Example audit · redacted
What an honest audit looks like.
Below is a redacted version of a real Wingenious audit. The business is described by industry, size, and growth rate. The findings, the cited standards, and the commercial consequences are real and unedited. This is the shape of the report you get back when you submit a URL.
Audited site: A UK manufacturer, 130+ employees, £45m revenue, growing 24% YoY. Date: 23 April 2026. Methodology: Web Health Score v1.0.
Master score
40 out of 100. Sub-standard.
Multiple simultaneous findings below the contemporary standard.
- Findability 9/20 Sub-standard
- Performance 9/20 Sub-standard
- Credibility 8/20 Sub-standard
- Clarity 9/20 Sub-standard
- Conversion 6/20 Crisis
Brief, synthesis agent
Executive summary.
A 128-year-old UK HV equipment manufacturer with £45m turnover and a 24% YoY growth rate, presenting a website that scores 40 out of 100. Demand is rising. The website is the bottleneck on its conversion, not the factory. The top three findings below are categorically critical, in the regulatory sense and the commercial sense. Remediation is a small fraction of the cost of waiting.
Top findings
Three CRITICAL issues. Evidence, standard, and the cost of waiting.
- CRITICAL Credibility
Third-party tracker fires before consent banner resolves
Evidence. A commercial IP-to-company reverse-lookup script (secure.24-astute.com/js/795481.js) loads in <head> the moment a visitor lands on any page. A <noscript> tracking pixel on the same service fires for visitors without JavaScript. The site's consent platform gates Google Tag Manager and GA4 correctly but does not register the Astute script with its 'blocked scripts' feature.
Standard. ICO guidance on cookies (July 2023). UK GDPR. PECR 2003. Prior specific informed consent is required before non-essential tracking is loaded.
Cost of waiting. Regulatory exposure accruing daily. An ICO complaint typically triggers an enforcement notice requiring correction within a set period. Statutory penalty ceiling: £17.5m or 4% of global turnover. This is also the first finding a Tier-1 customer data-protection due-diligence review will flag.
- CRITICAL Conversion
Zero high-intent CTAs anywhere on the site
Evidence. Every primary call-to-action resolves to one of three variants: "Learn More" (20+ uses), "Find Out More" (5+), or "Contact Us". Absent: Request a Quote, Download Datasheet, Talk to an Engineer, Book a Factory Visit, Discuss Lead Times, Request a Site Audit, Enquire About Framework Availability.
Standard. Baymard Institute B2B CRO; Nielsen Norman Group; CXL Institute. Published research shows 10-25% enquiry-form uplift from a consistent, action-specific primary CTA.
Cost of waiting. In a £100m-category procurement audience, persistent suppression of qualified enquiries on the highest-traffic page. Remediation is a dozen label changes and eight new CTA endpoints. Two working days from a content lead.
- CRITICAL Findability
No lead-time claim anywhere on the site
Evidence. Global transformer lead-times average 128 weeks. 132 kV UK units average 24 months. 400 kV units average 4 years. The SERP for "transformer lead time UK 2026" is vacant of any UK manufacturer claim. This site publishes no lead-time claim anywhere despite operating a freshly upgraded 132 kV / 120 MVA production line.
Standard. Category-dominant 2026 commercial signal. PowerMag 2026 transformer supply analysis. Ofgem RIIO-T3 determination (Dec 2025) transmission-infrastructure-doubling requirement. NESO Clean Power 2030 brief.
Cost of waiting. The single largest land-grab in the 2026 UK transformer SERP remains unclaimed. A one-page insight plus a home-hero band is a two-week operational exercise. Every month at silence is a month the 2026 capex cycle sends shortlist traffic to competitors who have made the claim.
What the paid tiers add
The free audit is the shortest demonstration of how we work.
A Wingenious-grade audit at top-tier UK agency rates bills at £18k to £35k + VAT. The Pro tier at £149 ships the same methodology, a 90-day roadmap, full WCAG 2.2 AA coverage on every crawled page, GA4 and Search Console connected, and an end-to-end security headers audit. Same rigour, AI-accelerated.