How Ovenir measures
Six free tools, one scale. Each one looks at what your site shows to an AI, a screen reader, a stranger or a phone. We change nothing on your site. Whatever couldn’t be measured counts neither for nor against you.
Three rules shared by all six tools
- We only grade what we saw. A check that doesn’t apply to your site (no form, no image) leaves the calculation: the total is made on the remaining points.
- Every finding comes with its fix. Under each result, a “fixes for your site” block is written for the person who will do the work: the exact line to add, and where.
- Every measurement is dated. The domain’s public history keeps each measurement with its date. The badge shows the latest one, and anyone can check it.
Grades, from A+ to E
The score runs from 0 to 100. The letter reads the same way across all six tools.
| Grade | Score | What it means |
|---|---|---|
| A+ | 90 and up | Nothing is missing of what an automated check can see. |
| A | 80 and up | A few points to fix; none of them closes the door. |
| B | 70 and up | It holds, with visible flaws. |
| C | 55 and up | Whole areas are missing; the fixes are known. |
| D | 40 and up | The gaps pile up on the essentials. |
| E | under 40 | The essentials are not in place. |
What each tool looks at
What AI knows about you
We read up to four pages of your site the way the ChatGPT, Claude and Perplexity crawlers do. Are they allowed in? Do they find your name, address and phone number? Are these written so a machine can copy them without errors?
What it doesn’t see. We don’t ask the AIs themselves. That’s what the free ChatGPT test does: three real questions put to ChatGPT, with the answers sent to you by email.
Do your emails arrive?
We read what your domain declares publicly. Who may send in your name (SPF)? Are your messages signed (DKIM)? What should happen to impersonators (DMARC)? We also check transport encryption and blocklist presence.
What it doesn’t see. The tool reads no messages and doesn’t judge your sending server’s reputation. It says what you’ve declared, not what you send.
Is your site properly locked?
We look at what your server answers a visitor: padlock, instructions given to the browser, cookies, information that leaks.
What it doesn’t see. No penetration test: we don’t look for vulnerabilities, we report what is visible from outside.
Can everyone read your site?
We run your homepage and up to seven other pages through automated checks: images without descriptions, unlabeled fields, headings, language. Each point maps to the criterion it serves in the RGAA, the official French standard.
What it doesn’t see. Automated checks cover roughly a third of the RGAA. Reading order, keyboard use and the meaning of texts need a human eye.
What the data protection authority would see
We open the page in a real browser and count trackers before any choice. Then we refuse cookies and count again. Finally we read the legal notice and privacy policy for what the law requires.
What it doesn’t see. It is neither legal advice nor a certification: we report what a robot sees, as a first inspection would. We don’t read your contracts.
Is your site fast enough?
We load the page three times on a simulated phone over slow 4G, from our server, and keep the middle result. The score rests on structure: weight, images, cache, compression, blocking scripts, fonts, third-party services.
What it doesn’t see. Stopwatches depend on place and device: they’re shown as reference points, with their method, and don’t count in the score. Only your server’s response time does.
What none of the six does
No tool connects to your site as anything but a visitor, and none changes anything. Results are neither legal advice nor a certification: they say what an automated check saw. No tool promises a ranking: it says what’s missing, and the rest is up to you.