We scanned our own site first.
It found things.

01What it found on us

The first self-scan ran on 2026-07-17, on a site we had already reviewed by hand and thought was clean. It came back "needs attention" with three findings:

• Domain and brand fragmentation. Our email domain redirected to the marketing domain, but www. on the marketing domain answered on a different host entirely. Three hostnames telling three stories about one studio.
• No canonical, no Open Graph tags on the home page. The page rendered fine for humans and looked unfinished to every crawler and link preview.
• DMARC in monitor-only mode. p=none on the public domain — spoofing policy written down, enforced nowhere.

None of these are exotic. That is the point. They are exactly the class of issue a busy owner never re-checks after launch — and exactly what we tell clients a scan catches.

02The fix sprint we ran on ourselves

We treated the findings the way we'd treat a client's: closed scope, then a re-run for proof.

• Picked one canonical public hostname and documented the redirect matrix around it. Email stays on its own domain — that's a decision, not an accident.
• Added canonical and Open Graph tags. The re-scan the next day shows both passing, along with the redirect chain cleaned up and a valid certificate on www.
• Kept the receipts. Both reports are in our lab repo, dated, with the before state preserved — because "trust us, it's fixed" is not evidence.

03What's still open

The DMARC record is still p=none, on purpose, until the sender inventory is finished. Moving to enforcement before you know every legitimate sender is how you start bouncing your own invoices. We'd rather publish the gap than pretend it's handled.

04The loop doesn't end

We re-scan ourselves after every significant change, and the tool keeps earning its keep. This week it flagged image weight on our own home page — a logo several times larger than the 56 pixels it renders at, and a hero portrait twice the size it needed. The fix shipped the same day. If you're reading this, the current self-scan score is the one on the site health page, not a number we froze for marketing.

Your site is almost certainly in better shape than you fear and worse shape than you checked last. Run the free report and see which it is.