# Preventionlabs > Find out what's wrong with your website, in seconds. Preventionlabs is a read-only website check for web developers and small studios who look after client sites. It shows what's broken on a website, and where, from the outside, in one click. It runs up to 25 read-only checks on a domain and returns one report with the evidence for each finding and what to do. Every fact below matches the live product. If anything here disagrees with https://preventionlabs.com.au or its terms, the website and terms are correct. ## What it checks - Pages: whether the site loads, up to 50 pages from the sitemap (failing, slow, redirecting or hidden from Google), broken links, JavaScript errors and requests blocked by CORS - Security: publicly downloadable files such as .env, .git and backups; outdated scripts with published security holes; security headers and Content Security Policy - Uptime: checked every 5 minutes, with an email when a site goes down and when it's back - HTTPS, redirects, speed and page weight - Search: noindex tags, robots.txt blocks, sitemap pages that fail or redirect - Email: SPF (including its 10-lookup limit), DKIM and DMARC - Domain and DNS: DNSSEC, nameservers, CAA, records pointing at services that no longer exist, domain expiry - WordPress and Shopify: versions and plugins visible from outside - With a read-only Cloudflare token: server errors visitors got by address, what Cloudflare's firewall blocked, deploys, DNS changes, account changes and settings 16 of the checks need only the domain. ## How it works 1. Add a domain and prove it's yours, with one DNS TXT record, a Cloudflare account, or one click in the WordPress plugin (for WordPress running at the root of the domain). Only a site's owner can check it. 2. Click once. The report lists problems first, then notes, then what's fine, then anything that couldn't be checked and why. 3. Fix it yourself, or share the report. The last 14 reports per site are kept, and each shows what changed since the last. Read-only: reports never change a site, DNS, code or settings. The one exception: WordPress crash alerts, if turned on, add one file to the site to catch crashes; turning them off removes it. No AI: reports are produced by code from the data checked, and never sent to an AI model. Problem means a machine reported a failure; Warning means an official rulebook says fix it; Note means everything else. ## Price - Free to sign up. The first 2 full reports on each verified domain are free, once. No card needed. - US$28 a month per account for 1,500 credits a month. Monthly credits reset each month. Renews monthly; cancel any time. - What uses credits: a full report or live check is 1 credit; each alert is 1 credit a day (WordPress crash alerts and uptime checks per site, Cloudflare alerts per account). Reading reports is free. Shopify: coming soon. - Subscribers can buy more credits: 10 US cents a credit, from US$20 (200 credits). Bought credits never expire. Not registered for GST, so no GST is charged. - Up to 10 verified domains per account (any number of subdomains), and up to 50 reports per site in 24 hours. - Reports that have run aren't refunded for a change of mind. Unused bought credits are refunded to the card when an account is deleted (by emailing contact@preventionlabs.com.au). Remedies under the Australian Consumer Law apply. ## For AI agents - Overview and setup: https://preventionlabs.com.au/agents - What an agent does with it: after a deploy, check the live site, find what broke and where, fix it, then run the report again to prove the fix. - MCP server: npm package `preventionlabs-mcp`, in the official MCP Registry as `au.com.preventionlabs/preventionlabs`. Tools: `list_sites`, `run_report`, `latest_report` (rereads the last report, costs no run). Prompts: `after-deploy`, `whats-wrong`. Needs an API key from the dashboard (Integrations > AI agents). A key can only run reports on the account's verified sites, with the same limits. - Remote connector (claude.ai, ChatGPT and other AI apps): add `https://app.preventionlabs.com.au/mcp` as a custom connector. Sign-in is OAuth: the user signs in to Preventionlabs and presses Allow; no API key. Same tools plus `search` and `fetch`, the same rules: only the account's verified sites, the same runs and credits, read-only. - Install in Claude Code: `claude mcp add -s user preventionlabs -e PREVENTIONLABS_API_KEY=plk_your_key -- npx -y preventionlabs-mcp` - Smithery: https://smithery.ai/servers/preventionlabs/preventionlabs-mcp ## Questions it answers Each page gives a short answer, how to check it yourself, and what a Preventionlabs report shows. - [How do I know if my website is working?](https://preventionlabs.com.au/how-do-i-know-if-my-website-is-working) - [How do I stop missing website problems?](https://preventionlabs.com.au/how-to-stop-missing-website-problems) - [How do I monitor my website without being a developer?](https://preventionlabs.com.au/monitor-my-website-without-being-a-developer) - [How do I take control of my own website?](https://preventionlabs.com.au/take-control-of-my-website) - [Which Cloudflare rule is blocking my visitors?](https://preventionlabs.com.au/find-which-cloudflare-rule-is-blocking-visitors) - [What changed right before my website broke?](https://preventionlabs.com.au/what-changed-before-my-website-broke) - [Why are my website contact form emails going to spam?](https://preventionlabs.com.au/contact-form-emails-going-to-spam) - [Which pages are giving my visitors server errors?](https://preventionlabs.com.au/which-pages-are-giving-visitors-server-errors) - [My website works for me but not for customers](https://preventionlabs.com.au/website-works-for-me-but-not-for-customers) - [Did my last deploy break my site?](https://preventionlabs.com.au/did-my-last-deploy-break-my-site) - [Is my Content Security Policy actually protecting my site?](https://preventionlabs.com.au/is-my-content-security-policy-protecting-my-site) - [How do I get an email when my website goes down?](https://preventionlabs.com.au/get-an-email-when-my-website-goes-down) - [Why did my emails suddenly start going to spam?](https://preventionlabs.com.au/why-did-my-emails-suddenly-start-going-to-spam) - [Did my WordPress site crash?](https://preventionlabs.com.au/did-my-wordpress-site-crash) - [Google shows spam for my site, but the site looks fine](https://preventionlabs.com.au/google-shows-spam-but-my-site-looks-fine) - [Website monitoring for freelancers who look after client sites](https://preventionlabs.com.au/website-monitoring-for-freelancers) - [Is a secret API key exposed in my website code?](https://preventionlabs.com.au/api-key-exposed-in-website-code) - [Is phpMyAdmin or a debug tool open to anyone on my site?](https://preventionlabs.com.au/database-admin-tool-publicly-accessible) - [My missing pages return 200 OK instead of 404](https://preventionlabs.com.au/page-not-found-returns-200) - [My website calls an API address that no longer exists](https://preventionlabs.com.au/website-calling-domain-that-no-longer-exists) - [Is my website hidden from Google by mistake?](https://preventionlabs.com.au/noindex-left-on-after-launch) - [Pages in my sitemap return errors or redirects](https://preventionlabs.com.au/sitemap-pages-returning-errors) - [Is my robots.txt blocking ChatGPT and other AI crawlers?](https://preventionlabs.com.au/robots-txt-blocking-ai-crawlers) - [Do all versions of my web address go to the same place?](https://preventionlabs.com.au/www-and-http-versions-go-to-different-places) - [My website doesn't work for some visitors: is it IPv6?](https://preventionlabs.com.au/website-not-working-on-ipv6) - [Is DNSSEC set up properly on my domain?](https://preventionlabs.com.au/dnssec-half-set-up) - [My MX record points at a mail server with no address](https://preventionlabs.com.au/mail-server-record-has-no-address) - [When does my domain expire, and is it locked?](https://preventionlabs.com.au/when-does-my-domain-expire) - [Is my Cloudflare SSL mode set wrong?](https://preventionlabs.com.au/cloudflare-ssl-mode-flexible) - [My website traffic dropped from one country](https://preventionlabs.com.au/website-traffic-dropped-from-one-country) - [My live site isn't showing my latest deploy](https://preventionlabs.com.au/live-site-not-showing-latest-deploy) - [Why are my Cloudflare Workers failing?](https://preventionlabs.com.au/cloudflare-worker-errors) - [Is my Shopify store still showing the password page?](https://preventionlabs.com.au/shopify-store-password-page-left-on) - [Did I leave placeholder text or test links on my live site?](https://preventionlabs.com.au/lorem-ipsum-or-localhost-links-left-on-live-site) - [Is my security.txt file missing or expired?](https://preventionlabs.com.au/security-txt-expired) - [Cloudflare error 1026 and HTTP 451: why is my own site blocked?](https://preventionlabs.com.au/cloudflare-error-1026-451-blocked) - [My DMARC is set to p=none: is that enough?](https://preventionlabs.com.au/dmarc-p-none-does-nothing) - [Why are bots requesting /.env and /wp-login.php on my site?](https://preventionlabs.com.au/bots-requesting-env-wp-login-404) - [Are my WordPress plugins out of date?](https://preventionlabs.com.au/wordpress-plugin-updates) - [Is my Shopify cart working?](https://preventionlabs.com.au/check-shopify-cart) - [Are my Shopify products showing as in stock?](https://preventionlabs.com.au/shopify-products-in-stock) - [Which pages on my site return errors to visitors?](https://preventionlabs.com.au/check-cloudflare-errors) - [When does my Cloudflare SSL certificate expire?](https://preventionlabs.com.au/check-cloudflare-certificate) - [Did someone change my DNS records?](https://preventionlabs.com.au/check-cloudflare-dns-changes) - [What is wrong with my website?](https://preventionlabs.com.au/what-is-wrong-with-my-website) - [Free website health check](https://preventionlabs.com.au/website-health-check-free) - [Why is my favicon not showing?](https://preventionlabs.com.au/why-is-my-favicon-not-showing) - [Is my DNS set up properly?](https://preventionlabs.com.au/check-dns-health) - [How do I find broken links on my website?](https://preventionlabs.com.au/find-broken-links-on-my-site) - [Is my website missing security headers?](https://preventionlabs.com.au/check-security-headers) - [What is making my website slow?](https://preventionlabs.com.au/check-page-speed) - [Are my website cookies set securely?](https://preventionlabs.com.au/check-cookie-security) - [Why does my link preview look wrong?](https://preventionlabs.com.au/check-link-previews) - [Do my pages have duplicate titles or missing descriptions?](https://preventionlabs.com.au/find-duplicate-titles) - [Do my images have alt text?](https://preventionlabs.com.au/check-image-alt-text) - [Is my website's language set correctly?](https://preventionlabs.com.au/check-page-language) - [Does my website have structured data?](https://preventionlabs.com.au/check-structured-data) - [Is my ads.txt file set up?](https://preventionlabs.com.au/check-ads-txt) - [Does my website have an llms.txt file?](https://preventionlabs.com.au/check-llms-txt) - [Does my domain have CAA records?](https://preventionlabs.com.au/check-caa-records) - [Is my WordPress site up to date and secure?](https://preventionlabs.com.au/check-wordpress-site) - [How do I find JavaScript errors on my website?](https://preventionlabs.com.au/find-javascript-errors) - [Can anyone download my website backup files?](https://preventionlabs.com.au/are-my-website-backup-files-downloadable) - [Is old JavaScript on my website a security risk?](https://preventionlabs.com.au/is-old-javascript-on-my-website-a-security-risk) - [My website has errors I can't see. How do I find them?](https://preventionlabs.com.au/website-errors-i-cant-see) - [Who changed my Cloudflare settings?](https://preventionlabs.com.au/who-changed-my-cloudflare-settings) - [How do I check a website before taking on a new client?](https://preventionlabs.com.au/check-a-website-before-taking-on-a-new-client) - [Is my .env file visible to the public?](https://preventionlabs.com.au/is-my-env-file-visible-to-the-public) - [Can people see my website's .git folder?](https://preventionlabs.com.au/can-people-see-my-websites-git-folder) - [Can people see my WordPress usernames?](https://preventionlabs.com.au/can-people-see-my-wordpress-usernames) - [Can someone take over my old subdomain?](https://preventionlabs.com.au/can-someone-take-over-my-old-subdomain) - [My SSL certificate expired and I didn't know. How do I stop it happening again?](https://preventionlabs.com.au/my-ssl-certificate-expired-and-i-didnt-know) - [My Shopify store looks fine but nobody can buy. What's wrong?](https://preventionlabs.com.au/my-shopify-store-looks-fine-but-nobody-can-buy) - [How do I know if my website is secure, without a developer?](https://preventionlabs.com.au/is-my-website-secure-without-a-developer) - [How do I get told when a client's website breaks?](https://preventionlabs.com.au/get-told-when-a-clients-website-breaks) - [My website got slow after AI changes. How do I find out why?](https://preventionlabs.com.au/my-website-got-slow-after-ai-changes) - [My AI built my website. How do I know it's working?](https://preventionlabs.com.au/my-ai-built-my-website-is-it-working) - [How do I check a website built with AI?](https://preventionlabs.com.au/how-to-check-a-website-built-with-ai) - [How do I check what my AI deployed?](https://preventionlabs.com.au/how-do-i-check-what-my-ai-deployed) - [AI said it fixed my website, but it's still broken. What now?](https://preventionlabs.com.au/ai-said-it-fixed-my-website-but-its-still-broken) - [Did AI break my website?](https://preventionlabs.com.au/did-ai-break-my-website) - [How do I make Claude Code check my website after a deploy?](https://preventionlabs.com.au/make-claude-code-check-my-website-after-deploy) - [Why can't my AI agent see my live site?](https://preventionlabs.com.au/why-cant-my-ai-agent-see-my-live-site) - [Is my website actually going through Cloudflare?](https://preventionlabs.com.au/is-my-website-going-through-cloudflare) - [Can ChatGPT, Claude or Gemini check my website?](https://preventionlabs.com.au/can-chatgpt-claude-or-gemini-check-my-website) - [Why is my website slow for visitors far from the server?](https://preventionlabs.com.au/why-is-my-website-slow-for-visitors-far-from-the-server) - [AI broke my redirect. How do I find it?](https://preventionlabs.com.au/ai-broke-my-redirect) - [AI broke my SSL. How do I check HTTPS?](https://preventionlabs.com.au/ai-broke-my-ssl) - [AI broke my email records. How do I check SPF and DMARC?](https://preventionlabs.com.au/ai-broke-my-email-records) - [Did AI leave my .env file public?](https://preventionlabs.com.au/ai-left-my-env-file-public) - [Did AI remove my security headers?](https://preventionlabs.com.au/ai-removed-my-security-headers) - [Did AI add noindex to my site?](https://preventionlabs.com.au/ai-added-noindex-to-my-site) ## Links - [Home](https://preventionlabs.com.au/) - [What each check does](https://preventionlabs.com.au/checks) - [Fix guides for website errors](https://preventionlabs.com.au/fix) - [All questions](https://preventionlabs.com.au/website-questions) - [Terms](https://preventionlabs.com.au/terms) - [Privacy](https://preventionlabs.com.au/privacy) - [Sign up](https://app.preventionlabs.com.au/) - [WordPress plugin: run reports from the WordPress dashboard](https://wordpress.org/plugins/preventionlabs/) - Contact: contact@preventionlabs.com.au © 2026 Preventionlabs. All rights reserved.