Scanned sites / www.pitblado.com / 2026-10-03-1904

www.pitblado.com scan from 10/3/2026, 7:04:02 PM

Scan 2026-10-03-1904

Scanned 10/3/2026, 7:04:02 PM, finished 10/4/2026, 5:30:59 AM. Found on page 4 of brave web search results

Site: https://www.pitblado.com/

Download SQLite databaseEvery page and asset from this scan, with the crawl events, in one file.

56/ 100Needs work

On October 3, 2026 the Site Spider crawled 1628 pages and 1013 assets of www.pitblado.com, starting from https://www.pitblado.com/. It scored 56 out of 100, a result that needs work. 12 of 16 checks found something to fix, led by non-200 responses (624), meta descriptions (265), heavy assets (33); 3 checks passed. Most of the points went to non-200 responses (−10), meta descriptions (−7.4), heavy assets (−6). 1 check found something the score does not count, listed as noted. The list below shows each check's result, the fix plan, when present, explains what to do first, and the security review at the end of the page covers headers, transport, libraries and exposed files.

Security review: Medium2 medium, 3 low and 1 info findings. See the security findings ↓

Pages crawled
1628
Assets fetched
1013
Status
Completed
Checks with issues
12 of 16
CoverageJob finished, partial coverage

2,641 of 2,643 discovered URLs were fetched, 1 blocked by robots.txt, 215 left out by the 5,000-page and 1,000-asset budget. The job finished, but the crawl did not reach everything it found. HTML only: nothing here ran JavaScript. 300 link destinations on other sites were checked, 297 left unchecked.

  • Title tags161 issues
    161 of 276 pages have title issues. 12 noindex or canonicalized pages excluded.
    −5.6 points
  • Meta descriptions265 issues
    265 of 276 pages have meta description issues. 12 noindex or canonicalized pages excluded.
    −7.4 points
  • Headings40 issues
    40 of 276 pages have heading issues. 12 noindex or canonicalized pages excluded.
    −0.8 points
  • Broken links8 issues
    511 internal links point at 8 broken URLs.
    −0.6 points
  • Links to other sites13 issues
    13 destinations answered with an error, 99 could not be determined (timeouts, rate limits or refusals), 297 were left unchecked by the per-scan cap, of 300 destinations checked.
    −1.8 points
  • Redirects716 issues
    745 redirecting URLs, 8 of them chained.
    −4 points
  • Non-200 responses624 issues
    1373 URLs did not return a 2xx response. 1340 of them are pages, 624 with an error status; the rest are assets or redirects.
    −10 points
  • Rate limitedOK
    The site did not rate limit the crawler.
  • Indexability35 issues
    35 of 287 indexable pages have indexability warnings. 1 page noindex by design.
    −1.2 points
  • Image alt textOK
    0 of 1504 image references have no alt attribute. 34 use an empty alt (decorative), which is fine.
  • Heavy assets33 issues
    33 assets larger than 500 KB among 1013 fetched assets. 17 documents over that size are listed but not counted: downloads are not page weight.
    −6 points
  • Orphan pages36 issues
    36 pages have no internal links pointing at them.
    −0.5 points
  • Sitemap coverage276 issues
    1 sitemap listing 0 URLs: 276 crawled pages missing, 0 listed URLs broken or redirecting, 0 reachable only via the sitemap.
    −5.8 points
  • Internal link countsOK
    Internal link counts for 288 pages.
  • Thin content1 issue
    1 of 276 pages have fewer than 200 words. 12 noindex or canonicalized pages excluded.
  • Duplicate contentOK
    0 groups of pages with identical HTML.

Where this scan sits among all scanned sites

2051 sites, median 80%, average 78%

www.pitblado.com scores 56%, higher than 4% of the 2051 scanned sites. See the full ranking.

0521040%: 0 sites1%: 0 sites2%: 0 sites3%: 0 sites4%: 0 sites5%: 0 sites6%: 0 sites7%: 0 sites8%: 0 sites9%: 0 sites10%: 0 sites11%: 0 sites12%: 0 sites13%: 0 sites14%: 0 sites15%: 0 sites16%: 0 sites17%: 0 sites18%: 0 sites19%: 0 sites20%: 0 sites21%: 1 site22%: 0 sites23%: 0 sites24%: 0 sites25%: 0 sites26%: 0 sites27%: 0 sites28%: 1 site29%: 0 sites30%: 0 sites31%: 0 sites32%: 0 sites33%: 0 sites34%: 0 sites35%: 2 sites36%: 1 site37%: 2 sites38%: 2 sites39%: 1 site40%: 2 sites41%: 3 sites42%: 0 sites43%: 1 site44%: 1 site45%: 4 sites46%: 4 sites47%: 3 sites48%: 2 sites49%: 6 sites50%: 4 sites51%: 3 sites52%: 9 sites53%: 6 sites54%: 8 sites55%: 6 sites56%: 6 sites57%: 7 sites58%: 14 sites59%: 6 sites60%: 10 sites61%: 14 sites62%: 16 sites63%: 19 sites64%: 16 sites65%: 28 sites66%: 24 sites67%: 39 sites68%: 34 sites69%: 24 sites70%: 46 sites71%: 48 sites72%: 64 sites73%: 57 sites74%: 57 sites75%: 73 sites76%: 83 sites77%: 76 sites78%: 96 sites79%: 78 sites80%: 104 sites81%: 102 sites82%: 99 sites83%: 91 sites84%: 87 sites85%: 73 sites86%: 76 sites87%: 65 sites88%: 68 sites89%: 53 sites90%: 39 sites91%: 39 sites92%: 33 sites93%: 17 sites94%: 14 sites95%: 10 sites96%: 7 sites97%: 8 sites98%: 1 site99%: 2 sites100%: 56 sites56% here100%90%80%70%60%50%40%30%20%10%0%

Green 90% and up (Excellent), lime 75 to 89 (Good), amber 50 to 74 (Needs work), red below 50 (Poor).

Internal link map

Loading the link map...

Start page (centre)OKRedirectErrorOrphanLinked from most pagesOne inbound link or noneRings = clicks from the start page. Size = inbound links. Drag to pan, scroll to zoom, click a page to see only its links.

Fix plan

Written by gpt-4o-mini from the scan findings

Your site has several critical issues affecting SEO performance, particularly broken links, redirects, and missing sitemap entries. Addressing these will improve user experience and search engine rankings.

  1. 1

    Fix Broken Links

    Why: Broken links negatively impact user experience and SEO ranking.

    How: Update or remove links pointing to broken URLs.

    Checks: broken-links

  2. 2

    Reduce Redirects

    Why: Too many redirects can slow down page load times and affect SEO.

    How: Minimize unnecessary redirects and avoid chained redirects.

    Checks: redirects

  3. 3

    Update Sitemap Coverage

    Why: A complete sitemap helps search engines index your site better.

    How: Ensure your sitemap includes all relevant pages and submits it to search engines.

    Checks: sitemap-coverage

  4. 4

    Address Title Tag Issues

    Why: Optimized titles improve click-through rates and search visibility.

    How: Revise titles to meet SEO best practices (60 characters max).

    Checks: titles

  5. 5

    Improve Meta Descriptions

    Why: Compelling meta descriptions can enhance search result visibility.

    How: Write impactful meta descriptions for pages lacking them.

    Checks: meta-descriptions

  6. 6

    Shrink Heavy Assets

    Why: Large assets can slow down loading times, impacting SEO.

    How: Compress images and consider removing or replacing oversized files.

    Checks: heavy-assets

Generated automatically; verify each change against your own site before relying on it.

Security review

Written by gpt-4o-mini from 16 checks over the crawl

The security review of www.pitblado.com highlights several key areas for improvement, particularly regarding response headers and obsolete JavaScript libraries. Addressing these findings can help enhance the site's resilience against potential attacks and protect user data effectively.

  • 0 high
  • 2 medium
  • 3 low
  • 1 info
  1. 1

    Missing Cookie FlagsMedium

    Why it matters: Lack of protective flags can lead to cookie theft via XSS attacks.

    Fix: Set 'HttpOnly', 'Secure', and 'SameSite=Strict' on cookie 'wp_woocommerce_session_711ed9949b1f495acfc87a515e4d95e0'.

    Evidence: Cookie flags

  2. 2

    Vulnerable JavaScript LibrariesMedium

    Why it matters: Using outdated libraries increases the risk of exploitation through known vulnerabilities.

    Fix: Upgrade jQuery to version 3.5.0 or higher for all identified instances.

    Evidence: Vulnerable JavaScript libraries

  3. 3

    Missing Referrer-PolicyLow

    Why it matters: Without this header, sensitive information may leak when users navigate to other sites.

    Fix: Add 'Referrer-Policy: no-referrer' to your HTTP response headers.

    Evidence: Referrer policy

  4. 4

    Server Banner Information DisclosureLow

    Why it matters: Revealing the server version can aid attackers in exploiting known vulnerabilities.

    Fix: Remove 'X-Powered-By' header and configure server to avoid revealing version information.

    Evidence: Software version disclosure

  5. 5

    Lack of Subresource Integrity for Third-Party ScriptsLow

    Why it matters: Scripts from third-party domains can be compromised, affecting your site's integrity.

    Fix: Implement Subresource Integrity (SRI) attributes for all third-party scripts or use a strong Content Security Policy (CSP).

    Evidence: Third-party scripts

  6. 6

    Missing Permissions PolicyInfo

    Why it matters: Absence of this policy may expose the site to unnecessary risks from features like microphone access.

    Fix: Add 'Permissions-Policy: (none)' to your HTTP response headers.

    Evidence: Permissions policy

What the checks found

  • FoundReferrer policyLow

    No HTML page sends referrer-policy. Without a Referrer-Policy the full page address, including any query string, is sent to every site a visitor clicks through to.

    • https://www.pitblado.com/ → no referrer-policy
    • https://www.pitblado.com/our-people → no referrer-policy
    • https://www.pitblado.com/firm → no referrer-policy
    • https://www.pitblado.com/firm/history → no referrer-policy
    • https://www.pitblado.com/firm/community → no referrer-policy
    • https://www.pitblado.com/services → no referrer-policy
    • https://www.pitblado.com/services?type=practice-areas → no referrer-policy
    • https://www.pitblado.com/services?type=industries → no referrer-policy
    • https://www.pitblado.com/careers → no referrer-policy
    • https://www.pitblado.com/careers/current-opportunities → no referrer-policy
    • https://www.pitblado.com/careers/articling-program → no referrer-policy
    • https://www.pitblado.com/careers/summer-student-program → no referrer-policy
  • FoundPermissions policyInfo

    No HTML page sends permissions-policy. A Permissions-Policy header turns off browser features the site does not use (camera, microphone, geolocation), limiting what an injected script could do.

    • https://www.pitblado.com/ → no permissions-policy
    • https://www.pitblado.com/our-people → no permissions-policy
    • https://www.pitblado.com/firm → no permissions-policy
    • https://www.pitblado.com/firm/history → no permissions-policy
    • https://www.pitblado.com/firm/community → no permissions-policy
    • https://www.pitblado.com/services → no permissions-policy
    • https://www.pitblado.com/services?type=practice-areas → no permissions-policy
    • https://www.pitblado.com/services?type=industries → no permissions-policy
    • https://www.pitblado.com/careers → no permissions-policy
    • https://www.pitblado.com/careers/current-opportunities → no permissions-policy
    • https://www.pitblado.com/careers/articling-program → no permissions-policy
    • https://www.pitblado.com/careers/summer-student-program → no permissions-policy
  • FoundSoftware version disclosureLow

    Responses reveal the exact server or framework version, which lets an attacker look up known vulnerabilities for it without guessing.

    • server: cloudflare (2641 responses)
    • x-powered-by: PHP/8.3.35 (1626 responses)
  • FoundCookie flagsMedium

    1 of 1 cookie are missing protective flags. Without HttpOnly a script can read the cookie; without Secure it travels over plain HTTP; without SameSite it is sent on cross-site requests.

    • wp_woocommerce_session_711ed9949b1f495acfc87a515e4d95e0 (set by https://www.pitblado.com/industry/arts-and-entertainment) lacks SameSite
  • FoundVulnerable JavaScript librariesMedium

    3 libraries with published vulnerabilities: jQuery 1.9.1, jQuery 2.1.1, jQuery 2.1.4. Whether they are exploitable depends on how the site uses them, but each has a fixed release.

    • jQuery 1.9.1 in https://pitblado.com/templates/en/scripts/jquery-1.9.1.js: CVE-2015-9251 (XSS via cross-domain AJAX), CVE-2019-11358 (prototype pollution), CVE-2020-11022, CVE-2020-11023 (XSS via HTML passed to DOM methods); fixed in 3.5.0
    • jQuery 2.1.1 in https://ajax.googleapis.com/ajax/libs/jquery/2.1.1/jquery.min.js: CVE-2015-9251 (XSS via cross-domain AJAX), CVE-2019-11358 (prototype pollution), CVE-2020-11022, CVE-2020-11023 (XSS via HTML passed to DOM methods); fixed in 3.5.0
    • jQuery 2.1.4 in https://ajax.googleapis.com/ajax/libs/jquery/2.1.4/jquery.js: CVE-2015-9251 (XSS via cross-domain AJAX), CVE-2019-11358 (prototype pollution), CVE-2020-11022, CVE-2020-11023 (XSS via HTML passed to DOM methods); fixed in 3.5.0
  • NoteThird-party scripts

    Scripts run from 5 other domains without Subresource Integrity, so a compromise of any of them changes what runs on this site. (Tag managers and analytics rarely support SRI; a Content-Security-Policy that names these hosts is the usual control.)

    • code.jquery.com (80 script tags)
    • cdnjs.cloudflare.com (80 script tags)
    • www.googletagmanager.com (80 script tags)
    • gateway.moneris.com (40 script tags)
    • www.google.com (40 script tags)
  • NoteSensitive paths in robots.txt

    robots.txt lists 1 path that look private. robots.txt is public and does not restrict access, so it doubles as a map for anyone probing the site; those paths need real access control.

    • Disallow: /wp-admin/
9 checks passed
  • OKHTTPS

    All 288 crawled pages were served over HTTPS.

  • OKHTTP Strict Transport Security

    strict-transport-security is set on all 288 HTML pages.

  • OKContent Security Policy

    A Content-Security-Policy is set on 2 of 288 pages.

  • OKClickjacking protection

    x-frame-options is set on all 288 HTML pages.

  • OKMIME sniffing protection

    x-content-type-options is set on all 288 HTML pages.

  • OKMixed content

    No HTTPS page loads a script, stylesheet, font or image over plain HTTP.

  • OKForms over HTTPS

    83 forms found, all on HTTPS pages posting to HTTPS addresses.

  • OKKeys and secrets in page code

    No API keys, tokens or private keys were found in the sampled HTML and scripts.

  • OKExposed files and listings

    None of the crawled URLs is a configuration file, backup, dump, repository folder or directory listing.

A passive review of what the crawl recorded: response headers, page and script contents and the URLs it found. It does not probe the site, test TLS settings or look for files that were not linked. Generated automatically; verify each finding against your own site before acting on it.

Sites scoring near www.pitblado.com

Their neighbours in the SEO rank table, which orders every scanned site by health score.

This report was produced by the DIY SEO Hub Site Spider crawling www.pitblado.com from its pages as published, the way a search engine does. It shows summary figures only.

Own www.pitblado.com?

  • Claim this site to manage the listing, hide it from the public lists, or keep it.
  • Want it gone instead? Ask through the support form or e-mail support@diyseohub.com, naming www.pitblado.com. Removal needs no account and no proof of purchase.
www.pitblado.com scan 2026-10-03-1904 | DIY SEO Hub