This translation has not been editorially reviewed yet. The German version is authoritative. German version →
Independent website auditing.
We audit automatically and, on request, through a human auditor. Every result is traceable, verifiable and valid for 12 months.
Ordering, the customer area and the reports are currently German.
- Access like a website visitor
- Publicly verifiable
- GDPR-compliant
What we audit
Each area gets its own verdict. The classification is guidance, not legal advice.
Self-disclosure: euid.com
audited on 15.09.2026 · 1000 pages
- Accessibility
- 89/100
- Accessibility
- What the value says
- How many of the audited WCAG criteria your pages meet: contrast, alternative texts, usability without a mouse, labelling of forms.
- Why it counts
- For many operators accessibility has been regulated by law since 2025. Regardless of that, it decides whether someone with a visual impairment can submit your form or gives up.
- What a better value brings
- Every resolved finding makes the page usable for a group that was locked out before, and it is the evidence you need when someone asks.
- Data & law
- 90/100
- Data & law
- What the value says
- What your page does BEFORE anyone consents: cookies set, third-party servers contacted, embedded maps and videos. And whether a "decline" really works.
- Why it counts
- Trackers loading before consent are the most frequent reason for complaints, and usually nobody in the house knows them, because a theme or a plugin brought them along.
- What a better value brings
- You learn by name which service is contacted when. That is the basis for removing it, replacing it or obtaining consent correctly.
- CO₂ & EmpCo
- 79/100
- CO₂ & EmpCo
- What the value says
- How much a page loads and how much CO₂ one visit causes as a result: page weight, number of requests, image and script effort, and whether the hosting verifiably runs on green power.
- Why it counts
- For many organisations the digital footprint becomes part of ESG reporting duties. Regardless of that, a lighter page loads faster and cheaper, especially on mobile networks.
- What a better value brings
- The findings show the heaviest items (large images, superfluous JavaScript, weak caching). Every megabyte saved lowers both the emission per visit and the loading time.
- Cyber insurance (basis)
- 90/100
- Add-on
- GEO / AI visibility
- 65/100
- GEO / AI visibility
- What the value says
- How well answer engines such as ChatGPT or Google AI can cite your content: clear opening paragraphs, question-and-answer structures, machine-readable facts.
- Why it counts
- More and more people get an answer instead of a list of results. Whoever is not citable there does not appear in that answer, even with the best information.
- What a better value brings
- The findings show which pages can be restructured so that a machine finds the answer, without you having to write anything new.
- SEO
- 86/100
- SEO
- What the value says
- The craft of findability: titles, descriptions, heading structure, internal links, structured data.
- Why it counts
- Search engines read these details first. If they are missing or repeat on every page, your own pages compete with each other.
- What a better value brings
- The list tells you page by page where a title is missing or duplicated: work an editorial team can do without development.
- Technology
- 100/100
- Technology
- What the value says
- Whether search engines can fetch, read and unambiguously assign your pages at all: redirects, robots.txt, sitemap, content in the first fetch.
- Why it counts
- This point precedes all others. What cannot be fetched is not rated; the best text is useless behind a broken redirect.
- What a better value brings
- You see which addresses lead nowhere and which content only appears via script. Usually a few steps with a large effect.
- Responsive
- 89/100
- Responsive
- What the value says
- How the page behaves at three device widths (phone, tablet, screen): horizontal scrolling, buttons too small, content cut off.
- Why it counts
- The majority of your visitors come from a phone. A form whose submit button sits half off-screen there costs customers exactly where it counts.
- What a better value brings
- The findings name width and element. That allows targeted fixes instead of touching the whole layout.
- Performance
- 100/100
- Performance
- What the value says
- How fast the page is usable: not how fast it "loads", but when a person sees, reads and can click something.
- Why it counts
- Waiting time is the quietest reason to leave: nobody complains, everybody goes. Search engines take the values into account as well.
- What a better value brings
- Usually a few large images or one script are behind it. The report shows which: an afternoon of work, not a relaunch.
- Software currency
- 70/100
- Software currency
- What the value says
- Which recognisable software your page delivers and whether its publicly known version is still maintained. Purely from the outside, without access.
- Why it counts
- A version the vendor no longer supports receives no more security fixes, and it is recognisable from the outside, for others as well.
- What a better value brings
- You know what to discuss with your agency or your host before it becomes an incident.
Without an overall grade: it would hide a weak result behind a strong one.
- Publicly verifiableEvery seal has its own address and a QR code.
- TraceableEvery finding names the rule, the location and the evidence.
- Valid for 12 monthsThe seal shows its audit date. After twelve months it expires, because websites and technology change.
- Help with correctionsEvery finding states what to do, with location and example.
What we cover on your website
Every topic appears in the audit report with location, rule and measure.
Law
What laws and regulations require of a website.
- AccessibilityBaFG and BFSG, WCAG 2.2 AA: measured and assessed by an auditor
- Accessibility statementcreated from the audit file, with status and enforcement body
- Cookies and consenttracking before consent, and whether “decline” takes technical effect
- Imprint, privacy policy, termsfindable, reachable, mandatory details present
- VAT numberchecked against the EU register VIES
- Prices in the shopVAT and shipping costs under the Price Indication Ordinance
- Green claims“climate neutral”, “sustainable” and labels under the EmpCo Directive (EU) 2024/825
Security
What an attacker sees from outside, without any login.
- Encryption and headersHTTPS, HSTS, Content Security Policy, cookie flags
- Exposed files/.git, /.env and backup copies on the server
- Known vulnerabilitiesdetected libraries, checked against the OSV database
- End of supportCMS and extensions whose vendor support ends
- Domain and mailSPF, DKIM, DMARC, DNSSEC, CAA
- Third-party scriptsintegrity check (SRI) of embedded scripts
- Cyber insurancedeclared safeguards, verified by an auditor
Marketing
How search engines and AI assistants find you.
- SEOtitles, descriptions, structure, rated per page type
- Visibility in AI answerscitable introductions, questions and answers, facts
- Google Search Consoleclicks, search terms and non-indexed pages, with your permission
- Indexingrobots.txt, sitemap, redirects, canonical
- Product data in the shopprice, availability and reviews for search results
- Language versionscontent language and hreflang match
- Audit sealpublicly verifiable, with its own address and QR code
Cleanliness
How well the website is built and how it loads.
- Loading timeCore Web Vitals, measured in a real browser
- Display on devicesfrom 390 to 1920 px wide, everything reachable and usable
- Broken linksinternal and external, plus links to http instead of https
- HTML correctnessaccording to the W3C checker
- Page weight and CO₂images, transfer, estimated emission, hosting on renewable power
How a seal is created
- Choose the audit goalLegal requirements (accessibility, data & law), technical implementation or both: you choose the audit areas per order.
- Set the scopeYou choose the page count according to the scale, up to 1000 pages; exactly this defined set is audited.
- Measure and judgeWhatever a machine can decide is measured; everything else is judged by an auditor. A criterion only counts as met once measurement or auditor confirm it.
- Issue the sealOnce an area reaches its target, its seal is created; it names domain, audit area, audit date and validity.
Every seal stays verifiable on its verification page at any time; a revocation is stated there explicitly as well. The procedure in detail →
How far the statement of this audit reaches
The seal is an independent, private-sector audit statement and therefore not an official certificate: official conformity assessments, for instance under the Accessibility Act (BaFG) or the European Accessibility Act (EAA), remain reserved to authorities and accredited bodies.
This audit is a technical examination of publicly reachable web pages according to the published audit rules. It delivers documented technical findings and is expressly not legal advice; the legal assessment remains reserved to the professions admitted for it, including where audit rules are prompted by legal requirements (e.g. data protection/cookies or accessibility).
The audit result is a snapshot: it describes the publicly reachable state of the audited pages on the stated audit date. What changes afterwards only shows in a repeat audit; that is why every seal carries audit date and validity.
Consideration when fetching
The measurement is passive: it reads publicly reachable pages the way a browser fetches them and rates only what the website delivers by itself. Security scans, vulnerability, login and load tests all lie outside the procedure. The one named exception to pure reading: the GDPR audit area operates the cookie banner, clicks "decline" and reloads the page to measure whether the refusal takes technical effect. That is normal use of a public page.
Repeated audits of the same domain are spread out over time, regardless of how many clients order them. Every request identifies itself as the audit service and names a contact reference, so website operators can recognise the originator.
