Scanned sites / www.marrmac.com / 2026-10-02-0921

www.marrmac.com scan from 10/2/2026, 9:21:39 AM

Scan 2026-10-02-0921

Scanned 10/2/2026, 9:21:39 AM, finished 10/2/2026, 10:27:42 AM. Found on page 1 of brave web search results

Site: https://www.marrmac.com/

Download SQLite databaseEvery page and asset from this scan, with the crawl events, in one file.

62/ 100Needs work

On October 2, 2026 the Site Spider crawled 87 pages and 258 assets of www.marrmac.com, starting from https://www.marrmac.com/. It scored 62 out of 100, a result that needs work. 13 of 16 checks found something to fix, led by meta descriptions (49), broken links (17), headings (49); 2 checks passed. Most of the points went to meta descriptions (−8), broken links (−6.9), headings (−6). 1 check found something the score does not count, listed as noted. The list below shows each check's result, the fix plan, when present, explains what to do first, and the security review at the end of the page covers headers, transport, libraries and exposed files.

Security review: Medium3 medium, 3 low and 1 info findings. See the security findings ↓

Pages crawled
87
Assets fetched
258
Status
Completed
Checks with issues
13 of 16
CoverageComplete crawl

345 of 345 discovered URLs were fetched. The crawl reached everything it found. HTML only: nothing here ran JavaScript. 44 link destinations on other sites were checked.

  • Title tags16 issues
    16 of 49 pages have title issues.
    −3.3 points
  • Meta descriptions49 issues
    49 of 49 pages have meta description issues.
    −8 points
  • Headings49 issues
    49 of 49 pages have heading issues.
    −6 points
  • Broken links17 issues
    641 internal links point at 17 broken URLs.
    −6.9 points
  • Links to other sites1 issue
    1 destination answered with an error, 7 could not be determined (timeouts, rate limits or refusals), of 44 destinations checked.
    −0.4 points
  • Redirects22 issues
    22 redirecting URLs, 1 of them chained.
    −1.8 points
  • Non-200 responses17 issues
    39 URLs did not return a 2xx response. 38 of them are pages, 17 with an error status; the rest are assets or redirects.
    −3.5 points
  • Rate limitedOK
    The site did not rate limit the crawler.
  • Indexability1 issue
    1 of 49 indexable pages have indexability warnings.
    −0.2 points
  • Image alt text14 issues
    14 of 547 image references have no alt attribute. 527 use an empty alt (decorative), which is fine.
    −0.2 points
  • Heavy assets6 issues
    6 assets larger than 500 KB among 258 fetched assets. 12 documents over that size are listed but not counted: downloads are not page weight.
    −3.6 points
  • Orphan pages9 issues
    9 pages have no internal links pointing at them.
    −0.7 points
  • Sitemap coverage12 issues
    5 sitemaps listing 51 URLs: 1 crawled page missing, 3 listed URLs broken or redirecting, 8 reachable only via the sitemap.
    −1.5 points
  • Internal link countsOK
    Internal link counts for 49 pages.
  • Thin contentOK
    0 of 49 pages have fewer than 200 words.
  • Duplicate content17 issues
    2 groups of pages with identical HTML.
    −2.8 points

Where this scan sits among all scanned sites

1746 sites, median 80%, average 79%

www.marrmac.com scores 62%, higher than 6% of the 1746 scanned sites. See the full ranking.

0511020%: 0 sites1%: 0 sites2%: 0 sites3%: 0 sites4%: 0 sites5%: 0 sites6%: 0 sites7%: 0 sites8%: 0 sites9%: 0 sites10%: 0 sites11%: 0 sites12%: 0 sites13%: 0 sites14%: 0 sites15%: 0 sites16%: 0 sites17%: 0 sites18%: 0 sites19%: 0 sites20%: 0 sites21%: 1 site22%: 0 sites23%: 0 sites24%: 0 sites25%: 0 sites26%: 0 sites27%: 0 sites28%: 1 site29%: 0 sites30%: 0 sites31%: 0 sites32%: 0 sites33%: 0 sites34%: 0 sites35%: 2 sites36%: 1 site37%: 2 sites38%: 2 sites39%: 1 site40%: 2 sites41%: 1 site42%: 0 sites43%: 1 site44%: 0 sites45%: 3 sites46%: 2 sites47%: 3 sites48%: 2 sites49%: 6 sites50%: 4 sites51%: 5 sites52%: 7 sites53%: 6 sites54%: 7 sites55%: 4 sites56%: 6 sites57%: 6 sites58%: 11 sites59%: 6 sites60%: 9 sites61%: 11 sites62%: 15 sites63%: 16 sites64%: 12 sites65%: 20 sites66%: 19 sites67%: 33 sites68%: 27 sites69%: 25 sites70%: 39 sites71%: 37 sites72%: 49 sites73%: 49 sites74%: 48 sites75%: 55 sites76%: 71 sites77%: 61 sites78%: 82 sites79%: 60 sites80%: 85 sites81%: 102 sites82%: 82 sites83%: 81 sites84%: 76 sites85%: 59 sites86%: 64 sites87%: 55 sites88%: 60 sites89%: 53 sites90%: 32 sites91%: 35 sites92%: 24 sites93%: 14 sites94%: 12 sites95%: 9 sites96%: 7 sites97%: 8 sites98%: 2 sites99%: 2 sites100%: 54 sites62% here100%90%80%70%60%50%40%30%20%10%0%

Green 90% and up (Excellent), lime 75 to 89 (Good), amber 50 to 74 (Needs work), red below 50 (Poor).

Internal link map

Loading the link map...

Start page (centre)OKRedirectErrorOrphanLinked from most pagesOne inbound link or noneRings = clicks from the start page. Size = inbound links. Drag to pan, scroll to zoom, click a page to see only its links.

Fix plan

Written by gpt-4o-mini from the scan findings

Your website has several areas needing improvement, particularly with broken links and missing meta descriptions. Addressing these will enhance user experience and SEO performance significantly.

  1. 1

    Fix Broken Links

    Why: 641 internal links point to 17 broken URLs, degrading user experience and SEO.

    How: Identify the broken links and update or remove them as needed. Redirecting broken URLs can also be considered.

    Checks: broken-links

  2. 2

    Add Meta Descriptions

    Why: All 49 pages lack meta descriptions, which affects visibility in search results.

    How: Create engaging and relevant meta descriptions for each page, keeping them within 150-160 characters.

    Checks: meta-descriptions

  3. 3

    Resolve Redirects

    Why: 22 redirecting URLs can confuse users and search engines, leading to a poor site structure.

    How: Eliminate chained redirects and ensure URLs redirect directly to their final destination.

    Checks: redirects

  4. 4

    Remove Duplicate Content

    Why: Multiple pages with identical HTML can dilute your SEO efforts.

    How: Identify duplicates and consolidate them into a single authoritative page.

    Checks: duplicate-content

  5. 5

    Simplify Headings

    Why: All pages have multiple H1s; this confuses search engines on primary page topics.

    How: Change the structure to keep only one H1 per page and optimize subsequent headings.

    Checks: headings

  6. 6

    Improve Sitemap Coverage

    Why: Some pages have no internal links and only exist in the sitemap, hindering SEO.

    How: Ensure all important pages are linked throughout the site, and fix any sitemap errors.

    Checks: sitemap-coverage

Generated automatically; verify each change against your own site before relying on it.

Security review

Written by gpt-4o-mini from 16 checks over the crawl

The website lacks important security headers, putting visitors at risk of security vulnerabilities. Implementing these headers will greatly enhance protection against various threats, including data interception and clickjacking. Immediate action is recommended.

  • 0 high
  • 3 medium
  • 3 low
  • 1 info
  1. 1

    Missing HTTP Strict Transport Security (HSTS)Medium

    Why it matters: Without HSTS, visitors using HTTP are at risk of interception.

    Fix: Add the header: Strict-Transport-Security: max-age=31536000; includeSubDomains; preload.

    Evidence: HTTP Strict Transport Security

  2. 2

    Missing Content Security Policy (CSP)Medium

    Why it matters: Absence of CSP allows unrestricted loading of content, increasing XSS risk.

    Fix: Add the header: Content-Security-Policy: default-src 'self'; script-src 'self';

    Evidence: Content Security Policy

  3. 3

    Missing X-Frame-Options HeaderMedium

    Why it matters: Without this, the site is vulnerable to clickjacking attacks.

    Fix: Add the header: X-Frame-Options: DENY.

    Evidence: Clickjacking protection

  4. 4

    Missing X-Content-Type-Options HeaderLow

    Why it matters: Lack of this header can lead to MIME type confusion and script execution.

    Fix: Add the header: X-Content-Type-Options: nosniff.

    Evidence: MIME sniffing protection

  5. 5

    Missing Referrer-Policy HeaderLow

    Why it matters: Without it, sensitive URLs are exposed to third-party sites.

    Fix: Add the header: Referrer-Policy: no-referrer.

    Evidence: Referrer policy

  6. 6

    Third-Party Scripts Without Subresource IntegrityLow

    Why it matters: Potential compromise of third-party scripts can affect the site.

    Fix: Implement a Content-Security-Policy that covers third-party scripts or use Subresource Integrity.

    Evidence: Third-party scripts

  7. 7

    Missing Permissions-Policy HeaderInfo

    Why it matters: Absence may allow scripts to access unnecessary browser features.

    Fix: Add the header: Permissions-Policy: geolocation=(none).

    Evidence: Permissions policy

What the checks found

  • FoundHTTP Strict Transport SecurityMedium

    No HTML page sends strict-transport-security. Without it a visitor who types the address without https:// can be intercepted on the first request.

    • https://www.marrmac.com/ → no strict-transport-security
    • https://www.marrmac.com/about/ → no strict-transport-security
    • https://www.marrmac.com/testimonials/ → no strict-transport-security
    • https://www.marrmac.com/programs/summer-camps/ → no strict-transport-security
    • https://www.marrmac.com/programs/summer-drop-in-classes/ → no strict-transport-security
    • https://www.marrmac.com/dress-code/ → no strict-transport-security
    • https://www.marrmac.com/parent-student-handbooks/ → no strict-transport-security
    • https://www.marrmac.com/year-end-show/ → no strict-transport-security
    • https://www.marrmac.com/instructors/ → no strict-transport-security
    • https://www.marrmac.com/instructors/deane-marr/ → no strict-transport-security
    • https://www.marrmac.com/instructors/cathy-mcfarlane/ → no strict-transport-security
    • https://www.marrmac.com/instructors/madelaine-lussier/ → no strict-transport-security
  • FoundContent Security PolicyMedium

    None of the 49 HTML pages send a Content-Security-Policy header or meta tag, so the browser has no restriction on where scripts, styles and frames may load from.

    • https://www.marrmac.com/ → no content-security-policy
    • https://www.marrmac.com/about/ → no content-security-policy
    • https://www.marrmac.com/testimonials/ → no content-security-policy
    • https://www.marrmac.com/programs/summer-camps/ → no content-security-policy
    • https://www.marrmac.com/programs/summer-drop-in-classes/ → no content-security-policy
    • https://www.marrmac.com/dress-code/ → no content-security-policy
    • https://www.marrmac.com/parent-student-handbooks/ → no content-security-policy
    • https://www.marrmac.com/year-end-show/ → no content-security-policy
    • https://www.marrmac.com/instructors/ → no content-security-policy
    • https://www.marrmac.com/instructors/deane-marr/ → no content-security-policy
    • https://www.marrmac.com/instructors/cathy-mcfarlane/ → no content-security-policy
    • https://www.marrmac.com/instructors/madelaine-lussier/ → no content-security-policy
  • FoundClickjacking protectionMedium

    No HTML page sends x-frame-options. Without X-Frame-Options (or a CSP frame-ancestors directive) the pages can be embedded in a frame on another site and overlaid with invisible controls.

    • https://www.marrmac.com/ → no x-frame-options
    • https://www.marrmac.com/about/ → no x-frame-options
    • https://www.marrmac.com/testimonials/ → no x-frame-options
    • https://www.marrmac.com/programs/summer-camps/ → no x-frame-options
    • https://www.marrmac.com/programs/summer-drop-in-classes/ → no x-frame-options
    • https://www.marrmac.com/dress-code/ → no x-frame-options
    • https://www.marrmac.com/parent-student-handbooks/ → no x-frame-options
    • https://www.marrmac.com/year-end-show/ → no x-frame-options
    • https://www.marrmac.com/instructors/ → no x-frame-options
    • https://www.marrmac.com/instructors/deane-marr/ → no x-frame-options
    • https://www.marrmac.com/instructors/cathy-mcfarlane/ → no x-frame-options
    • https://www.marrmac.com/instructors/madelaine-lussier/ → no x-frame-options
  • FoundMIME sniffing protectionLow

    No HTML page sends x-content-type-options. Without X-Content-Type-Options: nosniff a browser may run a file as a script because of its contents rather than its declared type.

    • https://www.marrmac.com/ → no x-content-type-options
    • https://www.marrmac.com/about/ → no x-content-type-options
    • https://www.marrmac.com/testimonials/ → no x-content-type-options
    • https://www.marrmac.com/programs/summer-camps/ → no x-content-type-options
    • https://www.marrmac.com/programs/summer-drop-in-classes/ → no x-content-type-options
    • https://www.marrmac.com/dress-code/ → no x-content-type-options
    • https://www.marrmac.com/parent-student-handbooks/ → no x-content-type-options
    • https://www.marrmac.com/year-end-show/ → no x-content-type-options
    • https://www.marrmac.com/instructors/ → no x-content-type-options
    • https://www.marrmac.com/instructors/deane-marr/ → no x-content-type-options
    • https://www.marrmac.com/instructors/cathy-mcfarlane/ → no x-content-type-options
    • https://www.marrmac.com/instructors/madelaine-lussier/ → no x-content-type-options
  • FoundReferrer policyLow

    No HTML page sends referrer-policy. Without a Referrer-Policy the full page address, including any query string, is sent to every site a visitor clicks through to.

    • https://www.marrmac.com/ → no referrer-policy
    • https://www.marrmac.com/about/ → no referrer-policy
    • https://www.marrmac.com/testimonials/ → no referrer-policy
    • https://www.marrmac.com/programs/summer-camps/ → no referrer-policy
    • https://www.marrmac.com/programs/summer-drop-in-classes/ → no referrer-policy
    • https://www.marrmac.com/dress-code/ → no referrer-policy
    • https://www.marrmac.com/parent-student-handbooks/ → no referrer-policy
    • https://www.marrmac.com/year-end-show/ → no referrer-policy
    • https://www.marrmac.com/instructors/ → no referrer-policy
    • https://www.marrmac.com/instructors/deane-marr/ → no referrer-policy
    • https://www.marrmac.com/instructors/cathy-mcfarlane/ → no referrer-policy
    • https://www.marrmac.com/instructors/madelaine-lussier/ → no referrer-policy
  • FoundPermissions policyInfo

    No HTML page sends permissions-policy. A Permissions-Policy header turns off browser features the site does not use (camera, microphone, geolocation), limiting what an injected script could do.

    • https://www.marrmac.com/ → no permissions-policy
    • https://www.marrmac.com/about/ → no permissions-policy
    • https://www.marrmac.com/testimonials/ → no permissions-policy
    • https://www.marrmac.com/programs/summer-camps/ → no permissions-policy
    • https://www.marrmac.com/programs/summer-drop-in-classes/ → no permissions-policy
    • https://www.marrmac.com/dress-code/ → no permissions-policy
    • https://www.marrmac.com/parent-student-handbooks/ → no permissions-policy
    • https://www.marrmac.com/year-end-show/ → no permissions-policy
    • https://www.marrmac.com/instructors/ → no permissions-policy
    • https://www.marrmac.com/instructors/deane-marr/ → no permissions-policy
    • https://www.marrmac.com/instructors/cathy-mcfarlane/ → no permissions-policy
    • https://www.marrmac.com/instructors/madelaine-lussier/ → no permissions-policy
  • NoteThird-party scripts

    Scripts run from 1 other domain without Subresource Integrity, so a compromise of any of them changes what runs on this site. (Tag managers and analytics rarely support SRI; a Content-Security-Policy that names these hosts is the usual control.)

    • www.googletagmanager.com (40 script tags)
7 checks passed, 2 not applicable
  • OKHTTPS

    All 49 crawled pages were served over HTTPS.

  • OKSoftware version disclosure

    The Server header names a product without a version, and there is no X-Powered-By header.

  • OKMixed content

    No HTTPS page loads a script, stylesheet, font or image over plain HTTP.

  • OKVulnerable JavaScript libraries

    1 library version recognised, none with known vulnerabilities.

  • OKKeys and secrets in page code

    No API keys, tokens or private keys were found in the sampled HTML and scripts.

  • OKExposed files and listings

    None of the crawled URLs is a configuration file, backup, dump, repository folder or directory listing.

  • OKSensitive paths in robots.txt

    robots.txt does not point at admin, backup or private paths.

  • Not applicableCookie flags

    The crawl set no cookies, so there are no cookie flags to check.

  • Not applicableForms over HTTPS

    No forms were found on the sampled pages.

A passive review of what the crawl recorded: response headers, page and script contents and the URLs it found. It does not probe the site, test TLS settings or look for files that were not linked. Generated automatically; verify each finding against your own site before acting on it.

Sites scoring near www.marrmac.com

Their neighbours in the SEO rank table, which orders every scanned site by health score.

This report was produced by the DIY SEO Hub Site Spider crawling www.marrmac.com from its pages as published, the way a search engine does. It shows summary figures only.

Own www.marrmac.com?

www.marrmac.com scan 2026-10-02-0921 | DIY SEO Hub