Set up SPF and DMARC
SPF and DMARC tell receiving mail servers who may send email for your domain. Without them, your address is easier to fake.
Link your languages with hreflang
If your site has several languages, hreflang tells search engines that the pages are versions of each other, so visitors land on theirs.
Make your pages faster on phones
Most slow pages have the same causes. Work through them in this order, because the first steps usually save the most.
Add security headers
A few response headers tell browsers how to protect your visitors. Most hosts let you add them without touching your pages.
Publish a sitemap and robots.txt
A sitemap lists the pages you want found, and robots.txt tells crawlers where they may go. Together they help Google and Bing find your site.
Make trackers wait for a choice
A scan can’t see your consent settings, but it can see what loads before anyone chooses. Rules differ by country, so ask a qualified person what applies to you.