The Pulse Check we run on thepulse.net.
Same pipeline, same rubric, same rules as every Pulse Check Pro audit. Our score is public because we couldn't ask anyone to trust the product if we hid ours. This page refreshes daily — what you're looking at was generated by the same audit service Pulse Check Pro customers use.
Most recent successful audit: 24 Aug 2026 · 09:39 · Pulse Score rubric version 5
thePulse
Solid foundation across all four pillars. Review the lower-scoring sections for incremental wins.
Measured under simulated Fast 3G + 4× CPU throttling (Lighthouse Mobile profile).
Performance
Core Web Vitals captured from a headless Chromium render.
Web vitals timeline headless · cold cache
Modernization
PWA, security, transport, and ecosystem checks derived from the response and manifest.
Brand extraction
Logo, color palette, and typography lifted from the manifest, the OG image, and computed CSS variables.
Manifest icons 4 icons
Typography 1 family
Extracted palette 5 colors
css
css
css
css
screenshot
Captured renders
Viewport captures from the audit pipeline: light, dark, and the social-card image.
Manifest
Parsed contents of /manifest.webmanifest.
/manifest.webmanifest application/manifest+json
{
"name": "thePulse",
"short_name": "thePulse",
"description": "thePulse",
"theme_color": "#0F172A",
"background_color": "#0f1216",
"start_url": "/?ver=#{appVersion}#",
"scope": "/",
"display": "standalone",
"orientation": null,
"lang": null,
"categories": [],
"icons": [
{
"src": "https://thepulse-staging.net/android-chrome-192x192.png",
"sizes": "192x192",
"type": "image/png",
"purpose": null
},
{
"src": "https://thepulse-staging.net/android-chrome-512x512.png",
"sizes": "512x512",
"type": "image/png",
"purpose": null
},
{
"src": "https://thepulse-staging.net/favicon-16x16.png",
"sizes": "16x16",
"type": "image/png",
"purpose": null
},
{
"src": "https://thepulse-staging.net/favicon-32x32.png",
"sizes": "32x32",
"type": "image/png",
"purpose": "monochrome"
}
],
"screenshots": [
{
"src": "https://thepulse-staging.net/images/screenshots/thePulseNet-Services-Wide.png",
"sizes": "1920x1080",
"label": null,
"form_factor": "wide"
},
{
"src": "https://thepulse-staging.net/images/screenshots/thePulseNet-Services-Narrow.png",
"sizes": "1080x1920",
"label": null,
"form_factor": "narrow"
}
],
"shortcuts": [
{
"name": "thePulse Services",
"short_name": null,
"description": "Production-grade .NET software tailored to your domain \u2014 no templates, no boilerplate, no shortcuts.",
"url": "/services",
"icons": [
{
"src": "/android-chrome-512x512.png",
"sizes": "512x512",
"type": "image/png",
"purpose": "any"
}
]
},
{
"name": "thePulse Case Studies",
"short_name": null,
"description": "Production-grade .NET software tailored to your domain \u2014 no templates, no boilerplate, no shortcuts.",
"url": "/case-studies",
"icons": [
{
"src": "/android-chrome-512x512.png",
"sizes": "512x512",
"type": "image/png",
"purpose": "any"
}
]
},
{
"name": "thePulse Pulse Check",
"short_name": null,
"description": "Get a free analysis of your website\u0027s performance, legal compliance, and user experience.",
"url": "/pulse-check",
"icons": [
{
"src": "/android-chrome-512x512.png",
"sizes": "512x512",
"type": "image/png",
"purpose": "any"
}
]
}
]
}Standard files & policy pages
Backend convention files (robots.txt, sitemap.xml, .well-known/*) and user-facing legal pages.
Meta & headers
Raw <meta> tags and selected response headers from the homepage GET.
HTML <meta> tags 25 extracted
Response headers 13 captured
Signals & recommendations
Synthesized from the raw findings, ordered high → low impact.
How we detect: response headers from the home-page request — cf-ray (Cloudflare), x-amz-cf-id (CloudFront), x-fastly-request-id (Fastly), x-vercel-id (Vercel), x-azure-ref (Azure Front Door), or a recognizable server header. Putting any of these in front of your origin earns the points and gives you HTTPS / HTTP/3 / Brotli for free. (Captured value: no; earned 0/15.)
How we detect: a script reference in the page <head> for GA4, GTM, Plausible, Fathom, Matomo, Segment, Mixpanel, Hotjar, Clarity, or Amplitude. Privacy-friendly options earn the points equally — you can't improve what you can't measure. (Captured value: no; earned 0/10.)
Disclose what cookies and trackers your site sets, their purpose, and how to opt out — pairs with the cookie consent banner. (Captured value: warn; earned 0/8.)
Beyond having a policy page, make sure the page text actually describes the entitlement (window, condition, who pays return shipping). (Captured value: no; earned 0/6.)
One-line header that prevents browsers from MIME-sniffing responses into executable types (e.g. interpreting an image upload as HTML). (Captured value: no; earned 0/4.)
Default browser referrer behaviour leaks the full URL to other origins. strict-origin-when-cross-origin is a safe default. (Captured value: no; earned 0/4.)
Allow-list which powerful browser features (camera, microphone, geolocation, USB, fullscreen) your site is allowed to use; reduces blast radius of any XSS. (Captured value: no; earned 0/4.)
A prominent 'STAGING' badge is rendered on both light and dark screenshots. If this is indeed a production deployment, ensure build variables are updated to disable staging flags.
Currently, the privacy policy indicates no third-party tracking or advertising cookies are utilized. If analytics or advertising pixels are added in the future, implement a cookie preference manager to comply with global privacy rules.