WebScore

Fixed — Some sites came back with a Best Practices score of 0 while every other module scored normally. Nothing was wrong with those sites — the audit behind that one module had failed to run, and a failed run was being written down as a score of zero. Because a site's overall score is the average of its five modules, that phantom zero quietly cost it around twenty points of overall health as well.

Improved — Best Practices is now measured through Google PageSpeed Insights, the same place the Performance score already comes from. It runs on Google's machines instead of ours, so it no longer competes with the scan's own browser for memory, and sites that turn away traffic from our server no longer turn away the audit.

Improved — When the audit genuinely can't run, the module now says so and records no score at all, instead of showing a 0 that reads like a verdict on your site. Scan again and it fills in.

v2.1.64 — released August 22, 2026

Fixed — Scanning from the homepage could answer "that host is not allowed" for perfectly ordinary sites — google.com among them. The safety check that keeps the scanner away from private, internal addresses was reading every IPv6 address as internal, so any site reachable over IPv6 was turned away before we even tried it. Sites without IPv6 were unaffected, which is why it looked arbitrary: github.com worked, google.com didn't.

Improved — The same check now understands addresses that carry an IPv4 one inside them, so it judges the address a name really points at rather than the way it happens to be written.

v2.1.63 — released August 17, 2026

New — The whole release history — all 71 versions back to 2.0.0 — now sits on the public changelog hub next to the feedback board and the status page. You can link someone to a single release, or subscribe by RSS and stop checking the site to find out what changed. This page stays the place releases are written; the hub mirrors it.

v2.1.62 — released August 17, 2026

New — Feedback now goes to a public board instead of a private email to us. You can see what other people have already asked for, add your voice to it rather than filing the same thing again, and follow what happens next. The button sits bottom-right on every page inside the app, and there's a Feedback link in the site footer. If you're signed in, your name and email come along, so all you write is the idea itself.

New — A "What's new" badge on the public site opens the release notes in place, and shows a dot when there's something you haven't read yet. It stays out of the app itself — inside your dashboard the only thing floating is the feedback button.

New — The site footer now carries live uptime for the last 30 days, and links through to a full status page. If a scan ever fails on you, you can check in one glance whether it's us.

v2.1.61 — released August 17, 2026

Fixed — Scans run from our servers could report "TLS 1.3 not enabled" for sites that have it — the check parsed openssl's console output, whose format differs between systems and often omitted the line we read for TLS 1.3 connections. The scan now asks the TLS connection itself, which gives the same correct answer everywhere. If your security report claimed TLS 1.3 was missing, re-scan — it wasn't.

v2.1.60 — released August 16, 2026

Fixed — The free SSL checker flagged sites on TLS 1.3 with "weak cipher strength: 0 bits" and docked their grade — the newest, strongest protocol scored worse than the old one. The cipher strength is now read correctly for TLS 1.3 suites, so a modern setup gets the clean A it deserves. The full scan and dashboard were unaffected.

v2.1.59 — released August 16, 2026

Improved — The scan now discovers custom DKIM selectors instead of only checking a fixed list: names derived from your own domain (a real user's key lived at yourdomain._domainkey), rotation years like s2025, and your email providers' conventional selectors on their sending subdomains — with a wildcard-DNS guard so guessing can never produce a false positive. Found keys also report their strength, so a 1024 to 2048-bit upgrade shows up as exactly that. Thanks to the bepublish.com report that drove this.

Improved — Your AI assistant can verify any selector directly: the MCP email check accepts a dkimSelector parameter and reports precisely whether that name answers.

Fixed — Websites added in the last few days could fail their first scan with "Page not found for this website" — adding a site stopped registering its home page behind the scenes. New sites are created correctly again, and any affected site repairs itself automatically on its next scan.

v2.1.58 — released August 15, 2026

Fixed — Best Practices said "no service worker" on sites that have a perfectly good one — the check only looked once, at one moment, and many sites register their worker a few seconds after load (or skip it for scanner visits entirely). The scan now also waits briefly, looks for registration code on the page, and checks the usual sw.js locations directly — and the result says how it found yours. Thanks to the user who reported it.

Fixed — Two more Best Practices checks got more accurate: off-screen image counting no longer depends on how far the scan had scrolled the page, and the preconnect suggestion no longer counts links the page never actually loads (like alternate-language links or RSS feeds) as third-party origins.

v2.1.57 — released August 15, 2026

New — The Results page is now a collection of playbooks — real websites' improvement stories written from their actual scan history. Each one shows a scoreboard of measured before/after values, a chart of the score across the site's lifetime with markers naming what moved it, and numbered plays: what the scan found, what was done, what the fix buys you, and what skipping it costs. Every number is a measured value; nothing is estimated.

New — Each playbook links to the featured site's public Trust page — the playbook is the history, the Trust page is where the site stands today.

Improved — The navigation grew up: Results now has its own place, Tools became Free Tools, and its menu opens as a full-width panel showing every free tool with what it does — no more guessing from a shortlist.

New — A new comparison on the blog: WebScore vs OptimizeMyWebsite.ai — what each audit actually checks, honestly, including where the other tool is the better pick.

v2.1.56 — released August 15, 2026

Fixed — Our own accessibility scan flagged the homepage for low-contrast text — the scan consent line, the crossed-out old price, the Lifetime button and the before/after checklists. All of them now meet WCAG AA contrast, verified with the same check that caught them.

v2.1.55 — released August 14, 2026

Improved — A tracked page's report now previews the same way the website modules do. Free accounts see the page's scores, Core Web Vitals and a few of the smallest issues; the detailed analysis — page content, indexability, canonical, structured data, links, agent readiness and performance opportunities — unlocks with the full report, from the same $3-per-report or Lifetime access.

Improved — Best Practices keeps its findings for the full report. The free view shows a few of the checks your site passes; what failed, how serious it is and how to fix it are part of the paid report, with the unlock prompt counting exactly what's waiting.

Fixed — Typing your own domain into the homepage scanner no longer answers "that host is not allowed" — a server-side safety check was mistaking the site's own address for a private one.

v2.1.54 — released August 14, 2026

Improved — The homepage now answers near-instantly for visitors who aren't signed in — it's served from a cache instead of being rebuilt for every visit, and refreshes itself every few minutes. Signed-in visitors still get their live, personalised page at the same address.

Improved — The sign-up and sign-in pages shed about a third of their code. A whole validation library was being downloaded to check that an email looks like an email — the same checks now run without it, so the form is ready sooner, especially on phones.

Improved — Marketing pages stopped downloading the homepage's code. A quirk in how components were bundled meant even the privacy policy carried the full landing page with it; each page now ships only what it actually shows.

New — Everyone appears in the "Loved by" row on the homepage now: accounts that signed up by email and have no profile photo get a friendly generated portrait instead of being left out.

v2.1.53 — released August 14, 2026

New — Run an AI Conversion audit on any page of your site, not just the home page. Type a path like /pricing (or paste the full address) in the audit wizard and the AI reviews that page. Subdomains count as their own website — add them separately — and a mistyped address is caught before it costs you an audit.

New — Recommendations are now a working checklist. Mark items done or dismiss them, watch the fixed count climb on the report and in your history, and send any recommendation to your Tasks list to plan it alongside your scan findings.

New — Your score comes with a breakdown across seven dimensions — visual design, layout, typography, navigation, calls to action, accessibility and consistency. Re-audit the same page and the report shows what moved since last time, overall and dimension by dimension. Audits of different pages are never compared with each other.

New — Audit mobile and desktop in one go: the wizard's new "Both" option queues the two audits back to back. It uses two audits from your monthly allowance.

New — The "Do this first" card — the one change the AI judges most valuable — now opens every report, not just shared ones. The screenshot and the action plan are linked both ways: click a recommendation to see where it sits on the page, and click a marker to jump to its full write-up.

Improved — Audits run on the same queue as scans now, so a crashed audit can no longer block the next one. Failed audits stay in your history with a plain explanation and a Try again button — and they don't count against your monthly allowance.

Improved — You can delete an audit from your history, and its report and screenshots are removed with it. Share links now use cryptographically random addresses.

Improved — The AI reviews the full page alongside close-ups of each section and returns its findings in a strict format, so analyses fail less often and recommendations anchor to the right spot on the screenshot more reliably.

Fixed — The raw HTML copy of an audited page is no longer stored or reachable on the web — only the screenshots the report actually shows.

v2.1.52 — released August 14, 2026

Improved — Enter your address on the home page and we check the site right there — that it's up, how fast it answered, whether it's on HTTPS — before asking you for an account. Signing up then starts your scan automatically, and the sign-in and sign-up pages show a banner confirming a scan is waiting for you.

Improved — The leaderboard's header and closing call-to-action use that same scan form. If you're already signed in, entering a URL simply starts the scan.

Improved — Smaller touches: the pricing section marks the Lifetime plan as best value, and the home page shows how many users WebScore is loved by, right next to their avatars.

v2.1.51 — released August 14, 2026

New — Every article now has a table of contents that follows you as you scroll — beside the text on a large screen, collapsible at the top on a phone. Headings are linkable, with an anchor that appears on hover.

Improved — Code in articles got proper treatment: blocks show their language and a copy button, inline code reads as tinted chips, and keyboard keys, footnotes, checklists and collapsible sections all render the way they should.

Improved — A cleanup pass across every article — emoji removed and formatting made consistent.

v2.1.50 — released August 14, 2026

Fixed — A tracked page's report listed broken links that weren't on the page — the link checker was also sampling pages from your sitemap, so a dead link in the homepage footer showed up on every page's report. Page scans now check only the page itself.

Fixed — Asking your AI assistant to scan a site twice within a few minutes returns the recent scan instead of running a new one — but it used to present that as fresh. The result is now clearly labelled as a reused recent scan, with a note explaining when it ran, so an unchanged score is never a mystery.

v2.1.49 — released August 14, 2026

New — A website can now track more than its home page. Add an article, your pricing page or a shop category, and each one gets its own report — Core Web Vitals, SEO, accessibility and best practices on a single screen, with its own scores and history. Switch between your pages from the menu next to your site's name.

New — Pick pages straight from your sitemap. Open "Track another page" and we read your sitemap live — including sites that split it into several files — so you can search your pages and add them without copying URLs. Pasting a URL still works, and it has to be a page on the same site.

Improved — A page report leaves out what doesn't apply to a page: Security and Domain Metrics describe your whole domain, so they stay on the website report. That also keeps page scans quick and leaves your domain data untouched.

Improved — Your public score is still your home page's. The leaderboard, trust page, embeddable badge and the public directory all report the home page, so tracking extra pages never changes how your site ranks.

Improved — Page scans queue behind everything else, so adding a batch of pages never delays someone else's scan — or your own home page.

v2.1.48 — released August 12, 2026

Fixed — The same scan could show two different scores on the same page — the Overall Health gauge said one number and the scan listed underneath it said another. Every place that shows a site's score now averages the same five modules: Performance, SEO, Accessibility, Security and Best Practices.

Fixed — Domain Metrics was being averaged into some of those scores. It rates your domain's authority rather than the state of your site, and it already has its own tile — so it no longer drags the overall number down.

Improved — Best Practices now counts everywhere it was previously left out: your site cards, the scan progress dialog (which also shows it running as a sixth step), and the before/after figures on the results page.

Improved — The scan dialog's final score is now the score the page shows once you close it.

Improved — The public leaderboard now ranks on those same five modules instead of four, so the score on a site's badge matches its leaderboard entry. Best Practices is a column on the leaderboard too, and rankings shift slightly as a result.

Improved — Only complete scans are ranked. If a scan didn't produce a score for all five modules, its average isn't measured the same way as everyone else's — so the site waits for a complete scan rather than being ranked on a partial one.

Improved — The leaderboard reads more cleanly: each row now shows the site, its Trust report button and its score, and hovering (or tapping) the score opens a breakdown of all five modules. The top three show that breakdown as bars beside their overall score. Nothing runs off the edge of a phone screen any more.

v2.1.47 — released August 12, 2026

Fixed — Sites with DNSSEC switched on were still being told it was missing when the DNS lookup behind the check timed out or was blocked. The check now says "not verified" when it couldn't get an answer, and that neither costs you points nor appears as an issue.

Improved — DNSSEC is confirmed two ways — the DS record at your registrar and the validation flag from public resolvers — so a signed domain is recognised even if one lookup comes back empty.

New — If your DNS provider signs your zone but the DS record was never added at the registrar, the report now says exactly that instead of simply "not enabled" — the signing is done, one step remains.

Fixed — Domains on suffixes like .co.uk or .com.au were graded on the registry's DNS rather than their own, which affected their DNSSEC result and their SPF, DKIM and DMARC lookups. They're now read from the right zone.

Fixed — The detailed report your AI assistant reads through the MCP server listed SPF, DKIM and DMARC as unknown even when the scan had found them. It now reports what the scan actually detected, including whether your SPF record is valid and what your DMARC policy is set to — and it states the DNSSEC result in words, so "we couldn't check" is never read back to you as "you don't have it".

Fixed — Asking your AI assistant to check email authentication on a www. address reported SPF and DMARC as missing, because it looked them up on the wrong name. It now reads them from your actual domain and says which one it checked.

Improved — That same email check now looks for DKIM across all 91 provider selectors the full scan uses, instead of 9 — so keys from Resend, Postmark, Brevo, Zoho and the rest are found rather than reported as absent.

v2.1.46 — released August 12, 2026

New — Best Practices has a Copy for LLM button, like the SEO, security and accessibility reports. It hands your AI assistant the audits, their severity and the fix for each one — and copies only what you've filtered to, so you can send it just the failures.

Improved — The Best Practices report now reads like the rest of them: one filterable list instead of four separate boxes, failures first and worst first, with severity on every failed audit. Filter by category or by pass/fail, expand a row for the fix, or expand everything at once.

Improved — A category breakdown up top shows how Security, Modern Web, Performance and User Experience each scored — click one to filter the list to it.

Fixed — Audit descriptions no longer print raw links in the middle of a sentence. "Learn more" is now a link you can click.

v2.1.45 — released August 11, 2026

Fixed — The "spots left" figure on the lifetime plan was counting the wrong thing and stayed frozen when someone bought. It now reflects actual purchases and drops the moment one completes.

New — Landing on a dead link no longer dumps you on a blank page. The 404 now reads the address you tried — so asking for a trust report on a site we haven't scanned offers to scan it — and points to the tools, blog, docs and results.

v2.1.44 — released August 11, 2026

New — WebScore now offers its tools to AI agents running in your browser (WebMCP): an agent on the site can check a domain's SSL certificate, check its SPF/DKIM/DMARC email records, read a page's metadata, or start a full audit — without you copying anything between tabs. The same tools are written into the page so agents and crawlers that can't use the browser API still find them.

Improved — The Agent Ready card's WebMCP check now also recognises the current version of the standard, so sites using it are no longer marked as missing it.

Improved — Sharing a WebScore link on X, LinkedIn, Facebook, Slack or WhatsApp now shows the new preview card — a real report rather than the old generated graphic — and every page uses it, not just the homepage.

Improved — The free tools have more room to work in: the sidebar now sits beside the page rather than inside it, so the converters, generators and checkers get the full width they were built for.

Improved — The homepage now shows what a real scan actually found on a featured site — the individual checks behind each module score, the Core Web Vitals figures, and its domain authority — instead of a summary.

New — The blog has a sidebar: search across every article, filter by category or tag, and browse a full-width list instead of a grid of cards, loading more as you go.

v2.1.43 — released August 8, 2026

Fixed — Backlink data had stopped updating after our provider retired the endpoint WebScore was calling. Reports quietly fell back to the last stored snapshot, so the figures looked reasonable while steadily going out of date. They're refreshing again.

Improved — Each refresh now collects far more of a site's backlinks, so the list reflects the whole profile rather than a sample of it.

v2.1.41 — released August 6, 2026

Improved — Domain Rating is now read from Ahrefs directly rather than a third-party aggregator's cached copy. It's more current, and it now shows up for smaller sites the aggregator had no rating for at all.

Improved — Domain Rating and the other domain metrics are fetched independently, so trouble at one provider no longer empties the whole Domain Metrics report.

Fixed — Domain Rating no longer sits behind the caching window that limits how often the other providers are queried. It now refreshes with each scan and each manual refresh, while the remaining metrics stay cached as before.

v2.1.40 — released August 6, 2026

Improved — Backlinks are now listed one row per linking site instead of one row per link, so a site that links to you many times no longer fills the list with near-identical rows. Each row shows how many links that site sends, how many are dofollow, and its domain rank. Expand a site to see its individual links: the page that links to you, the page on your site it points at, the anchor text, and when it first appeared.

v2.1.39 — released August 6, 2026

Improved — Type a URL on the homepage and create an account, and onboarding now opens with that address already filled in and one button to start the scan — instead of asking for your name and company first. It also lists the five checks a free scan runs, so you know what you're about to get. Name and company moved to Settings, where you can fill them in whenever you like.

Fixed — Domain Metrics was listed as part of a free scan on the pricing cards, but it has always required a $3 report unlock or Lifetime access. It's now shown for what it is — and the "Each $3 report unlocks" list names it directly, so it's clear how to get it.

v2.1.38 — released August 5, 2026

Improved — Settings → Profile now shows who you're signed in as, how you sign in (Google, GitHub or an email magic link) and when you joined. Save stays disabled until you actually change something, and each field explains what it's used for — including that your company name is what replaces "WebScore" on exported PDF reports with Lifetime access.

v2.1.37 — released August 5, 2026

New — The docs sidebar now has a search box and an icon per section. It matches on more than the headings — searching "spf" jumps to DNS configuration, "vitals" to Performance, "cro" to the Conversion Audit.

New — Connecting the MCP server to Claude Code is now a single command — no config file to edit. The docs show it alongside the JSON block for Cursor, Claude Desktop and other clients, both syntax-highlighted with a copy button.

Improved — Docs sections now carry a divider and an anchor link so you can link someone straight to the part they need.

New — If you have Lifetime access and are signed in, the MCP setup snippets in the docs now come pre-filled with your own API key — copy-paste ready. No key yet? One button creates it, and it will never replace a key you're already using.

New — The MCP section has a "See what a scan returns" button that opens a sample scan_website response, so you can see the shape of the data — scores, issues and the how-to-fix for each — before wiring anything up.

v2.1.36 — released August 5, 2026

Improved — The main navigation is now a full-width bar across the top of the page instead of a floating pill, with its contents lined up to the same width as the rest of the page. It still stays with you as you scroll.

New — A dismissible announcement strip can now be shown above the navigation — handy for promoting a tool, announcing a feature or running a campaign. Text, link and icon are all set in the admin panel, and editing any of them brings the banner back for people who dismissed the previous one.

New — "Free Tools" now appears at the bottom of the dashboard sidebar as an expandable group — open it and every tool is a direct link, so you can jump straight to the favicon generator or SSL checker without leaving the dashboard.

Fixed — Changes made in the admin panel now take effect immediately instead of taking up to five minutes to appear.

v2.1.35 — released August 5, 2026

New — Public trust pages now show a "Speed & stability" section with Google's Core Web Vitals — Largest Contentful Paint, Cumulative Layout Shift and Total Blocking Time. Each one gives its measured value, a plain-English line on what it means for you, and a scale showing exactly where the result falls against Google's good and poor thresholds. The section appears only when the scan produced the data.

v2.1.34 — released August 4, 2026