CMS
Webflow Website Audit
Webflow audit: headers you cannot set in the Designer
· Configuration notes, not a newsroom.
SiteRune fingerprints Webflow from data-wf-page and the runtime. CSP, HSTS, and frame-ancestors usually need Cloudflare in front. The playbook says that without a CDN essay.
WEWhat SiteRune checks on this stack
- CMS / framework fingerprint from HTML, headers, cookies, and generator tags — fingerprint-based, not a plugin inventory
- Titles, meta descriptions, canonicals, H1, and robots on the homepage and walked interiors
- Security headers a crawler can see: HTTPS, HSTS, CSP, framing, nosniff, Referrer-Policy, Permissions-Policy
- HTML TTFB, compression, and Cache-Control on the document — not a Lighthouse filmstrip
- AI-bot robots policy, llms.txt, and Organization / FAQ / Article JSON-LD
Common problems
- Marketing homepage looks finished; interior templates ship empty titles or leftover noindex
- Hosted CMS cannot set HSTS/CSP, so the brief tells you to put a proxy in front instead of inventing an admin UI
- A security plugin's 'block AI' preset Disallows GPTBot on a site that wanted citations
- Session cookies or no-store on every anonymous GET, so the CDN never caches HTML
What the Designer will not do
Webflow gives you CMS, hosting, and a decent export. It does not give you arbitrary response headers. SiteRune will still score missing HSTS and CSP. The fix is almost always a proxy (Cloudflare transform rules, or another CDN) — not another Webflow app.
What we still expect in HTML
Titles, descriptions, canonicals, one H1, Organization JSON-LD, llms.txt at the origin, robots that do not ban GPTBot. Those are page settings and hosted files, not headers. If the hero is an image with no words in the HTML, seo-thin will fire even though the Designer looks full.
FAQ
How do you know this is my stack?
Fingerprints in HTML, headers, cookies, and generator tags. Confidence is a score, not a certificate. Unknown stacks stay generic — we will not invent a CMS.
Do I need an account?
Three guest scans, no card. Create a free account when you want history and more interiors.
Run it on a live URL
Same scan engine. Guest scans stay free.