Skip to content

The Lens

See what is beneath the surface.

Type any website. In about ten seconds, The Lens reads its public page the way a browser does — and reports what is really there: how it is secured, how fast it answers, how it is found, and who it leaves behind.

lens.vspr.ae / scan

Ready

The Lens reads only this one public page — nothing private, nothing behind a login.

Try

Four readings, one public page

Security

10 checks

Performance

6 checks

Search

7 checks

Accessibility

5 checks

01How it works

An honest ten-second read.

The Lens reads what any visitor’s browser receives — nothing more. It is a first look, not a penetration test.

  1. 01

    One public page

    It fetches only the address you enter: no crawling, no logins, nothing private. Internal and local addresses are refused by design.

  2. 02

    Headers and markup

    It reads the response headers and the HTML itself — transport security, caching, compression, metadata, structure and semantics.

  3. 03

    Measured, not simulated

    Performance signals come from the real response — time to first byte, page weight, render-blocking resources — not a lab score.

  4. 04

    Graded with weights

    Every check carries a weight; security weighs heaviest. Each category, and the page overall, earns a score out of 100 and a grade.

02What it checks

The full check registry.

Every reading The Lens takes, why it matters, and the standard we hold our own builds to. 28 checks

Security

10 checks
HTTPS
Encrypts traffic so no one between the visitor and the site can read or alter it.
HSTS
Tells browsers to only ever connect over HTTPS, closing the first-visit downgrade window.
Content-Security-Policy
A Content-Security-Policy restricts which scripts and resources may load, blunting most XSS.
Mixed content
HTTP assets on an HTTPS page break the padlock and can be hijacked in transit.
Clickjacking protection
Stops other sites embedding yours in an invisible frame to trick users into clicks.
X-Content-Type-Options
Stops browsers guessing a file’s type and running it as something dangerous.
Referrer-Policy
Controls how much of your URL leaks to other sites your visitors click through to.
Cookie security
Secure, HttpOnly and SameSite flags keep session cookies from theft and leakage.
Permissions-Policy
Declares which browser features the page may use, shrinking the surface for abuse.
Server disclosure
Version banners like X-Powered-By hand attackers a map of what to exploit.

Performance

6 checks
Time to first byte
A slow first byte means the visitor stares at a blank screen before anything renders.
Page weight
Heavy HTML costs data and time — painfully so on mobile networks.
Compression
Gzip or Brotli can shrink text payloads by 70% or more — leaving it off wastes every visit.
Render-blocking resources
Scripts and styles in the head hold up the first paint until they finish loading.
Cache headers
Cache-Control lets repeat visits load instantly instead of re-downloading everything.
Viewport meta
Without a viewport tag, phones render the page at desktop width and zoom out.

Search

7 checks
Title tag
The title is your headline in search results and browser tabs — the first thing people judge.
Meta description
The snippet under your search result — a weak one costs clicks even at rank one.
Canonical URL
A canonical tag tells search engines which URL is the real one, avoiding duplicate-content splits.
Open Graph
Open Graph tags decide how your link looks when shared on social and chat — bland or striking.
Single H1
One clear H1 tells search engines and screen readers what the page is fundamentally about.
Structured data
Schema.org markup unlocks rich results — stars, prices, breadcrumbs — that win the click.
robots.txt
A robots.txt guides crawlers and points them to your sitemap — its absence leaves them guessing.

Accessibility

5 checks
Language attribute
The html lang attribute lets screen readers pronounce your content correctly.
Image alt text
Alt text is how blind visitors — and search engines — understand your images.
Zoom enabled
Disabling pinch-zoom locks out anyone who needs to enlarge text to read it.
Heading order
A logical heading order is the outline screen-reader users navigate by.
Document title
The document title orients screen-reader users and labels the browser tab.

If you can imagine it, we engineer it.

This is a 10-second read of the surface. We engineer what is beneath it.

Start a projectHi@vspr.ae