Every recommendation, with the exact steps
Each scan finding links straight to one of these walkthroughs — what to change, where to change it, and how to confirm it worked.
Uptime & HTTPS
Fix a site that isn't responding
None of the four common addresses for your domain returned a working page. Work through DNS, then the server, then the firewall.
15–30 min · 5 steps
Put your site on HTTPS
Install a free TLS certificate and serve every page over HTTPS.
20 min · 4 steps
Redirect HTTP traffic to HTTPS
Send every insecure request to the secure version with a permanent 301 redirect.
10 min · 3 steps
Pick one canonical hostname
Serve your site from a single address and redirect all the others to it.
15 min · 4 steps
Cut your server response time
Get time-to-first-byte under 500ms with caching and a CDN.
30–60 min · 4 steps
Email deliverability
Publish an SPF record
Tell mailbox providers which servers are allowed to send email as your domain.
15 min · 4 steps
Merge multiple SPF records into one
Two SPF records is a permanent failure — combine them.
10 min · 3 steps
Set your SPF enforcement correctly
Replace +all or a missing all mechanism with -all.
5 min · 3 steps
Get SPF back under the 10-lookup limit
Flatten or consolidate includes so SPF stops returning permerror.
30 min · 4 steps
Publish a DMARC record
Add a monitoring DMARC policy and start collecting reports.
15 min · 4 steps
Move DMARC from p=none to enforcement
Step your policy up to quarantine and then reject without losing legitimate mail.
2–4 weeks, mostly waiting · 4 steps
Turn on DMARC reporting
Add a rua address so you can see who is sending as your domain.
10 min · 4 steps
Enable DKIM signing
Publish your provider's signing key so your mail carries a verifiable signature.
20 min · 4 steps
Set up MX records so you can receive email
Point your domain's mail exchange records at your mailbox provider.
15 min · 4 steps
Publish MTA-STS
Force other mail servers to use encrypted, certificate-verified delivery to you.
30 min · 4 steps
Show your logo in the inbox with BIMI
Publish a verified logo that Gmail and Apple Mail display next to your messages.
1–2 weeks (certificate) · 4 steps
Site speed
Make your main content appear faster (LCP)
Get the largest element on screen painted within 2.5 seconds on mobile.
1–2 hours · 5 steps
Stop the page jumping around (CLS)
Reserve space for everything that loads late so content never moves.
45 min · 5 steps
Cut the time your page is unresponsive
Reduce main-thread JavaScript work so taps register immediately.
1–2 hours · 4 steps
Page speed basics
The changes that improve almost every slow site, in the order worth doing them.
1 hour · 5 steps