Intake friction
Unlabeled fields and no form at all are separate findings. Placeholder-only fields fail the label check.
For law firms
The consult starts with a site that loads and a form that works.
Firm sites collect sensitive notes in contact forms and then forget the privacy link, the label on the textarea, or the HTTPS redirect. The scan stays on the public pages. It never submits the form and never stores what a visitor might have typed.
Trust pages
Privacy and terms should be in the footer. Missing privacy is a medium finding.
Practice pages nobody can find
Title, description, canonical, and sitemap are the SEO half of the score.
What the scan looks for
- Contact form and labels
- Privacy and terms
- HTTPS and headers
- On-page SEO
- Local or organization schema
Is this a security audit for client data?+
No. It is a passive public-site check. It is not a penetration test and it does not review your case system.