review: Medium4 medium, 2 low and 2 info findings. See the security findings ↓

Pages crawled
46
Assets fetched
472
Status
Completed
Checks with issues
3 of 16
CoverageComplete crawl

518 of 532 discovered URLs were fetched, 14 blocked by robots.txt. The crawl reached everything it found. HTML only: nothing here ran JavaScript. 27 link destinations on other sites were checked.

  • Title tags5 issues
    5 of 46 pages have title issues.
    −1.1 points
  • Meta descriptions13 issues
    13 of 46 pages have meta description issues.
    −2.3 points
  • HeadingsOK
    0 of 46 pages have heading issues.
  • Broken linksOK
    0 internal links point at 0 broken URLs.
  • Links to other sites2 issues
    2 destinations answered with an error, 4 could not be determined (timeouts, rate limits or refusals), of 27 destinations checked.
    −0.8 points
  • Redirects1 noted
    1 redirecting URL, 0 of them chained.
  • Non-200 responses10 noted
    10 URLs did not return a 2xx response. 0 of them are pages, 0 with an error status; the rest are assets or redirects.
  • Rate limitedOK
    The site did not rate limit the crawler.
  • IndexabilityOK
    0 of 46 indexable pages have indexability warnings.
  • Image alt textOK
    0 of 601 image references have no alt attribute. 228 use an empty alt (decorative), which is fine.
  • Heavy assetsOK
    0 assets larger than 500 KB among 472 fetched assets.
  • Orphan pagesOK
    0 pages have no internal links pointing at them.
  • Sitemap coverageOK
    3 sitemaps listing 46 URLs: 0 crawled pages missing, 0 listed URLs broken or redirecting, 0 reachable only via the sitemap.
  • Internal link countsOK
    Internal link counts for 46 pages.
  • Thin contentOK
    0 of 46 pages have fewer than 200 words.
  • Duplicate contentOK
    0 groups of pages with identical HTML.

Where this scan sits among all scanned sites

1336 sites, median 80%, average 79%

www.heritagedentalcentre.ca scores 97%, higher than 96% of the 1336 scanned sites. See the full ranking.

037730%: 0 sites1%: 0 sites2%: 0 sites3%: 0 sites4%: 0 sites5%: 0 sites6%: 0 sites7%: 0 sites8%: 0 sites9%: 0 sites10%: 0 sites11%: 0 sites12%: 0 sites13%: 0 sites14%: 0 sites15%: 0 sites16%: 0 sites17%: 0 sites18%: 0 sites19%: 0 sites20%: 0 sites21%: 1 site22%: 0 sites23%: 0 sites24%: 0 sites25%: 0 sites26%: 0 sites27%: 0 sites28%: 1 site29%: 0 sites30%: 0 sites31%: 0 sites32%: 0 sites33%: 0 sites34%: 0 sites35%: 1 site36%: 1 site37%: 1 site38%: 1 site39%: 0 sites40%: 1 site41%: 0 sites42%: 0 sites43%: 0 sites44%: 0 sites45%: 2 sites46%: 2 sites47%: 2 sites48%: 2 sites49%: 2 sites50%: 3 sites51%: 5 sites52%: 6 sites53%: 5 sites54%: 5 sites55%: 4 sites56%: 3 sites57%: 5 sites58%: 9 sites59%: 5 sites60%: 8 sites61%: 10 sites62%: 14 sites63%: 11 sites64%: 8 sites65%: 14 sites66%: 14 sites67%: 26 sites68%: 24 sites69%: 14 sites70%: 32 sites71%: 29 sites72%: 37 sites73%: 33 sites74%: 41 sites75%: 37 sites76%: 49 sites77%: 45 sites78%: 57 sites79%: 48 sites80%: 66 sites81%: 73 sites82%: 67 sites83%: 61 sites84%: 61 sites85%: 45 sites86%: 49 sites87%: 48 sites88%: 49 sites89%: 36 sites90%: 28 sites91%: 31 sites92%: 18 sites93%: 8 sites94%: 10 sites95%: 5 sites96%: 7 sites97%: 3 sites98%: 1 site99%: 2 sites100%: 50 sites97% here100%90%80%70%60%50%40%30%20%10%0%

Green 90% and up (Excellent), lime 75 to 89 (Good), amber 50 to 74 (Needs work), red below 50 (Poor).

Internal link map

Loading the link map...

Start page (centre)OKRedirectErrorOrphanLinked from most pagesOne inbound link or noneRings = clicks from the start page. Size = inbound links. Drag to pan, scroll to zoom, click a page to see only its links.

Fix plan

Written by gpt-4o-mini from the scan findings

The site is performing well with a score of 97/100. However, there are issues with redirects, title tags, and meta descriptions that need addressing for better SEO. Here are prioritized actions to improve your site's SEO performance.

  1. 1

    Fix Redirects

    Why: One URL is redirecting unnecessarily, which can hinder SEO & user experience.

    How: Update or remove the redirect for the sitemap URL. Ensure the sitemap directly points to the correct location.

    Checks: redirects

  2. 2

    Correct Title Tag Lengths

    Why: 5 title tags are too long, which can lead to truncation in search results.

    How: Revise titles to under 60 characters. Use keywords efficiently and convey clear page content.

    Checks: titles

  3. 3

    Add Missing Meta Descriptions

    Why: 13 pages are missing or need improvements in meta descriptions, which can affect CTR.

    How: Create concise, keyword-rich meta descriptions up to 160 characters for affected pages.

    Checks: meta-descriptions

Generated automatically; verify each change against your own site before relying on it.

Security review

Written by gpt-4o-mini from 16 checks over the crawl

The website www.heritagedentalcentre.ca has several security vulnerabilities, primarily due to missing security headers and outdated JavaScript libraries. Implementing these recommended changes will improve user security and reduce potential exploitation risks.

  • 0 high
  • 4 medium
  • 2 low
  • 2 info
  1. 1

    Missing HTTP Strict Transport Security (HSTS)Medium

    Why it matters: Without HSTS, users can be intercepted when accessing the site without HTTPS.

    Fix: Add the header: `Strict-Transport-Security: max-age=31536000; includeSubDomains; preload`

    Evidence: HTTP Strict Transport Security

  2. 2

    Missing Content Security Policy (CSP)Medium

    Why it matters: Lack of CSP allows scripts and resources to be loaded from any source, increasing XSS risk.

    Fix: Add the header: `Content-Security-Policy: default-src 'self';`

    Evidence: Content Security Policy

  3. 3

    Missing Clickjacking Protection (X-Frame-Options)Medium

    Why it matters: Absence of this header allows the site to be embedded in iframes, which could facilitate clickjacking attacks.

    Fix: Add the header: `X-Frame-Options: DENY`

    Evidence: Clickjacking protection

  4. 4

    Outdated and Vulnerable JavaScript LibrariesMedium

    Why it matters: Using vulnerable libraries could expose the site to known security exploits.

    Fix: Update jQuery to at least 3.5.0 and Bootstrap to at least 3.4.1.

    Evidence: Vulnerable JavaScript libraries

  5. 5

    No Referrer Policy SetLow

    Why it matters: Without this policy, full referrer URLs may expose sensitive data when navigating away from the site.

    Fix: Add the header: `Referrer-Policy: no-referrer`

    Evidence: Referrer policy

  6. 6

    Third-party Scripts Without Subresource Integrity (SRI)Low

    Why it matters: Without SRI, a compromise of third-party scripts could lead to unauthorized code execution.

    Fix: Consider using SRI for third-party scripts or implement a strong CSP.

    Evidence: Third-party scripts

  7. 7

    Missing Permissions PolicyInfo

    Why it matters: Without this policy, features like camera or geolocation may be unnecessarily exposed.

    Fix: Add the header: `Permissions-Policy: geolocation=(self)`

    Evidence: Permissions policy

  8. 8

    Sensitive Paths Listed in robots.txtInfo

    Why it matters: Public listing of paths could reveal sensitive areas of the site to potential attackers.

    Fix: Ensure sensitive paths in robots.txt are protected with access controls.

    Evidence: Sensitive paths in robots.txt

What the checks found

  • FoundHTTP Strict Transport SecurityMedium

    No HTML page sends strict-transport-security. Without it a visitor who types the address without https:// can be intercepted on the first request.

    • https://www.heritagedentalcentre.ca/ → no strict-transport-security
    • https://www.heritagedentalcentre.ca/why-choose-us/ → no strict-transport-security
    • https://www.heritagedentalcentre.ca/why-choose-us/about/ → no strict-transport-security
    • https://www.heritagedentalcentre.ca/why-choose-us/health-and-safety/ → no strict-transport-security
    • https://www.heritagedentalcentre.ca/why-choose-us/insurance-finances/ → no strict-transport-security
    • https://www.heritagedentalcentre.ca/why-choose-us/policies/ → no strict-transport-security
    • https://www.heritagedentalcentre.ca/why-choose-us/cdbp/ → no strict-transport-security
    • https://www.heritagedentalcentre.ca/services/ → no strict-transport-security
    • https://www.heritagedentalcentre.ca/services/se-calgary-general-dentistry/ → no strict-transport-security
    • https://www.heritagedentalcentre.ca/services/se-calgary-emergency-dentistry/ → no strict-transport-security
    • https://www.heritagedentalcentre.ca/services/se-calgary-emergency-dentistry/root-canal-therapy/ → no strict-transport-security
    • https://www.heritagedentalcentre.ca/services/se-calgary-emergency-dentistry/wisdom-teeth-extractions/ → no strict-transport-security
  • FoundContent Security PolicyMedium

    None of the 46 HTML pages send a Content-Security-Policy header or meta tag, so the browser has no restriction on where scripts, styles and frames may load from.

    • https://www.heritagedentalcentre.ca/ → no content-security-policy
    • https://www.heritagedentalcentre.ca/why-choose-us/ → no content-security-policy
    • https://www.heritagedentalcentre.ca/why-choose-us/about/ → no content-security-policy
    • https://www.heritagedentalcentre.ca/why-choose-us/health-and-safety/ → no content-security-policy
    • https://www.heritagedentalcentre.ca/why-choose-us/insurance-finances/ → no content-security-policy
    • https://www.heritagedentalcentre.ca/why-choose-us/policies/ → no content-security-policy
    • https://www.heritagedentalcentre.ca/why-choose-us/cdbp/ → no content-security-policy
    • https://www.heritagedentalcentre.ca/services/ → no content-security-policy
    • https://www.heritagedentalcentre.ca/services/se-calgary-general-dentistry/ → no content-security-policy
    • https://www.heritagedentalcentre.ca/services/se-calgary-emergency-dentistry/ → no content-security-policy
    • https://www.heritagedentalcentre.ca/services/se-calgary-emergency-dentistry/root-canal-therapy/ → no content-security-policy
    • https://www.heritagedentalcentre.ca/services/se-calgary-emergency-dentistry/wisdom-teeth-extractions/ → no content-security-policy
  • FoundClickjacking protectionMedium

    No HTML page sends x-frame-options. Without X-Frame-Options (or a CSP frame-ancestors directive) the pages can be embedded in a frame on another site and overlaid with invisible controls.

    • https://www.heritagedentalcentre.ca/ → no x-frame-options
    • https://www.heritagedentalcentre.ca/why-choose-us/ → no x-frame-options
    • https://www.heritagedentalcentre.ca/why-choose-us/about/ → no x-frame-options
    • https://www.heritagedentalcentre.ca/why-choose-us/health-and-safety/ → no x-frame-options
    • https://www.heritagedentalcentre.ca/why-choose-us/insurance-finances/ → no x-frame-options
    • https://www.heritagedentalcentre.ca/why-choose-us/policies/ → no x-frame-options
    • https://www.heritagedentalcentre.ca/why-choose-us/cdbp/ → no x-frame-options
    • https://www.heritagedentalcentre.ca/services/ → no x-frame-options
    • https://www.heritagedentalcentre.ca/services/se-calgary-general-dentistry/ → no x-frame-options
    • https://www.heritagedentalcentre.ca/services/se-calgary-emergency-dentistry/ → no x-frame-options
    • https://www.heritagedentalcentre.ca/services/se-calgary-emergency-dentistry/root-canal-therapy/ → no x-frame-options
    • https://www.heritagedentalcentre.ca/services/se-calgary-emergency-dentistry/wisdom-teeth-extractions/ → no x-frame-options
  • FoundReferrer policyLow

    No HTML page sends referrer-policy. Without a Referrer-Policy the full page address, including any query string, is sent to every site a visitor clicks through to.

    • https://www.heritagedentalcentre.ca/ → no referrer-policy
    • https://www.heritagedentalcentre.ca/why-choose-us/ → no referrer-policy
    • https://www.heritagedentalcentre.ca/why-choose-us/about/ → no referrer-policy
    • https://www.heritagedentalcentre.ca/why-choose-us/health-and-safety/ → no referrer-policy
    • https://www.heritagedentalcentre.ca/why-choose-us/insurance-finances/ → no referrer-policy
    • https://www.heritagedentalcentre.ca/why-choose-us/policies/ → no referrer-policy
    • https://www.heritagedentalcentre.ca/why-choose-us/cdbp/ → no referrer-policy
    • https://www.heritagedentalcentre.ca/services/ → no referrer-policy
    • https://www.heritagedentalcentre.ca/services/se-calgary-general-dentistry/ → no referrer-policy
    • https://www.heritagedentalcentre.ca/services/se-calgary-emergency-dentistry/ → no referrer-policy
    • https://www.heritagedentalcentre.ca/services/se-calgary-emergency-dentistry/root-canal-therapy/ → no referrer-policy
    • https://www.heritagedentalcentre.ca/services/se-calgary-emergency-dentistry/wisdom-teeth-extractions/ → no referrer-policy
  • FoundPermissions policyInfo

    No HTML page sends permissions-policy. A Permissions-Policy header turns off browser features the site does not use (camera, microphone, geolocation), limiting what an injected script could do.

    • https://www.heritagedentalcentre.ca/ → no permissions-policy
    • https://www.heritagedentalcentre.ca/why-choose-us/ → no permissions-policy
    • https://www.heritagedentalcentre.ca/why-choose-us/about/ → no permissions-policy
    • https://www.heritagedentalcentre.ca/why-choose-us/health-and-safety/ → no permissions-policy
    • https://www.heritagedentalcentre.ca/why-choose-us/insurance-finances/ → no permissions-policy
    • https://www.heritagedentalcentre.ca/why-choose-us/policies/ → no permissions-policy
    • https://www.heritagedentalcentre.ca/why-choose-us/cdbp/ → no permissions-policy
    • https://www.heritagedentalcentre.ca/services/ → no permissions-policy
    • https://www.heritagedentalcentre.ca/services/se-calgary-general-dentistry/ → no permissions-policy
    • https://www.heritagedentalcentre.ca/services/se-calgary-emergency-dentistry/ → no permissions-policy
    • https://www.heritagedentalcentre.ca/services/se-calgary-emergency-dentistry/root-canal-therapy/ → no permissions-policy
    • https://www.heritagedentalcentre.ca/services/se-calgary-emergency-dentistry/wisdom-teeth-extractions/ → no permissions-policy
  • FoundVulnerable JavaScript librariesMedium

    3 libraries with published vulnerabilities: jQuery 3.2.1, jQuery 3.1.2, Bootstrap 3.3.7. Whether they are exploitable depends on how the site uses them, but each has a fixed release.

    • jQuery 3.2.1 in https://www.heritagedentalcentre.ca/wp-content/cache/min/1/ajax/libs/jquery/3.2…: CVE-2019-11358 (prototype pollution), CVE-2020-11022, CVE-2020-11023 (XSS via HTML passed to DOM methods); fixed in 3.5.0
    • jQuery 3.1.2 in https://www.heritagedentalcentre.ca/wp-content/plugins/gravityforms/js/placehol…: CVE-2019-11358 (prototype pollution), CVE-2020-11022, CVE-2020-11023 (XSS via HTML passed to DOM methods); fixed in 3.5.0
    • Bootstrap 3.3.7 in https://www.heritagedentalcentre.ca/wp-content/themes/cpm-theme-base2/assets/bo…: CVE-2016-10735, CVE-2018-14040, CVE-2018-14041, CVE-2018-14042, CVE-2019-8331 (XSS through data attributes in tooltip, popover, collapse and scrollspy); fixed in 3.4.1
  • NoteThird-party scripts

    Scripts run from 3 other domains without Subresource Integrity, so a compromise of any of them changes what runs on this site. (Tag managers and analytics rarely support SRI; a Content-Security-Policy that names these hosts is the usual control.)

    • www.optiopublishing.com (40 script tags)
    • maps.google.com (40 script tags)
    • www.google.com (40 script tags)
  • NoteSensitive paths in robots.txt

    robots.txt lists 1 path that look private. robots.txt is public and does not restrict access, so it doubles as a map for anyone probing the site; those paths need real access control.

    • Disallow: /cgi-bin
8 checks passed
  • OKHTTPS

    All 46 crawled pages were served over HTTPS.

  • OKMIME sniffing protection

    x-content-type-options is set on all 46 HTML pages.

  • OKSoftware version disclosure

    The Server header names a product without a version, and there is no X-Powered-By header.

  • OKCookie flags

    All 1 cookie carry Secure, HttpOnly and SameSite flags.

  • OKMixed content

    No HTTPS page loads a script, stylesheet, font or image over plain HTTP.

  • OKForms over HTTPS

    40 forms found, all on HTTPS pages posting to HTTPS addresses.

  • OKKeys and secrets in page code

    No API keys, tokens or private keys were found in the sampled HTML and scripts.

  • OKExposed files and listings

    None of the crawled URLs is a configuration file, backup, dump, repository folder or directory listing.

A passive review of what the crawl recorded: response headers, page and script contents and the URLs it found. It does not probe the site, test TLS settings or look for files that were not linked. Generated automatically; verify each finding against your own site before acting on it.

Sites scoring near www.heritagedentalcentre.ca

Their neighbours in the SEO rank table, which orders every scanned site by health score.

This report was produced by the DIY SEO Hub Site Spider crawling www.heritagedentalcentre.ca from its pages as published, the way a search engine does. It shows summary figures only.

Own www.heritagedentalcentre.ca?

  • Claim this site to manage the listing, hide it from the public lists, or keep it.
  • Want it gone instead? Ask through the support form or e-mail support@diyseohub.com, naming www.heritagedentalcentre.ca. Removal needs no account and no proof of purchase.
www.heritagedentalcentre.ca scan 2026-09-28-1637 | DIY SEO Hub