BlueBridge Group WebScore360 Get your website scoredGet scored
BlueBridge Group WebScore360 · Measure. Improve. Excel.

How the BlueBridge Group Website Excellence Index (BWEI) works

Version 1 (2026) · in use nowMethod 2.1

BlueBridge Group WebScore360 rates a website out of 100 on the BlueBridge Group Website Excellence Index (BWEI). We look at the site the way a visitor does, from outside: one page at a time, reading only what anyone can see. We never log in, never send a form, never try to break in and never change anything. These are passive checks only.

The six areas and their weights

AreaWeightWhat loses points
Speed20%Server response (good under 0.8 s) · Download on a first visit (good under 1.5 MB) · Files on the home page (good under 50) · and 4 more
Security15%No HTTPS · HTTPS certificate ends within 30 days · http:// doesn’t move to https:// · and 5 more
Experience20%Not set up for phone screens · Zooming in is blocked on phones · A rotating slider is the first thing people see · and 9 more
Bookings & enquiries15%No way to book or order online · No Book button at the top of the page · Services and prices on separate pages · and 5 more
Found on Google & AI15%No page title · No description for Google · No main heading (H1) on the home page · and 14 more
Trust & content15%Links to the theme maker’s pages · A social link that goes nowhere · An email link to a wrong or unregistered address · and 9 more

Each area has fixed rules with points. An area scores 100 minus the points it loses, out of what could be measured. A check we could not measure is listed and left out; it is never counted as a pass. An area with less than 60% of its points measured shows “Not enough data”. The overall score is the weighted average of the areas.

Every rule

Speed 20%

  1. Server response (good under 0.8 s) · up to 35 points
  2. Download on a first visit (good under 1.5 MB) · up to 20 points
  3. Files on the home page (good under 50) · up to 10 points
  4. Files that must load before anything shows (good: 5 or fewer) · up to 10 points
  5. No modern image formats (WebP or AVIF) · 5 points
  6. Largest image (good under 300 KB) · up to 5 points
  7. Google’s speed score on a phone (good 90+); from real visitors when Google has their figures: Real visitors’ speed on phones (Google’s Core Web Vitals: main content, answering a tap, page jumping) · up to 15 points

Security 15%

  1. No HTTPS · 15 points
  2. HTTPS certificate ends within 30 days · 5 points
  3. http:// doesn’t move to https:// · 5 points
  4. Security headers missing (of 6) · up to 20 points
  5. Out-of-date add-ons (published advisories for the version shown) · up to 30 points
  6. Versions and doors on show (version, readme, XML-RPC, login page) · up to 15 points
  7. More than 10 add-ons to keep updated · 5 points
  8. Insecure (http://) files on secure pages · 5 points

Experience 20%

  1. Not set up for phone screens · 25 points
  2. Zooming in is blocked on phones · 5 points
  3. A rotating slider is the first thing people see · 10 points
  4. Jobs done twice (chat, booking, analytics, icons, fonts) · up to 15 points
  5. Images without a description (alt text); with the browser test: Pictures without a description (browser test) · up to 10 points
  6. Icon-only links and buttons with no words for screen readers; with the browser test: Links and buttons with no words for screen readers (browser test) · up to 5 points
  7. No page language · 5 points
  8. Form fields without a label; with the browser test: Form fields without a label (browser test) · up to 5 points
  9. Google’s accessibility score on a phone (good 90+) · up to 20 points
  10. Text too faint to read on a phone (browser test, WCAG contrast) · up to 10 points · new in method 2.1
  11. Buttons and links too small to tap (browser test, WCAG 2.2) · up to 5 points · new in method 2.1
  12. Headings that skip levels or are empty (browser test) · up to 5 points · new in method 2.1

Bookings & enquiries 15%

  1. No way to book or order online · 25 points
  2. No Book button at the top of the page · 10 points
  3. Services and prices on separate pages · 15 points
  4. The booking form (real treatments, prices, deposit) · up to 15 points
  5. A voucher, shop or booking link that leads nowhere · 15 points
  6. No WhatsApp link · 10 points
  7. No tap-to-call link · 5 points
  8. No enquiry or booking form · 5 points

Found on Google & AI 15%

  1. No page title · 15 points
  2. No description for Google · 10 points
  3. No main heading (H1) on the home page · 15 points
  4. Links to pages that are gone · 10 points
  5. Pages sharing a title · 5 points
  6. Page addresses that don’t match their page · up to 10 points
  7. robots.txt points at sitemaps on another address · 5 points
  8. No sitemap · 10 points
  9. No canonical address · 5 points
  10. No business details for Google (structured data) · 5 points
  11. No Google Business profile · 10 points
  12. AI search tools kept out by robots.txt (ChatGPT, Claude, Perplexity, Gemini) · up to 10 points · new in method 2.1
  13. Business facts for Google and AI in schema.org (name, address, phone, social pages) · up to 10 points · new in method 2.1
  14. Name, address and phone the same on the site and elsewhere · up to 10 points · new in method 2.1
  15. Pages without a description for Google (deeper look) · up to 6 points · new in method 2.1
  16. The sitemap against the real pages (deeper look) · up to 6 points · new in method 2.1
  17. Links that go through more than 2 redirects (deeper look) · up to 4 points · new in method 2.1

Trust & content 15%

  1. Links to the theme maker’s pages · 20 points
  2. A social link that goes nowhere · 5 points
  3. An email link to a wrong or unregistered address · up to 15 points
  4. No street address · 15 points
  5. No opening hours · 5 points
  6. No map · 5 points
  7. No reviews or testimonials shown · 15 points
  8. Copyright year more than a year old · 5 points
  9. Details collected without a privacy notice · 5 points
  10. No “About us” page · 5 points
  11. No links to your own social pages · 5 points
  12. Links to other websites that are gone (deeper look) · up to 5 points · new in method 2.1

Found on Google & AI

More people now ask an AI assistant which business to choose. We check that the AI search tools (ChatGPT, Claude, Perplexity, Gemini) may read the site in its robots.txt, that the home page gives its business facts in schema.org (name, address, phone and social pages), and that the name, address and phone on the site match the business’s other listings. Keeping AI training crawlers out is the owner’s choice and costs no points. An llms.txt file is shown in the report but never scored.

In the paid report a person also asks an AI assistant, with web search, the three questions a customer would ask about a business like this one in its area, and shows whether the business is named. Only the kind of business and its area are sent to the AI. Answers change from day to day, so this part is shown, not scored.

Method 2.1: what changed

The method is how we measure and score. Each assessment keeps the method it was checked with; one made before a change keeps its score until it is checked again.

Method 2.1 · Real visitors, AI and evidence 14 November 2026 · in use now

  • Google’s real-visitor speed: where a site has enough visitors, Google’s own measurements from real phones (Core Web Vitals); Google’s lab test otherwise.
  • Accessibility in a real browser: contrast, labels, picture descriptions, tap size and headings, checked on the phone view.
  • “Found on Google & AI” (was “Found on Google”): AI search tools allowed in, business facts in schema.org, and the same name, address and phone on the site and elsewhere. Same weight.
  • Local checks: what a visit costs in mobile data, how the site works on a slow phone network, WhatsApp links, mobile money and local phone numbers; in the UK, the cookie banner and privacy notice.
  • A deeper look in the paid report: up to 50 pages for broken links, titles used twice, missing descriptions, the sitemap against the real pages, insecure files and long redirect chains.
  • Evidence under every finding (a screenshot crop, a header, a timing, a piece of the page or a list of addresses); every timing a rule uses is taken three times and the middle one counts; a re-run that moves the score by more than 3 points is flagged for the reviewer.

Method 2.0 · Scoring v2 2 November 2026

  • Six areas with fixed rules and points; a check we can’t measure is left out and listed, never counted as a pass.
  • Grade limits for things that matter most (no HTTPS, no phone layout, published security advisories, a very slow server).
  • The server’s response time taken three times, the middle one counted.

The grades (version 1)

A+95–100Digital Elite
Exceptional digital experience
A85–94Digital Excellence
High-performing website
B70–84Digital Proficient
Strong, with room to improve
C55–69Digital Developing
Works, but needs optimising
D40–54Digital At Risk
Significant weaknesses
E0–39Digital Critical
Major corrective action

A rating always shows the grade, the score and its name together, for example “A · 86/100 · Digital Excellence”. A Website Performance Assessment Certificate is issued from grade B (Digital Proficient) and holds for 90 days.

Grade limits

Some problems matter so much that the score can’t go above a limit, whatever else is good:

At most 34 (E · Digital Critical)The site has no HTTPS and isn’t set up for phones.
At most 54 (D · Digital At Risk)An out-of-date add-on has published security advisories for the version it shows.
At most 54 (D · Digital At Risk)The site has no HTTPS.
At most 54 (D · Digital At Risk)The site isn’t set up for phone screens.
At most 54 (D · Digital At Risk)The server takes more than 6 seconds to answer.
At most 69 (C · Digital Developing)There is at least one thing to fix first.

When a key figure (server response, page weight, phone layout, HTTPS, security headers, page title or main heading) could not be measured, the assessment can’t be finished until it is measured again or entered with evidence, and the score is never better than with that figure at its worst.

Independent

You pay for the assessment, never for the grade. The same rules apply to every website, and a reviewer checks every report before it is sent. BlueBridge Group WebScore360 is an independent assessment, not an externally accredited certification, and not a security audit.

Check a certificate or report number · Get your website scored

Versions

Each assessment keeps the version it was rated on. When the area weights or the grade scale change, a new version is made and earlier scores keep theirs. The checks inside each area are described as they are used today.

Version 1 (in use now)