Traffic analytics, SEO checks and security monitoring built for small businesses, bloggers and marketers. Start free - upgrade only when you need more websites.
Create your free accountSee pricingKnow exactly who visits your site, where they come from and what they read.
See exactly which external links your visitors click, which files they download, and track custom events with a simple snippet.
Visual heatmaps show exactly where visitors click on every page, plus scroll depth charts that reveal how far down people read before leaving. Add one extra script tag and start collecting data instantly.
Captures the terms visitors type into your site search (a goldmine of content ideas), highlights searches that led nowhere, and tracks the error pages real visitors hit and where they came from - so you can fix broken links at the source.
Shows your week-over-week and month-over-month traffic change, your busiest days and hours with a heatmap, and watches for anomalies - emailing you when yesterday’s traffic spikes or drops unusually, whether that’s a campaign taking off, a bot attack or a site problem.
Splits your traffic into new and returning visitors with a daily trend, shows how many people visit once versus many times, your overall return rate and average days between visits, and compares how deeply new and returning visitors engage. Retention is cheaper than acquisition - this shows you have it.
Shows the most common journeys through your site, what visitors do after any page, and where they enter - plus a funnel builder: list your steps (like pricing to signup to thank-you) and see exactly how many visitors reach each stage and where they abandon.
Define goal pages (like /thank-you or /checkout/success) and instantly see your conversion rate, conversions over time, which traffic channels convert best and which landing pages drive the most conversions - calculated from your full history the moment you add a goal.
Groups your pageviews into sessions and shows your bounce rate, single vs multi-page visits, pages per session and average engaged time, plus a bounce trend and your worst landing and exit pages - so you know exactly where visitors lose interest and leave.
Breaks every visit into a clear channel - organic search, social media, paid ads, referrals and direct - with a channel donut, per-channel visitor counts, a stacked daily trend and the top sources within each channel. Finally see which marketing channels actually bring your audience.
Tracks UTM-tagged links and automatically detects Google, Facebook, Microsoft, TikTok and LinkedIn ad clicks. See visits, pages per visit and bounce rate for every campaign, get warned about low-quality or bot traffic, and build tagged links in seconds. Stop paying for clicks that never turn into visitors.
Every Monday morning you get one email covering all your websites: visitors and pageviews compared with the week before, top pages, top traffic sources, uptime and your latest SEO, security and speed scores.
Watch visitors arrive in real time: which page they are on, whether they came from Google, social media or another site, and where they are - updating every 10 seconds. Perfect for watching a campaign go live.
Find out which countries and cities your audience comes from - ideal for local businesses, ad targeting and spotting suspicious traffic from places you don't serve.
Interactive charts show your traffic by hour for the last day or by day for up to 90 days. Spot spikes, drops and the effect of every campaign at a glance.
Know whether your visitors are on phones, tablets or desktops, and which browsers and operating systems they use - so you can make sure your site looks right for them.
See which pages people actually read and which websites, search engines and social networks send you traffic - so you know what's working and where to focus.
Add one line of code to your site and see pageviews, unique visitors and a day-by-day breakdown. Lightweight, privacy-friendly and it never slows your pages down. Exclude your own visits with one click.
Find and fix the problems that stop search engines from ranking you.
Scan any page for structured data, check it against schema.org recommendations, and get actionable suggestions to improve your rich snippets.
Connect Google Search Console to see every keyword your pages rank for, with clicks, impressions, CTR and average position. Track position changes over time and spot drops before they cost traffic.
Enter a page and a target keyword and get a full content grade: keyword density with stuffing warnings, whether the term appears in your title, meta, H1, first paragraph, subheadings, URL and alt text, plus word count and a readability score - with clear, prioritized fixes to help the page rank.
Validates your robots.txt and sitemap.xml, follows sitemap indexes, samples live URLs for 404s and redirects, and checks the two files agree - catching the crawl-blocking mistakes that quietly keep pages out of Google. Essential before any traffic campaign.
Crawls your pages and measures every image - size, dimensions and format - flagging oversized files, JP/PNG that should be WebP, missing alt text and images without width/height. Shows the total image weight and how much you could save. Lighter images mean faster pages and better rankings.
Preview the share card for any page on your site, and check the Open Graph and Twitter Card tags behind it - including whether your share image loads and is big enough. Better previews mean more clicks from every post.
Runs Google Lighthouse on mobile and desktop: Performance, Accessibility, Best Practices and SEO scores, Core Web Vitals, real-visitor data when available, and the top fixes ranked by time saved. Faster sites rank higher and convert better.
Crawls up to 50 pages of your site and finds the problems that quietly hold rankings back: missing or duplicate titles and descriptions, missing H1s, thin pages, accidental noindex tags, broken and slow pages - with a health score and a plain-English fix for every issue.
Crawls up to 50 pages of your site and tests every link. Broken links frustrate visitors and hurt your rankings - we show you each one and exactly which page it's on.
Scans your site for titles, meta descriptions, headings, mobile setup, canonical tags, image alt text, sitemap, robots.txt and more - then gives you a score and plain-English fixes.
Protect your site, your domain and your visitors from attackers and scammers.
Scan 21 common ports for exposure risks and inspect your SSL certificate details including expiry, issuer, and SANs.
Scan your site for external resources, check existing security headers, and generate a customised CSP with Nginx/Apache/meta snippets ready to paste.
Re-scans your subdomains every day and alerts you the moment a new takeover-vulnerable subdomain, dangling DNS record or expired-certificate subdomain appears - the forgotten corners attackers use to hijack a brand. Turn it on once and forget it.
Get every important security event - attacks, auto-blocks, downtime, regressions and new breaches - delivered instantly to a webhook of your choice, auto-formatted for Slack and Discord and signed so you can verify it. Perfect for teams that live in chat or run a SIEM.
Rolls up the latest results from all your checks - SSL and security headers, email authentication, SEO, page speed, uptime, exposed files, blacklist and breach status - into one professional, white-label PDF report with an overall score and grade. Perfect for agencies reporting to clients.
Checks your domain against the known-breach database, listing every breach that involved it - what leaked, when, and how many accounts - with clear next steps. Turn on the daily watch and we’ll email you the moment your domain shows up in a new breach.
Watches your traffic for real attacks - SQL injection and XSS payloads, known hacking tools like sqlmap and nikto, and automated vulnerability scans - and shows a live threat feed with the source IPs. Install the lightweight agent to monitor every request in real time, including brute-force logins and 404 probing.
Learns what your chosen pages normally look like, then checks daily for the tell-tale signs of a hack: new external scripts, hidden or spammy links, injected iframes and redirects, and sudden content changes. You approve legitimate changes so you’re only alerted to the ones that matter.
Discovers your subdomains from public certificate logs and common names, then checks each one for subdomain-takeover risk (a forgotten record pointing to an unclaimed service an attacker could hijack), dangling DNS records and expired SSL. Forgotten subdomains are a favourite way into a brand.
Turn it on once and we re-check your site every day, tracking your security score over time and emailing you only when something regresses - a security header disappears, your SSL certificate weakens, a file becomes publicly exposed, or your score drops. Set it and forget it.
Checks around 45 commonly leaked paths - .env files, .git folders, database dumps, site backups, config and debug files and open directory listings - and reports only the ones that are truly public, each with a one-line fix. A single exposed .env or backup can hand over your whole site.
Detects your platform, plugins, theme and server software and compares every version with the latest release - flagging outdated and closed plugins, end-of-life PHP and vulnerable jQuery. WordPress sites also get hardening checks for XML-RPC, username leaks, exposed readme and debug files.
Checks whether your site - or the sites you link to - are listed for malware, phishing or unwanted software. A listing puts a red warning screen in front of your site and wipes out traffic overnight.
We check your site every 5 minutes and email you the moment it goes down - and again when it's back. You'll also get a warning before your SSL certificate expires.
Checks up to 200 look-alike versions of your domain - typos, swapped letters, other extensions - and shows which ones are registered, ranked by risk. Catch phishing sites before your customers do.
Checks SPF, DMARC and DKIM (which stop scammers sending email as you), your registrar lock, domain expiry date, DNSSEC and CAA records - the settings that keep your domain yours.
Checks your SSL certificate and expiry, HTTPS setup, security headers, cookie protection, mixed content and publicly exposed files like .env and .git - with a security score and fixes.
Every paid plan includes every tool.
Free tools · 1 website
or $79.95/yr · up to 5 websites · all tools
or $199.95/yr · up to 10 websites · all tools
What we're building next. Have an idea? Email admin@007aj.com.
A dedicated security plugin for WordPress ----> Get your copy now at our new release rate of just $30 at www.007aj.com/plugins/007aj-security-pro
Fully Featured Analytics and Traffic Plugin For Your Wordpress Website
We're constantly adding new tools - and many come straight from member suggestions. Tell us what would help you most.
Email admin@007aj.com