Skip to content
Living WebsitesSites with a next shift

Is the "We Analyzed Your Website" Email Legit?

Usually not. A generic "we analyzed your website" pitch names no problem you can check and asks for your number before it says what it sells. A message worth reading names one thing on your own site that you can confirm yourself, and says who sent it and what they offer.

  • Guides
  • Insights
  • Tools
  • Proof
  • Picks

On October 6, 2026, a small business owner posted to r/sweatystartup about one sender who kept filling in their contact form, each time with a different Gmail address, "posing as a buyer with a budget and a timeframe, then: "we ran a backend analysis of your website, your SEO steps are incomplete, send us your number for a quick call". Ten times now." The owner asked other owners what gets these deleted and whether one had ever made them stop. One disclosure before the answer: this page is written by a web company. So the test below is one you can hold any web company to, us included.

What the generic pitch looks like

The pitch in that post has a shape you will recognize. It claims someone looked at your site, it names a category of problem instead of an actual problem ("your SEO steps are incomplete"), and it asks for your phone number before it says what is for sale or what it costs.

Another owner in the thread described the volume: "there are just eleven of them a month saying the exact same thing about my meta descriptions and none of them ever wonder why the first ten recieved nothing back." The same line arriving from different senders, month after month, is a good sign that nobody looked at your site at all. A template did.

One caution about the thread itself: several replies read as if they were written to the same pattern, so we are not leaning on how many people agreed. We are leaning on the original post and on the one point many replies shared, which is that a pitch asking for a call before it says anything specific gets deleted.

The test: one specific thing you can check yourself

The most useful reply described the one pitch that made them stop: "The only one that made me stop was from someone who clearly went to my actual website and pointed out specific thing that was broken. Like they mentioned the contact button color was same as background on mobile."

That is the whole test in one example. The sender named one page element, on one kind of device, and the owner could confirm it by picking up a phone and looking. A generic template does not produce that sentence, and you can confirm it yourself, whoever or whatever found it.

Before you reply to any pitch about your website, ask four questions. Does it name a specific page and a specific thing on that page? Can you confirm it yourself, on your own phone or computer, without the sender's help? Does it say who sent it and what they are selling? Does it state the offer in the message instead of asking for a call first?

A pitch that passes the first two has already given you something useful, whether or not you hire them. If the observation is real, you can change it yourself or have whoever runs your site change it. You do not owe the sender a call for pointing it out.

Why "your meta descriptions" is the favourite line

A meta description is a short summary written into a page's code. Google's own documentation for site owners says search result snippets are primarily created from the page content itself, and that Google sometimes uses the meta description if it might give searchers a more accurate description of the page than content taken directly from the page.

So a missing or weak meta description is a real thing, but a small one. Google's same page suggests that if you do not have time to write a description for every page, you should at least write one for critical pages like your home page and your popular pages. That is an edit you or whoever runs your site can make. It is not a reason to give a stranger your phone number.

You can check yours without anyone's help. Search Google for your business name and read the two lines under your link. On a computer, open your home page, view the page source, and search it for name="description" to see what, if anything, is written there.

Checks you can run instead of taking the call

Open your own site on your phone. Find the button or link someone would use to contact you, tap it, and send yourself a test enquiry. Then check that it actually reached your inbox. This is the check the button-colour story points at, and it costs you five minutes.

Set up Google Search Console for your site, under your own Google account. Google describes Search Console as a free service that helps you monitor, maintain and troubleshoot your site's presence in Google Search, including how often your site appears in search, which searches show it, and how often people click through. If a pitch claims your site has a search problem, your own Search Console numbers are a better starting point than someone else's scan. Opening that account in your own name matters for the same reason we covered in the two first-website mistakes that are not cheap to undo: accounts set up under someone else's name are hard to get back.

If the pitch came by email in Canada

Canada's anti-spam law, CASL, covers commercial electronic messages such as sales emails. The federal government's guidance for businesses says CASL requires businesses to get consent before sending commercial electronic messages, and that a message must include the sender's business name, a current mailing address and either a phone number, email or website address, and an unsubscribe mechanism. The same guidance asks senders to make sure no part of a message is false or misleading.

This is not legal advice, and consent can be implied in some situations, so a cold sales email is not automatically against the rules. But a pitch from a fresh Gmail address with no business name, no mailing address and no way to unsubscribe is missing what that guidance says such a message must include. The government's anti-spam site also says Canadians can report spam to its Spam Reporting Centre.

Holding us to the same test

Living Websites builds websites for businesses in Niagara, so we sell in the same space as the people sending these emails. Hold any web company, us included, to the test on this page: one specific thing on your own site that you can confirm yourself, a sender you can identify, and an offer stated in the message before anyone asks for your number.

If the pitches you are getting are about AI rather than SEO, our AI consulting and automation page has a short set of questions for judging those, which we hold our own offer to as well. And if you are actually choosing who should build or run your site, our guide to choosing a website company in Niagara includes two ownership checks you can run yourself before you sign anything.

Follow the changes

Read the dated record of updates to this website.

See every change

FAQ

Is a "we analyzed your website" email legit?

Usually not. A generic pitch names a category of problem, such as incomplete SEO or missing meta descriptions, and asks for your number or a call before it states an offer. A message worth reading names one specific thing on your own site that you can confirm yourself and says who sent it and what they are selling.

What does a real website pitch look like?

It names one specific page and one specific problem on it that you can check on your own phone or computer, such as a contact button that is hard to see on mobile. It identifies the sender and states the offer in the message instead of asking for a call first.

Do I need a meta description on every page?

Google says it creates search snippets mainly from the page content itself and sometimes uses the meta description when that describes the page more accurately. Its documentation suggests writing descriptions at least for important pages like your home page and popular pages. It is a small edit, not an emergency.

What does Canada's anti-spam law require of a sales email?

The federal guidance says businesses need consent before sending commercial electronic messages, and each message must include the sender's business name, a current mailing address and either a phone number, email or website address, and an unsubscribe mechanism. This is a summary of the guidance, not legal advice.