Website review checklist for small businesses
AuditLume

13 practical checks for public accessibility, visible privacy, basic security and clarity signals.

How to use it
Write down the URL and date. Mark yes, no or manual review. Keep the evidence, assign an owner and change one element at a time.

[ ] 1. The page declares a language that matches the visible text.
[ ] 2. Informative images have useful text alternatives.
[ ] 3. Every visible field has a clear, persistent label.
[ ] 4. The page includes a viewport and is reviewed on mobile.
[ ] 5. There is one clear H1 and the heading structure is reviewed manually.
[ ] 6. The title identifies the page purpose specifically.
[ ] 7. The meta description accurately summarises the content.
[ ] 8. The privacy policy is visible and easy to find.
[ ] 9. Trackers and the consent interface are checked before and after a choice.
[ ] 10. HTTPS responses include HSTS where appropriate.
[ ] 11. Content-Security-Policy is reviewed and tested without breaking functions.
[ ] 12. X-Content-Type-Options uses nosniff.
[ ] 13. Referrer-Policy is appropriate for the site context.

Limits
This checklist prioritises public observations. It does not certify GDPR, WCAG, EAA, legal compliance or security and does not replace legal, manual or professional reviews.

https://auditlume.com/en/resources/website-review-checklist