Skip to main content
GeneralMixed

SEO Report: zalando.es

Generated April 28, 2026 · 36 findings · 15.2s

47
report.overallScore
55
seo
34
security
0
performance
50
accessibility
55
Best Practices

Institutional websites prioritize accessibility, security, and proper indexing — citizens and stakeholders need easy access to relevant information.

Score Breakdown

Average General score: 50

seo
55(+10 vs avg)
security
34(-24 vs avg)
performance
0(-44 vs avg)
accessibility
50(-2 vs avg)
Best Practices
55(-1 vs avg)

Score Projection

Estimated improvement based on the findings in this report

Current score: 47Projected score: 56
Current score
Free (+8)
Starter (+1)

Ready to improve your SEO?

Start a free trial and see how your score can improve.

Module Breakdown

cookies
01 finding
headers
09 findings
ssl
01 finding
cookies
01 finding
cookies
01 finding
cookies
01 finding
cookies
01 finding
cookies
01 finding
cookies
01 finding
cookies
01 finding
layout scan
01 finding
cookies
01 finding
cookies
01 finding
cookies
01 finding
social checker
206 findings
structured data
301 finding
indexing checker
602 findings
rate limits
753 findings
news mentions
751 finding
dns
951 finding
uptime checker
100
log analyzer
100

All Findings (36)

Critical (17)

  • highcookies

    Could not fetch cookies

    The operation was aborted due to timeout

    Ensure the website is accessible

  • highheaders

    Missing strict-transport-security

    HSTS header is missing. The site may be vulnerable to downgrade attacks.

    Add Strict-Transport-Security header with max-age of at least 31536000

  • highheaders

    HTTP 403 error

    Server returned HTTP 403

    Fix the server error to return a 200 status

  • highssl

    SSL certificate not found

    Could not retrieve SSL certificate

    Ensure the site has a valid SSL certificate installed

  • highcookies

    Module failed

    The operation was aborted due to timeout

    Try scanning again

  • highcookies

    Module failed

    The operation was aborted due to timeout

    Try scanning again

  • highcookies

    Module failed

    The operation was aborted due to timeout

    Try scanning again

  • highcookies

    Module failed

    The operation was aborted due to timeout

    Try scanning again

  • highcookies

    Module failed

    The operation was aborted due to timeout

    Try scanning again

  • highcookies

    Module failed

    The operation was aborted due to timeout

    Try scanning again

  • highcookies

    Module failed

    The operation was aborted due to timeout

    Try scanning again

  • highlayout scan

    Could not fetch page

    Failed to fetch the page for layout analysis

    Ensure the site is accessible

  • highsocial checker

    Missing og:title

    Open Graph title is not set — social shares will use generic text

    Add og:title meta tag for compelling social media previews

  • highcookies

    Module failed

    The operation was aborted due to timeout

    Try scanning again

  • highcookies

    Module failed

    Module timeout

    Try scanning again

  • highcookies

    Module failed

    The operation was aborted due to timeout

    Try scanning again

  • highindexing checker

    Page set to noindex

    The homepage has a noindex directive — it will not appear in search results

    Remove the noindex directive from the homepage meta robots tag

Medium (9)

  • mediumheaders

    Missing content-security-policy

    CSP header is missing. The site may be vulnerable to XSS attacks.

    Add a Content-Security-Policy header to restrict resource loading

  • mediumheaders

    Missing x-content-type-options

    X-Content-Type-Options is missing. MIME-sniffing attacks are possible.

    Add X-Content-Type-Options: nosniff header

  • mediumheaders

    Missing x-frame-options

    X-Frame-Options is missing. The site may be vulnerable to clickjacking.

    Add X-Frame-Options: DENY or SAMEORIGIN header

  • mediumstructured data

    No structured data found

    No JSON-LD schemas detected on the page

    Add structured data (Organization, WebSite, BreadcrumbList) for rich search results

  • mediumrate limits

    No rate limiting detected

    10 rapid requests all succeeded without any rate-limit headers or 429 responses. The site may be vulnerable to abuse.

    Implement rate limiting (e.g., 429 Too Many Requests) to protect against brute-force attacks

  • mediumsocial checker

    Missing og:description

    Open Graph description is not set

    Add og:description for better social sharing previews

  • mediumsocial checker

    Missing og:image

    No social sharing image set — posts will lack visual appeal

    Add og:image meta tag (1200x630px recommended)

  • mediumsocial checker

    Missing Twitter Card

    No twitter:card meta tag — Twitter/X will use default preview

    Add twitter:card meta tag (e.g., "summary_large_image")

  • mediumindexing checker

    Missing canonical URL

    No canonical link tag found — search engines may index duplicate versions

    Add a self-referencing canonical URL to prevent duplicate content issues

Low (10)

  • lowdns

    DMARC policy is 'none'

    DMARC is set but policy is 'none' (monitoring only).

    Consider upgrading DMARC policy to 'quarantine' or 'reject'

  • lowheaders

    Missing referrer-policy

    Referrer-Policy is not set. Full URLs may leak to third parties.

    Add Referrer-Policy: strict-origin-when-cross-origin

  • lowheaders

    Missing permissions-policy

    Permissions-Policy is missing.

    Add Permissions-Policy to restrict browser feature access

  • lowheaders

    Missing Cache-Control header

    No Cache-Control header — browser caching is undefined

    Add Cache-Control with appropriate max-age for static and dynamic resources

  • lowheaders

    Content-Type missing charset

    Content-Type header does not specify charset

    Add charset=utf-8 to Content-Type header

  • lowrate limits

    No WAF detected

    No Web Application Firewall (Cloudflare, AWS, Akamai, Vercel, Sucuri, Fastly) was detected in response headers.

    Consider using a WAF to protect against common web attacks (XSS, SQL injection, DDoS)

  • lowrate limits

    No bot protection detected

    No CAPTCHA, challenge page, or bot detection was triggered during rapid requests.

    Consider implementing bot protection (e.g., Cloudflare Turnstile, hCaptcha) for sensitive endpoints

  • lownews mentions

    No press or news presence

    No press pages found on the site and no external news mentions detected

    Create a /news or /press page with company updates — this builds authority and earns links

  • lowsocial checker

    Missing og:type

    Open Graph type is not set

    Add og:type meta tag (e.g., "website", "article")

  • lowsocial checker

    No social profile links

    No links to social media profiles found on the homepage

    Add links to your social media profiles for better brand visibility and authority signals

AI Fix Prompt

Copy this prompt into ChatGPT or Claude to get step-by-step fix instructions

Fix all SEO issues found in the audit of zalando.es.

Prioritize high-severity issues first, then medium. For each fix, make the actual code change — don't just describe what to do.

```json
{
  "domain": "zalando.es",
  "scores": {
    "overall": 47,
    "performance": 0,
    "seo": 55,
    "accessibility": 50,
    "bestPractices": 55,
    "security": 34
  },
  "findings": [
    {
      "module": "cookies",
      "severity": "high",
      "title": "Could not fetch cookies",
      "description": "The operation was aborted due to timeout",
      "recommendation": "Ensure the website is accessible"
    },
    {
      "module": "headers",
      "severity": "high",
      "title": "Missing strict-transport-security",
      "description": "HSTS header is missing. The site may be vulnerable to downgrade attacks.",
      "recommendation": "Add Strict-Transport-Security header with max-age of at least 31536000"
    },
    {
      "module": "headers",
      "severity": "medium",
      "title": "Missing content-security-policy",
      "description": "CSP header is missing. The site may be vulnerable to XSS attacks.",
      "recommendation": "Add a Content-Security-Policy header to restrict resource loading"
    },
    {
      "module": "headers",
      "severity": "medium",
      "title": "Missing x-content-type-options",
      "description": "X-Content-Type-Options is missing. MIME-sniffing attacks are possible.",
      "recommendation": "Add X-Content-Type-Options: nosniff header"
    },
    {
      "module": "headers",
      "severity": "medium",
      "title": "Missing x-frame-options",
      "description": "X-Frame-Options is missing. The site may be vulnerable to clickjacking.",
      "recommendation": "Add X-Frame-Options: DENY or SAMEORIGIN header"
    },
    {
      "module": "headers",
      "severity": "high",
      "title": "HTTP 403 error",
      "description": "Server returned HTTP 403",
      "recommendation": "Fix the server error to return a 200 status"
    },
    {
      "module": "ssl",
      "severity": "high",
      "title": "SSL certificate not found",
      "description": "Could not retrieve SSL certificate",
      "recommendation": "Ensure the site has a valid SSL certificate installed"
    },
    {
      "module": "cookies",
      "severity": "high",
      "title": "Module failed",
      "description": "The operation was aborted due to timeout",
      "recommendation": "Try scanning again"
    },
    {
      "module": "structured-data",
      "severity": "medium",
      "title": "No structured data found",
      "description": "No JSON-LD schemas detected on the page",
      "recommendation": "Add structured data (Organization, WebSite, BreadcrumbList) for rich search results"
    },
    {
      "module": "cookies",
      "severity": "high",
      "title": "Module failed",
      "description": "The operation was aborted due to timeout",
      "recommendation": "Try scanning again"
    },
    {
      "module": "cookies",
      "severity": "high",
      "title": "Module failed",
      "description": "The operation was aborted due to timeout",
      "recommendation": "Try scanning again"
    },
    {
      "module": "cookies",
      "severity": "high",
      "title": "Module failed",
      "description": "The operation was aborted due to timeout",
      "recommendation": "Try scanning again"
    },
    {
      "module": "cookies",
      "severity": "high",
      "title": "Module failed",
      "description": "The operation was aborted due to timeout",
      "recommendation": "Try scanning again"
    },
    {
      "module": "cookies",
      "severity": "high",
      "title": "Module failed",
      "description": "The operation was aborted due to timeout",
      "recommendation": "Try scanning again"
    },
    {
      "module": "cookies",
      "severity": "high",
      "title": "Module failed",
      "description": "The operation was aborted due to timeout",
      "recommendation": "Try scanning again"
    },
    {
      "module": "rate-limits",
      "severity": "medium",
      "title": "No rate limiting detected",
      "description": "10 rapid requests all succeeded without any rate-limit headers or 429 responses. The site may be vulnerable to abuse.",
      "recommendation": "Implement rate limiting (e.g., 429 Too Many Requests) to protect against brute-force attacks"
    },
    {
      "module": "layout-scan",
      "severity": "high",
      "title": "Could not fetch page",
      "description": "Failed to fetch the page for layout analysis",
      "recommendation": "Ensure the site is accessible"
    },
    {
      "module": "social-checker",
      "severity": "high",
      "title": "Missing og:title",
      "description": "Open Graph title is not set — social shares will use generic text",
      "recommendation": "Add og:title meta tag for compelling social media previews"
    },
    {
      "module": "social-checker",
      "severity": "medium",
      "title": "Missing og:description",
      "description": "Open Graph description is not set",
      "recommendation": "Add og:description for better social sharing previews"
    },
    {
      "module": "social-checker",
      "severity": "medium",
      "title": "Missing og:image",
      "description": "No social sharing image set — posts will lack visual appeal",
      "recommendation": "Add og:image meta tag (1200x630px recommended)"
    },
    {
      "module": "social-checker",
      "severity": "medium",
      "title": "Missing Twitter Card",
      "description": "No twitter:card meta tag — Twitter/X will use default preview",
      "recommendation": "Add twitter:card meta tag (e.g., \"summary_large_image\")"
    },
    {
      "module": "cookies",
      "severity": "high",
      "title": "Module failed",
      "description": "The operation was aborted due to timeout",
      "recommendation": "Try scanning again"
    },
    {
      "module": "cookies",
      "severity": "high",
      "title": "Module failed",
      "description": "Module timeout",
      "recommendation": "Try scanning again"
    },
    {
      "module": "cookies",
      "severity": "high",
      "title": "Module failed",
      "description": "The operation was aborted due to timeout",
      "recommendation": "Try scanning again"
    },
    {
      "module": "indexing-checker",
      "severity": "high",
      "title": "Page set to noindex",
      "description": "The homepage has a noindex directive — it will not appear in search results",
      "recommendation": "Remove the noindex directive from the homepage meta robots tag"
    },
    {
      "module": "indexing-checker",
      "severity": "medium",
      "title": "Missing canonical URL",
      "description": "No canonical link tag found — search engines may index duplicate versions",
      "recommendation": "Add a self-referencing canonical URL to prevent duplicate content issues"
    }
  ]
}
```

Recommendations for your industry

  • 1Ensure WCAG 2.1 AA compliance
  • 2Implement all recommended security headers
  • 3Ensure sitemap covers all important pages
  • 4Optimize page load time to under 2 seconds
  • 5Ensure responsive design on all pages

SEO Checklist for General

Tips for Mixed websites

  • →Define clear landing pages for each segment
  • →Use different meta strategies per page group
  • →Segment sitemap by content type

Local SEO Context

Spain has growing e-commerce and mobile search dominates.

Start your free trial

Use Ctrl+P / Cmd+P to save as PDF