LEEDS · CITY AUDIT

A brutally honest website audit for Leeds businesses

Leeds is a professional-services town. Law firms in Park Square, accountancy practices in the Calls, financial services in the central business district, university spinouts across Headingley. The common thread: your prospects are choosing you partly on whether your website looks like the work of a serious business or the work of a freelancer's nephew.

ShiteScore tells you which it is. £9.99 one-off. Free 30-second score. Full report in your inbox in five minutes.

Score your site → 30-second free scan

Why Leeds businesses specifically need this

The B2B credibility threshold is higher in Leeds than in most UK cities. A prospective client checking a Leeds law firm's website at 11pm on Sunday is making a snap judgment in roughly four seconds. If the site loads slowly, has missing security headers, or returns a mixed-content warning in the browser's address bar, the prospect quietly clicks back to the search results. You'll never know they came.

Missing security headers. A surprising number of Leeds law and accountancy sites are missing HSTS, Content-Security-Policy, and X-Frame-Options — the headers that tell a browser the site is genuinely securing its connection. ShiteScore checks all six standard OWASP-recommended headers and rates each. For a regulated business, missing headers also create a low-grade ICO compliance question.

Stale SSL certificates. Roughly one in eight Leeds business sites we audit has an SSL certificate that expires in the next 30 days, often because nobody set up auto-renewal when the original developer left. Browsers display an alarming red warning when the certificate fails. Every visit during the gap is a lost prospect.

Heavy JavaScript on professional-services templates. The "premium" agency-built React site that cost £12K is often the slowest site on the audit. Beautiful animations, motion design, custom cursors. Mobile performance score of 28. Your competitor's £600 WordPress build scores 78. Guess which one the prospect's phone calls back when search results are tied.

What we typically find on Leeds business websites

Patterns by sector:

Legal and accountancy: missing security headers, no schema markup for the firm, no FAQ schema for service pages. Big SEO and AEO wins available.

Financial services: heavy compliance JavaScript on every page (cookie banners, consent managers), often badly configured and tanking performance scores.

University spinouts: modern React sites that score badly on mobile because the bundle hasn't been optimised since launch.

Independent retail: Shopify or WooCommerce, almost always missing product schema.

15 pages, six categories, prioritised fix list. £9.99, one-off. 7-day refund — we'll ask what went wrong, but we won't argue.

so. how shite is your site?

Score me →

FAQ

Reasonable questions.

Is this actually called ShiteScore?

Yes. It's called ShiteScore because that's the word people use when they look at their own website. The brand is the joke that's already in your head.

Will you ring me afterwards?

No. The whole product exists because we're sick of being rung up by agencies. We don't even have a phone number.

What if my score is really shite?

Then the report is more useful, not less. The lower the score, the more low-hanging fruit. We don't sugar-coat, but we also don't shame.

Refund policy?

7 days. If the report genuinely isn't useful to you — not just "I didn't like my score" — reply to your report email with the word "refund" and it's done within an hour. We'll ask what went wrong so we can improve it, but we won't argue.

Is this AI-generated slop?

The crawl and scoring are real data — PageSpeed Insights, a live site crawl, security header checks, DNS lookups. The fix steps are a mix: common, well-understood issues are served from a curated library of pre-reviewed, platform-specific instructions written and checked by a human. Novel or site-specific issues are generated by Claude AI from your actual audit data. Nothing is generic filler.

Which platforms do you support?

We detect your CMS automatically. WordPress, Shopify, Wix, Squarespace and Webflow all get platform-specific fix steps — naming the exact menu, plugin, or setting you need. WordPress sites also get a plugin version check: if your plugins are significantly out of date, we flag it with guidance on updating safely. For custom-built sites, we give you the general technical approach.