Quick scan. Quick scan: one read of the home page, from extracted page text and metadata. No lab run, no CrUX query, no header or robots.txt fetch, no browser session.
Summary
Performance
0issues
Not measured in this snapshot.
Marketing & technical
3issues
Solid basics. Shorter description, one H1 and a hidden generator tag would tidy it up.
Privacy
2issues
Accept-only notice observed. The browser run would show what loads before a choice.
Plain-language summary
Built only from the findings below. Every line names its evidence.
MediumPrivacyMedium confidence
The notice has one button, “I accept”. No reject or necessary-only option was visible next to it. Worth doing in the next round.
Evidence: HTML extract · Based on observed requests. Not legal advice and not a certificate.
LowMarketing & technicalHigh confidence
A generator meta tag exposes the WordPress version. Small item, can wait.
Evidence: HTML extract · Based on the fetched HTML and headers. It does not claim a ranking change.
LowMarketing & technicalMedium confidence
Two H1 headings: “Data protection” and “Internal audit and compliance advisory”. Small item, can wait.
Evidence: HTML extract · Based on the fetched HTML and headers. It does not claim a ranking change.
LowMarketing & technicalMedium confidence
Meta description is about 240 characters. Search results usually cut it at around 155–160. Small item, can wait.
Evidence: HTML extract · Based on the fetched HTML and headers. It does not claim a ranking change.
LowPrivacyMedium confidence
The notice says cookies can be disabled at any time, but no settings control was visible. Small item, can wait.
Evidence: HTML extract · Based on observed requests. Not legal advice and not a certificate.
Performance · lab
Fixed mobile profile, three runs, median. Lab and field data are kept apart.
Not tested No lab run in this snapshot. Lab metrics need the full audit job.
Performance · field (CrUX)
CrUX was not queried. The full audit asks the URL first, then falls back to the origin.
Not tested CrUX field data was not queried in this snapshot.
Marketing & technical checks
Structured checks on the start URL. Not a full SEO suite.
Check
Status
Priority
Confidence
TitleTitle is present: “Home - Clearpath Compliance Ltd.”. It starts with “Home” instead of the service.
Pass
—
High confidence
Meta descriptionMeta description is about 240 characters. Search results usually cut it at around 155–160.
Issue
Low
Medium confidence
CanonicalCanonical points to https://clearpath-compliance.example/.
H1 & heading outlineTwo H1 headings: “Data protection” and “Internal audit and compliance advisory”.
Issue
Low
Medium confidence
Open GraphOpen Graph title, description, image and URL are set, plus a large Twitter card.
Pass
—
High confidence
Version disclosureA generator meta tag exposes the WordPress version.
Issue
Low
High confidence
Analytics tagsNo analytics tag was visible in the page read, although the cookie notice says cookies measure traffic. A browser run would show what actually loads.
Pass
—
Low confidence
HTTP statusThe page loaded, but the response status and redirect chain were not recorded.
Not tested
—
High confidence
Security headersResponse headers were not fetched in this snapshot.
Not tested
—
High confidence
Sitemaprobots.txt and the sitemap were not fetched in this snapshot.
Not tested
—
High confidence
Privacy observations
Technical observation only. This is not legal advice and not a compliance certificate. When the purpose of a cookie cannot be decided from the evidence, its “necessary” classification is marked as uncertain.
Check
Status
Priority
Confidence
Consent noticeA cookie notice is shown at the bottom of the page with a link to the privacy notice.
Pass
—
High confidence
Reject as easy as acceptThe notice has one button, “I accept”. No reject or necessary-only option was visible next to it.
Issue
Medium
Medium confidence
Reopen cookie settingsThe notice says cookies can be disabled at any time, but no settings control was visible.
Issue
Low
Medium confidence
Three-state browser runNo isolated browser session ran, so the before-choice, reject and accept states were not compared.
Not tested
—
High confidence
Trackers before a choiceNetwork requests before a consent choice need a browser run and were not observed.
Not tested
—
High confidence
Fix cards
Stack-aware steps with owner, risk, rollback and how the next audit verifies it.
Medium priorityWordPress 7.xMedium confidence
Reject as easy as accept
Cookie notice offers “I accept” only; no reject or settings control seen.
Why it matters
Visitors should be able to refuse as easily as they accept. An accept-only notice also makes it hard to show that measurement waits for a choice.
Owner · where
Site owner with the web developer · Cookie notice plugin or theme footer script
Steps
Add a reject (necessary only) button with the same size and prominence as accept.
Add a settings link in the footer that reopens the choice.
Make sure measurement scripts load only after accept.
Risk · rollback
Low. Traffic statistics will drop by the share of visitors who reject. Restore the previous notice configuration.
Verified when
Next audit: privacy.reject_comparable passes and the three-state run shows no measurement request before a choice.
Changes since the previous audit
First run for this site. Changes appear after the next audit.
Evidence
Stored per run with a hash and a retention date. Cookie snapshots are redacted.
Evidence
Type
Hash
Retention
Redaction
Title is present: “Home - Clearpath Compliance Ltd.”. It starts with “Home” instead of the service.snapshot://clearpath-compliance.example/run-clearpath-2026-11-10/html_extract
HTML extract
sha256:demo:9e697406
2026-12-10
not applicable
Meta description is about 240 characters. Search results usually cut it at around 155–160.snapshot://clearpath-compliance.example/run-clearpath-2026-11-10/html_extract
HTML extract
sha256:demo:6f77b580
2026-12-10
not applicable
Canonical points to https://clearpath-compliance.example/.snapshot://clearpath-compliance.example/run-clearpath-2026-11-10/html_extract
HTML extract
sha256:demo:a14586d2
2026-12-10
not applicable
Meta robots allows indexing: index, follow, max-image-preview:large.snapshot://clearpath-compliance.example/run-clearpath-2026-11-10/html_extract
HTML extract
sha256:demo:3c481581
2026-12-10
not applicable
Two H1 headings: “Data protection” and “Internal audit and compliance advisory”.snapshot://clearpath-compliance.example/run-clearpath-2026-11-10/html_extract
HTML extract
sha256:demo:e393c3fb
2026-12-10
not applicable
Open Graph title, description, image and URL are set, plus a large Twitter card.snapshot://clearpath-compliance.example/run-clearpath-2026-11-10/html_extract
HTML extract
sha256:demo:99a4989e
2026-12-10
not applicable
A generator meta tag exposes the WordPress version.snapshot://clearpath-compliance.example/run-clearpath-2026-11-10/html_extract
HTML extract
sha256:demo:b690e36d
2026-12-10
not applicable
No analytics tag was visible in the page read, although the cookie notice says cookies measure traffic. A browser run would show what actually loads.snapshot://clearpath-compliance.example/run-clearpath-2026-11-10/html_extract
HTML extract
sha256:demo:a7ca61f0
2026-12-10
not applicable
A cookie notice is shown at the bottom of the page with a link to the privacy notice.snapshot://clearpath-compliance.example/run-clearpath-2026-11-10/html_extract
HTML extract
sha256:demo:cf6366f1
2026-12-10
redacted
The notice has one button, “I accept”. No reject or necessary-only option was visible next to it.snapshot://clearpath-compliance.example/run-clearpath-2026-11-10/html_extract
HTML extract
sha256:demo:b2623e18
2026-12-10
redacted
The notice says cookies can be disabled at any time, but no settings control was visible.snapshot://clearpath-compliance.example/run-clearpath-2026-11-10/html_extract