Website & Digital Infrastructure Health Quiz
12 questions, about three minutes. You'll get a health profile and the specific weak points behind it.
How fast does your homepage load on a phone, on mobile data?
*
No idea, never measured [0]
It feels slow [1]
Measured and acceptable [2]
Measured, under three seconds, and tracked over time [3]
How do you find out when your website goes down?
*
Somebody tells us [0]
We check manually now and then [1]
Uptime monitoring emails us [2]
Uptime monitoring alerts a named person with an escalation path [3]
When a visitor hits an error on your site, such as a failed form or a broken checkout, do you find out?
*
No [0]
Only if they complain [1]
We have error logging we check occasionally [2]
Errors are captured, grouped and alerted in real time [3]
When was your last full site backup, and has a restore ever been tested?
*
Not sure backups exist [0]
Backups run, restore never tested [1]
Restore tested once [2]
Automated backups with a tested, scheduled restore [3]
Who renews your domain and SSL certificate, and what happens if they are away?
*
Nobody specific [0]
One person, manually, from memory [1]
One person with a calendar reminder [2]
Auto-renewal plus monitoring that alerts before expiry [3]
Are software updates to the CMS, plugins and server packages applied on a schedule?
*
No [0]
When something breaks [1]
Roughly monthly [2]
On a schedule, tested on a staging copy first [3]
Do you have a staging or test environment separate from the live site?
*
No, changes go straight to live [0]
Sometimes, set up ad hoc [1]
Yes, but it drifts from live [2]
Yes, kept in sync, every change goes through it [3]
Can you tell which pages bring in enquiries or sales?
*
No analytics in place [0]
Analytics installed, nobody reads it [1]
We check traffic numbers [2]
Conversions are tracked to the page and source [3]
Do your forms reliably deliver, and would you know if one stopped?
*
We would not know [0]
We would find out eventually [1]
Submissions are stored as well as emailed [2]
Stored, emailed, and monitored for a drop in volume [3]
How is access to the site's admin controlled?
*
Shared login [0]
Individual logins, no multi-factor authentication [1]
Individual logins with multi-factor authentication [2]
Individual logins, MFA, least-privilege roles, reviewed periodically [3]
If the site were compromised or deleted tomorrow, how long to get it back?
*
We do not know [0]
Days, maybe weeks [1]
Within a day [2]
Within hours, from a documented and rehearsed procedure [3]
Is there written documentation of how the whole thing is put together?
*
None [0]
Scattered notes [1]
Documented, somewhat out of date [2]
Current documentation, kept with the project [3]
Enter your details to see your health profile.
Full Name
*
First Name
Last Name
Email
*
example@example.com
Total Score
See My Health Profile
Should be Empty: