What's the fastest way to check if a website has a valid SSL certificate?

Look for the padlock icon in the browser address bar, or check whether the URL loads over https:// without a browser warning. An expired or missing certificate will show an explicit "not secure" warning.

What actually makes a website look outdated to a checker?

A combination of signals: no HTTPS, no mobile viewport meta tag (meaning it's not responsive), no structured data (schema.org markup), and an old copyright year still showing in the footer are the most common and most checkable signals.

Why check for broken internal links specifically on the contact and about pages?

Those are the pages most likely to be clicked by an actual prospective customer — a broken link on a rarely-visited page matters less than a dead link on the page someone uses to reach out or learn who they're dealing with.

The 5-Minute Website Health Audit: SSL, Broken Links, and "Looks Outdated" Checks Before You Cold-Email

"Your website looks outdated" is a weak pitch on its own — it's subjective, and a business owner who built the site themselves five years ago will often disagree. A specific, checkable finding — "your site doesn't have a valid security certificate, so browsers are showing visitors a warning" — is a completely different, much more credible conversation starter. Here's a fast checklist to generate exactly those findings.

1. Is the site even reachable?

Before anything else: does the URL load at all? A surprising number of small business websites go down — a lapsed hosting bill, an expired domain, a broken DNS record — and stay down for months because nobody's actively monitoring it. A business with a completely unreachable website is, functionally, a business without a website, and often an easier sell than one with a merely dated site, since there's no argument about whether a redesign is warranted.

2. Does it have a valid SSL certificate?

HTTPS has been a baseline expectation (and a confirmed search ranking factor) for years now. A site still running on plain HTTP, or with an expired certificate, shows visitors an explicit browser warning before they even see the content — actively costing the business visitors and looking unprofessional to anyone who notices. This is one of the most concrete, unambiguous findings you can lead a pitch with.

3. Is it mobile-responsive?

Checking for a viewport meta tag in the page source is a fast, reliable proxy for "was this site built with mobile in mind." Its absence almost always means the layout breaks or requires pinch-zooming on a phone — and given that most local searches happen on mobile, a non-responsive site is actively losing the business potential customers, not just looking dated.

4. Are there broken internal links, especially on Contact or About?

A 404 on some deep, rarely-visited page is a minor issue. A broken link on the Contact page — or a contact form that doesn't actually submit — is a business actively losing inquiries without knowing it. Checking the handful of links a real visitor would actually click (Contact, About, main navigation) is far more useful than an exhaustive crawl of every page on the site.

5. Does it show clear signs of neglect?

A copyright year still reading 2018 in the footer, a "Powered by" tag naming a long-discontinued website builder, or a blog with no post in years are all fast, visible signals that nobody's actively maintaining the site — useful context even when the site is technically functional.

None of these signals alone proves a site needs a rebuild — but two or three together make a specific, credible case that's much easier to open a conversation with than a subjective opinion.

Doing this at scale instead of one site at a time

Checking one website by hand takes a couple of minutes. Checking two hundred, one at a time, is a full day gone before you've sent a single email. This is exactly the kind of repetitive check that's worth automating: run it automatically for every business a search returns, and only see the findings for the ones that actually have an issue worth mentioning.

Prospectbase can check every result's SSL, reachability, mobile-readiness, and broken links automatically as part of a search.

Automate the health check

The goal isn't to shame a business owner about their website — it's to open with something specific and true, so the conversation starts from a real, verifiable observation instead of a generic pitch they've heard a hundred times before.

Doing it manually vs. using a tool

For a single site, checking SSL and mobile-responsiveness by hand takes under a minute — open the site, glance at the address bar, resize the browser or check on your phone. The manual approach breaks down entirely once you're evaluating a list rather than a single prospect: two hundred sites, checked one at a time, is a full day before a single email goes out. A tool that runs the same checks automatically for every business a search returns turns that day into a filter you apply instantly — you only spend time on the sites that actually have a finding worth mentioning.

How to present findings without sounding like a sales pitch

The tone matters as much as the finding itself. "Your website is missing a security certificate, so visitors on some browsers see a warning before they can even see your page" is a factual, helpful observation. "Your outdated website is costing you customers" is a sales line, and reads as one. Leading with the specific, verifiable fact — and letting the business owner draw their own conclusion about the cost — consistently lands better than stating the conclusion for them.