Prospecting and website audits for agencies
Find the businesses that need you, and prove why.
SiteAssay searches a trade and a city for the local businesses worth pitching, audits their websites against published standards for speed, security, SEO, accessibility and AI visibility, and turns what it finds into a white-label report the owner can read without you in the room.
Free, no account, one URL at a time
- 252
- Diagnostic health signals across 11 scored categories
- 18
- Executive and technical sections in every client report
- 48
- Specialised audit adapters running against live sites
- 100%
- Findings carrying the measurement and the confidence behind them
Two halves of the same sale
Most tools do one of them. A list without proof is a cold call, and proof without a list waits for somebody to paste a URL.
Find businesses worth pitching
Search a trade and a city. Every business arrives merged across map listings and directories, scored from its public listing, and split into no website and a website in trouble.
Explore finding businessesProve what their website needs
Audit the ones you pick against published standards, ranked by the service you sell, and hand over a report the owner can read with your name on it.
Explore website auditsOne run, end to end
Search a trade and a city. Get back the ones worth auditing.
Six stages, each queued and resumable. The first two are the search; the rest run only on the businesses you choose, because pointing a scan at a business nobody picked is both wasteful and rude. Each one arrives with a score read off its public listing, so you can see which are worth a full audit before you spend one.
A worked example. Pick a stage to see what it produced.
Finding businesses
A list is a commodity. Knowing who needs you is not.
Every business of a trade in a town, merged across map listings and directories, each carrying a score read off its public listing: no website, few reviews, a low rating, no opening hours. You choose which ones to audit knowing which are worth it.
Explore finding businesses- Searches that run themselves
- Schedule a search and only the businesses you have not seen before arrive.
- Two segments, two pitches
- No website at all is a build; a website in trouble is a rescue. They are counted apart.
- The Local Grid
- A map rank at every point around the business, which shows an owner exactly where they vanish.
- Reviews, read
- The complaints that come up more than once, pulled out of the public reviews before you call.
Local presence
Half your prospects are judged on a listing, not a website.
A searcher sees the Google listing before the website, and plenty of local businesses have nothing else. SiteAssay grades the listing, measures where the business shows on the map around its own address, and reads the reviews, so you have something to say to the owner whether or not there is a site to audit.
Explore local presence- A grade for the listing
- Hours, categories, photos, phone and address, and whether the website agrees with it, scored 0 to 100.
- Where they show on the map
- The Local Grid checks the map results at every point around the business.
- Reviews, read
- The complaints that come up more than once, named rather than counted.
- No website, still scored
- A business with no site is graded on its listing alone, and counted as a build.
Why proof wins the meeting
An opinion about a website is worth nothing. A measurement is worth a meeting.
Business owners have heard that their site "could use an upgrade" from everyone who ever emailed them. SiteAssay replaces the adjective with a number: what was measured, when, against which published standard, and how confident the engine is that it measured rather than inferred it. Then it ranks the findings, so the report opens with the thing worth fixing first.
See how the scoring works- A finding, not an adjective
- "Your mobile site takes 5.4s to load, lacks DMARC spoof protection, and has 28 WCAG contrast errors." Concrete, measurable, and dated.
- Confidence printed, not smoothed
- High where the engine measured it, medium where it inferred it. A report that hides the difference is one you cannot defend in a meeting.
- Ranked by the work you sell
- A security consultancy and a web studio get different orders out of the same audit, because the weights follow your service line.
- Costed, not just counted
- Each finding carries an estimate of what it plausibly costs the business, so the conversation is about money rather than about a grade.
What we actually look at
11 categories, each one scored 0–100 against a published standard and weighted by the work you sell. A security consultant and a web designer get different rankings from the same audit.
Performance
Core Web Vitals from a real headless browser, plus field data from real visitors where it exists.
Security
Response headers graded, TLS and certificate chain, exposed paths, secrets left in the JavaScript, and the SPF, DKIM and DMARC records that decide whether anyone can send mail as them.
SEO
Titles, headings, canonicals, schema, sitemap validity, and how far a reader travels before the answer.
AI visibility
Whether an answer engine is allowed to read the site at all, and whether there is anything quotable when it does.
AI trust
Authorship, freshness, citations and entity clarity: the signals behind being cited rather than merely crawled.
Conversion
A reachable call to action, a working form, tap-to-call, and the friction between a visitor and an enquiry.
Accessibility
WCAG 2.1 AA failures counted on the rendered page by severity, with alt-text coverage.
Technology
What built the site, what hosts it, which client-side libraries carry known CVEs.
Reputation
The rating and review count, the owner's reply rate and how recent the reviews are, and the complaints that come up more than once.
Google Business Profile
The only score a business with no website has. Hours, categories, photos, phone and address, and whether the listing says the business is closed. Where there is a website, whether it gives the same name, phone and address.
Build quality
JavaScript errors thrown at real visitors, dead-code bloat, hydration mismatches and placeholder copy left on the page. The visible footprints of a site assembled in a hurry.
The deliverable
A document the business owner can read without you in the room.
18 sections, a letter grade, and for every finding: why it matters, what it plausibly costs, how to fix it, and how confident we are that we measured it rather than inferred it. It is a shareable link and a PDF, and from the Pro plan up it carries your name instead of ours.
What is in a report- Copy-ready fixes
- The SPF record for their actual mail provider, the nginx block, the schema snippet. Paste, do not translate.
- Your name on it
- From the Pro plan up, the report carries your agency name, logo and brand colour instead of ours.
- Re-run it and watch it move
- Schedule the audit and the report shows what changed since last time, which is the part a retainer is actually sold on.
Who this is for
Same audit. Different ranking.
The scoring weights are a profile, so the same measured site sorts differently depending on what you sell. Pick the one that matches your work and the findings reorder themselves around it.
You sell builds and rebuilds
Conversion readiness, load time and build quality carry the most weight, and businesses with no website at all are counted separately. Every audit ends with a concrete reason the current site is costing the owner money.
You sell being found
Technical SEO and AI visibility lead the weighting. Being invisible to an answer engine is a finding an owner has usually never heard of, and it is the one that makes the report interesting.
You sell hardening and maintenance
Security and infrastructure dominate the score. Exposed configuration files, secrets shipped in the JavaScript, certificates about to lapse and hosting that sits on an abuse blocklist.
You sell local presence
Reviews lead the weighting and the Google listing grade sits beside them, with the recurring complaints pulled out of the reviews so the report names a problem rather than a star count. Run the Local Grid alongside to show the owner where they vanish on the map.
You are one person and time-poor
The default profile and the Starter and Solo plans. A few dozen audits a month you can read properly is the job, not ten thousand rows you will never open.
Answer engines
Two different questions, and most tools only ask one.
Can an assistant reach and read this site, and would it cite it? They are separate problems with separate scores. A site that blocks GPTBot cannot be recommended no matter how good its content is, so that finding caps the rest of the category rather than averaging into it.
Read the AI-visibility notes- AI visibility
- Crawler access, structured data, answerable markup, a defined business entity, and whether an llms.txt exists at all.
- AI trust
- Authorship, dates, outbound citations, extractable structure, and how quickly a reader reaches something quotable.
- What we will not claim
- We do not measure how often an assistant mentions you, and we will not sell a number that pretends to. Nobody can measure that from outside.
- Including about llms.txt
- It is a weak signal and we say so on the report. Selling a client an llms.txt file as an AI strategy is selling them a deliverable, not an outcome.
Three ways to start
Try the whole workflow free with no card, buy one report on its own, or pick a plan.
Free for 7 days
20 searches and 5 full audits with your own logo on the reports.
One report, $19
Every check, the score, what each problem costs and the fixes, as a PDF and a link. No account, no watermark, nothing to cancel. Three for $39.
Plans from $23 a month
Billed annually. Search a trade and a town, audit the businesses worth a call, and send the pitch from your own inbox.
Questions
What does SiteAssay do?
Two things that belong together. It searches a trade and a city for the local businesses worth pitching, scored from their public listings. Then it audits their websites against published standards (speed, security, search, accessibility and AI visibility), scores what it found, and turns the findings into a report a business owner can read, with your agency name on it.
Who is it for?
Agencies and freelancers who sell web design, SEO, security or IT maintenance to local businesses, and would rather hand a client a measurement than an opinion.
How is it different from an SEO suite?
SEO suites are built for the person doing the work: keyword data, backlinks, and long lists of warnings. SiteAssay is built for the conversation with the client. It measures more than search (security, email authentication, accessibility, AI visibility, reviews), ranks the findings by the service you sell, prints the evidence and confidence beside each one, and hands you a report the business owner can read. Many agencies use both.
Is there a free trial?
Yes. Every account can start a 7-day free trial with no card: 20 searches, 5 full audits and your own logo on the reports. You can also run a free audit without an account, read a full sample report, or buy a single report for $19.
Can I buy one report without a subscription?
Yes. Run a free audit of the site, then buy its full report for $19, or three for $39 to use whenever you like.
Where does the audit data come from?
From the business's own public website and its public DNS, TLS and domain records, measured live. Business listings come from the Google Places API. Nothing is bought from a data broker.
Does SiteAssay email the businesses it audits?
Only if you choose to. Outreach drafts an email about what the audit found on that business's own website, and nothing is sent until you approve it. It goes from your own mailbox (Outlook directly, or Gmail and any other provider over SMTP) with a one-click unsubscribe and a daily limit, and an address that opts out is never mailed again. Contact details are never sold or exported.
Search a town, audit a site, send the proof
Start free for 7 days, no card needed. Plans from $23 a month after that.