Altus Website Grader v1.0.0 — stripped open-source release

Free website grader for small businesses: score any public website on 15 speed, SEO, mobile and trust signals in under a minute, with the full report shown on screen.

WHAT'S IN THIS RELEASE

• 15 homepage checks across speed (server response time, homepage size, compression), trust (HTTPS, SSL certificate validity, HSTS), SEO (page title, meta description, single H1, image alt text, language attribute, Open Graph tags) and mobile/findability (viewport, favicon, robots.txt + sitemap).
• Score out of 100 and grade A–F, top 3 issues highlighted, full 15-point report on screen via 'Show my full report'.
• Shortcode: [altus_website_grader]. Requires WordPress 5.8+ and PHP 7.4+. No settings page, no API key, no account.

STRIPPED VERSION — WHAT WAS REMOVED FROM THE ALTUS ORIGINAL

• Email gate / unlock form removed: the full report is shown on screen, no email required.
• Lead storage removed: no database table, no DB insert of visitor data, no saved files with user input.
• All email sending removed: no report emailed to the visitor, no lead notification to the owner.
• The original Altus version on altuswebsolutions.com keeps its lead capture; this open-source version does not, by design.

DATA HANDLING
This GitHub version contains NO lead capture, NO email sending, and NO data storage — results are shown on screen only. The only server-side state is a rate-limit counter (5 checks per IP per hour). The only external fetch is the public homepage (plus public robots.txt / sitemap / favicon) of the URL the visitor types in, graded and discarded, never saved. Private, reserved, loopback and link-local addresses are blocked, including after redirects.

TESTING (fresh Jurassic Ninja test sites, never the live Altus site)

• php -l clean on every PHP file.
• Plugin Check FULL (Plugin Check v1.7.0, WordPress 7.1.4): activation clean; 11 errors and 1 warning after fixes. All fixable findings were fixed (GPL licence header, wp_parse_url, wp_strip_all_tags, standard direct-access guard, input sanitising, readme.txt, Tested up to corrected to 7.1). Remaining findings are explained, not hidden: 10 cURL findings are deliberate — cURL is the only way to measure real TTFB and SSL certificate expiry (wp_remote_get provides neither, and is kept as a fallback) — and the set_time_limit warning is deliberate for the 40-second grading budget.
• Smoke test: wordpress.org graded 97%, Grade A (14 passed, 1 needs attention — image alt text 8/16), full 15-check report rendered, no email form present.

INSTALL (2 MINUTES)
Download altus-website-grader-v1.0.0.zip below → WordPress → Plugins → Add New → Upload Plugin → Install Now → Activate → add [altus_website_grader] to a page.

DISCLAIMER
Free, 'as is', WITHOUT warranty; authors NOT liable for any loss, damage or cost from its use. This is an automated homepage health check, not professional SEO, security or legal advice. Back up first and test on staging where possible. Licence: GPLv2 or later (see LICENSE in the repo).