Web Health Best Practices Library
38 practices across 7 layers, 10 critical
Curated from OWASP, W3C WCAG 2.2, Google SEO guidelines, and industry standards. The orchestrating agent uses these criteria to score your website.
Use HTTPS everywhere
CriticalOWASP, Google SecurityAll pages must be served over HTTPS with a valid SSL/TLS certificate. HTTP should 301 redirect to HTTPS. HSTS header should be set with max-age of at least 1 year.
Server Response Time < 200ms
HighGoogle Core Web VitalsTime to First Byte (TTFB) should be under 200ms. Use CDN, server caching, and optimized database queries. Google uses TTFB as a ranking signal.
Enable compression (gzip/brotli)
HighHTTP/2 Best PracticesEnable server-side compression for text-based resources. Brotli provides 15-20% better compression than gzip. Configure Content-Encoding headers.
Set proper cache headers
MediumRFC 7234Use Cache-Control headers with appropriate max-age for static assets (1 year for versioned files). Use ETag for dynamic content. Implement cache busting for deployments.
Declare character encoding
MediumW3C HTML StandardAdd <meta charset="UTF-8"> as the first element in <head>. This prevents rendering delays and character display issues.
Daily Scanning (Coming Soon)
The orchestrating agent will automatically scan updated standards from OWASP, W3C, Google Search Central, and Schema.org on a daily basis. New criteria will be added to the library and reflected in health check scoring automatically. This ensures your scans always reflect the latest best practices without manual updates.