Free tool · Developer
Website launch checker
The pre-launch checklist developers and agencies run by hand, automated. Enter a staging or production address to catch the mistakes that break a launch: noindex, staging links, missing redirects, broken assets and more.
Website Launch Checker
What it checks
The checklist, in the order things break
Launches rarely fail because of the design. They fail because a staging setting went live: search engines are told not to index the site, links still point to the test domain, or http:// traffic never reaches the new HTTPS site. The checker runs these checks in one pass and sorts the results into CRITICAL, WARNING and PASSED.
HTTPS and security
HTTPS on the page, a valid and trusted TLS certificate and its days left, http:// redirecting to https:// with a permanent redirect, mixed content, visible PHP or framework error output, debug profilers, and security headers: HSTS, Content-Security-Policy, clickjacking protection, X-Content-Type-Options, Referrer-Policy and Permissions-Policy.
Indexing and crawling
noindex in meta tags and headers, robots.txt blocking the whole site, the XML sitemap, canonical tags pointing to another domain, links and assets that still reference staging or preview hosts, www and non-www consistency, and whether a made-up URL returns a real 404.
SEO essentials
Title, meta description, H1 and heading order, declared language, hreflang, mobile viewport and favicon.
Content and assets
Broken images, broken internal links, placeholder text such as lorem ipsum or the default WordPress tagline, compression and server response time.
Social and structured data
Open Graph title, description and image, the X (Twitter) card, and valid JSON-LD with the key properties.
Analytics and privacy
Analytics and tag managers found in the HTML, retired Universal Analytics tags, and whether a cookie consent tool is present when tracking scripts are. These are indicators, not legal advice.
Why it matters
The first week after launch sets the tone
Search engines revisit a new or migrated site quickly. If the first crawl finds noindex, a blocked robots.txt or canonicals pointing at a staging domain, pages can drop out of results and take time to recover even after the fix. Broken redirects during a migration lose the links and rankings the old URLs had earned.
Security and trust problems are just as visible. An expired certificate or mixed content produces browser warnings; missing security headers and visible error messages make the site an easier target. For agencies, these are also the issues clients notice first.
A checklist catches them, but only if someone runs every item on every launch. Automating the repeatable checks leaves the team free to review what a tool cannot: content accuracy, forms, payments and integrations.
How to use it
Run it twice: before and after DNS
- 01On staging, if it is publicly reachable
Expect staging-only results such as noindex or a blocking robots.txt, and use the report as the list of settings to change at go-live. The checker cannot log in, so password-protected staging sites must be opened temporarily or checked after launch.
- 02Immediately after launch
Run it on the production homepage and one page of each template. Every CRITICAL item should be gone; fix those before announcing the launch.
- 03Share the report
Copy the report or download it as Markdown for the ticket, the client or the launch log. The optional AI action plan turns the findings into ordered tasks.
- 04Check the rest by hand
Forms, checkout, transactional email, integrations, backups and monitoring need people and test accounts. Our AI Code Health Check covers the application side.
Questions
About the launch
checker
Deeper checks for single areas: SSL certificates, HTTP headers, redirects and robots.txt each have their own tool.
Is it safe to run against a client’s site?
Yes. It makes ordinary public requests that any visitor or search engine makes: the page, robots.txt, sitemaps, the http:// and www variants, one made-up URL to test the 404 response, the certificate, and a sample of up to 30 links and 15 images. It does not scan for vulnerabilities or try admin paths.
Why is a staging host flagged as critical?
Links, images, scripts or canonical tags that point to staging, preview or local hosts usually mean a base URL was not replaced during deployment. Visitors get broken assets, and search engines may follow or index the staging site.
Our cookie banner was not detected. Is that a problem?
Maybe not. The checker recognizes common consent platforms in the HTML. Tools loaded by a tag manager or a custom banner may not be visible. Treat the result as a prompt to check, and ask your privacy adviser what applies to your visitors.
Can it check a site behind a login or IP allow-list?
No. It sees only what the public internet sees from HUB’s server.
Is anything stored?
The result is cached for 20 minutes, then deleted, and usage is counted anonymously with the host name only. The AI action plan is optional and sends only the findings to OpenAI.
Need help with what
the tools found?
HUB engineers implement technical SEO, performance, security and AI-readiness fixes on WordPress, Magento, custom PHP and modern JavaScript stacks.