WQI.web​qualityindex
Method v1.1.0 85 live / 86 total factors methodology

Methodology

Web Quality Index measures 86 factors across 8 categories. 85 are currently running in production ( live). The remainder are proposed — specified in the methodology but not yet measured. Every proposed factor has an open ticket and a target version.

Each factor is auditable. Click into a factor to see what we measure, why it matters for site quality, and the scoring formula. Methodology versions are immutable: changes ship as v1.1, v1.2, etc., and historical scores remain attributable to the version they were computed under.

By the numbers

Total factors
86
Live
85
Proposed
1
Categories
8
Method version
v1.1.0

Security · 13 live / 14 total

# Factor Status
1 DMARC enforcement live
2 DKIM signing live
3 SPF record present and valid live
4 Security headers (HSTS, CSP, X-Frame-Options, Referrer-Policy, Permissions-Policy, X-Content-Type-Options) live
5 SSL certificate validity & expiration window proposed
6 WordPress REST API user enumeration exposure live
7 Sensitive path exposure (.git, .env, /admin, xmlrpc.php, wp-login.php) live
22 DNSSEC validation live
23 CAA records live
25 BIMI + VMC live
26 HSTS preload list inclusion live
27 TLS minimum version & cipher suite quality live
28 Subdomain takeover surface live
29 Spam / phishing blocklist presence live

Performance · 9 live / 9 total

# Factor Status
8 Mobile PageSpeed score + Core Web Vitals (LCP, FCP, CLS) live
10 Compression (Brotli / gzip) live
32 Image optimization (WebP/AVIF) live
33 Desktop PageSpeed score live
34 Core Web Vitals from CrUX (Real User Monitoring) live
35 Lazy loading on below-fold images live
36 Font loading strategy (FOUT/FOIT/swap) live
37 Total homepage byte weight live
38 Largest unused JavaScript bundle live

SEO · 14 live / 14 total

# Factor Status
9 HTTP/2 support live
11 Title, meta description, OG, Twitter cards, canonical live
12 Schema.org structured data presence live
13 H1 tag presence live
14 Sitemap.xml + robots.txt presence live
30 HTTP/3 support live
31 IPv6 support live
39 Schema.org type validity (parsed JSON-LD) live
40 Breadcrumb schema live
41 FAQ / HowTo schema (where applicable) live
42 hreflang for multi-language sites live
43 Internal link depth (clicks from homepage to deepest content) live
67 Web App Manifest (manifest.json) live
68 Service Worker / PWA capability live

AI-readiness · 4 live / 4 total

# Factor Status
15 llms.txt presence live
16 AI crawler robots.txt directives live
44 AI plugin manifest (.well-known/ai-plugin.json) live
45 JSON-LD richness score for LLMs live

Privacy · 7 live / 7 total

# Factor Status
46 Cookie banner presence + CMP detection live
47 Privacy policy page presence live
48 Terms of service page presence live
49 Third-party tracker count live
50 CCPA "Do Not Sell or Share My Personal Information" link live
51 Cookie scan — actual cookies set on first load live
52 Accessibility statement page live

Accessibility · 6 live / 6 total

# Factor Status
53 axe-core / WAVE accessibility scan live
54 Image alt text coverage live
55 Heading hierarchy validity live
56 Color contrast (WCAG AA) live
57 ARIA labels presence and validity live
58 Skip-to-content link live

Brand presence · 19 live / 19 total

# Factor Status
17 Domain age (RDAP / WHOIS) live
18 Wayback Machine site age & last snapshot live
19 Google Business Profile presence + rating live
20 News mentions in last 30 days live
21 Wikipedia entity live
59 Yelp presence + rating + review count live
60 Trustpilot presence + rating live
61 Better Business Bureau accreditation live
62 LinkedIn Company Page (presence + employee count + follower count) live
63 Bing Places live
64 Apple Maps presence (Apple Business Connect) live
65 Facebook Page presence live
66 Instagram presence (link from site → IG profile) live
69 Analytics tools detected live
70 Payment processors detected live
71 Marketing automation tools detected live
72 Customer support tools detected live
73 Tag manager presence live
74 Ad networks detected live

Email health · 13 live / 13 total

# Factor Status
24 MTA-STS & TLS-RPT live
75 Branded domain email address (vs free Gmail/Yahoo) live
76 Email provider class (Workspace / 365 / Zoho / self-hosted / shared) live
77 DMARC aggregate reporting enabled (rua=) live
78 Free-email exposure on contact page (gmail/yahoo/outlook visible) live
79 Newsletter signup form detected live
80 Email Service Provider (ESP) detected live
81 Transactional email provider detected (from SPF includes) live
82 SPF lookup count (10-limit deliverability check) live
83 Visible contact form on site live
84 Mailto: direct contact link present live
85 Email forwarding service detected (improvmx, forwardemail, etc.) live
86 Lead magnet / signup incentive detected (free download, ebook, etc.) live