Back to blog
8 min read
Strategy

E-commerce Site Audit: Critical Tests for WooCommerce and PrestaShop

A slow e-commerce site is a money-losing site. Every second of latency, every security flaw, every missing SEO tag translates directly into lost revenue. Here are the tests that matter — and how to sell the audit to your clients.

Key Takeaways
  • On an e-commerce site, every additional 100 ms of latency drops conversions by 1%. Performance isn't a luxury — it's revenue.
  • Security flaws (missing SSL, missing headers, exposed WP version) aren't just technical risks — they violate PCI DSS requirements and destroy customer trust.
  • Position a "premium e-commerce audit package" at a higher price: the stakes are higher, and the ROI is immediate and measurable for the client.

Why e-commerce sites need audits (more than others)

A slow brochure site is annoying. A slow e-commerce site is a direct loss. The difference? Money. Every product page, every step in the conversion funnel, every "Add to Cart" click depends on site speed, security, and visibility.

WooCommerce and PrestaShop store owners speak one language: revenue. An audit that talks about "conversion rate", "average order value", and "cart abandonment rate" has infinitely more impact than a technical report discussing HTTP headers and canonical tags.

Three reasons why e-commerce sites are the best audit candidates:

  1. Money is at stake — An e-commerce site loses sales directly when it's slow, insecure, or poorly indexed. The ROI of an audit is immediate and calculable.
  2. Trust is critical — Any security warning ("Not Secure" in the address bar) scares off potential buyers. 85% of online shoppers abandon a purchase if the connection isn't secure.
  3. SEO competition is fierce — Thousands of stores sell the same products. Google visibility is the difference between page 1 and invisibility.
A shopping cart connected to four audit cards (Performance, Security, SEO, UX) with conversion rate impact indicators

Critical performance tests

Performance is the most profitable test for an e-commerce site. Amazon measured that one extra second of latency costs them $1.6 billion per year. Your clients aren't Amazon, but the ratio is the same: every 100 ms of delay = -1% conversion.

Test #01 — TTFB (Time To First Byte): how long the server takes to respond. A slow TTFB means the customer waits before even seeing the page. Target: under 600 ms. Beyond that, every product page loses visitors.
Test #02 — Page weight: product pages are often overloaded with high-res images, sliders, and tracking scripts. A page over 3 MB on mobile = near-certain abandonment on 4G.
Test #06 — Image dimensions: unresized product images (often 4000x3000 px) sent as-is to the browser. The browser displays them at 400x300 but downloads the original. Result: 5x longer loading time.
Test #07 — Image alt text: every product image without an alt attribute is a missed SEO opportunity. Google Images accounts for up to 30% of e-commerce site traffic.
Test #09 — Lazy loading: catalog pages with 50+ products load all images at once without lazy loading. Enabling lazy loading cuts initial load time by 2-3x.
Every extra second of loading time means 7% fewer conversions. On a site making EUR 10,000 per month, that's EUR 700 in lost revenue.

Critical security tests

An e-commerce site handles sensitive data: names, addresses, sometimes banking details (even with a payment provider, visual trust matters). Security flaws aren't just technical risks — they have legal implications (GDPR, PCI DSS).

Test #10 — SSL certificate: non-negotiable for e-commerce. Without HTTPS, browsers display "Not Secure" on payment pages. 85% of online shoppers abandon their cart if the connection isn't secure.
Test #11 — HTTPS redirect: having an SSL certificate isn't enough. If HTTP pages don't redirect to HTTPS, search engines index both versions and protection is incomplete.
Test #13 — Content Security Policy: protects against XSS attacks (malicious script injection). On an e-commerce site, an XSS attack can steal session data, authentication cookies, or redirect to a fake payment page.
Test #14 — Security headers (X-Frame-Options, X-Content-Type-Options): prevent clickjacking and MIME sniffing. Without these protections, an attacker can overlay an invisible iframe on the "Pay" button and intercept the click.
Tests #41-44 — WordPress exposure: visible WP version, accessible readme.html, present install.php, enabled directory listing. Each piece of exposed information is an invitation for automated scripts scanning for vulnerable sites.

For an e-commerce client, translate these tests into business risks: "Your site exposes information that lets a hacker precisely target the known vulnerabilities in your WordPress version."

Critical SEO tests

An e-commerce site lives or dies by its search rankings. If your product pages don't appear in the top 3 Google results, they don't exist. Orilyt's SEO tests identify the issues preventing your clients from being found.

Test #20 — Meta title: every product page needs a unique, optimized title. "Product – My Site" isn't enough. An optimized title includes the product name, category, and a long-tail keyword.
Test #21 — Meta description: the description shown in Google. Without a meta description, Google generates a random excerpt from the page — often useless technical text for the buyer.
Test #25 — Open Graph tags: when a customer shares a product on Facebook or WhatsApp, OG tags determine the image, title, and description displayed. Without OG, the share shows a random image and truncated title — zero marketing impact.
Test #38 — XML sitemap: Google can't index what it can't find. A missing or misconfigured sitemap means dozens (or hundreds) of product pages are invisible to search engines.

The argument that hits home: "You have 200 products online, but Google only indexes 80. The other 120 are invisible — as if they didn't exist."

UX tests that impact sales

User experience on an e-commerce site is the journey from "I discover the product" to "I pay." Every friction point in this journey increases the cart abandonment rate (averaging 70% on e-commerce sites).

Test #03 — Mobile friendly: 60-70% of e-commerce traffic comes from mobile. A non-mobile-optimized site loses the majority of visitors before they even see a product.
Test #35 — Keyboard accessibility: users who navigate by keyboard (or assistive technologies) represent 15-20% of the population. A checkout flow inaccessible by keyboard is both a legal and commercial exclusion.
Test #34 — Legal pages: legal notices, T&Cs, privacy policy. Mandatory for all e-commerce sites (GDPR, EU E-Commerce Directive). Their absence exposes the client to fines and destroys trust.
Test #57 — Cookie policy: misconfigured cookie banners are a major compliance issue. CNIL and its European counterparts impose increasingly heavy fines on non-compliant e-commerce sites.

E-commerce UX is measured in euros: every friction point you identify and fix translates directly into recovered conversions.

How to pitch the audit to an e-commerce client

Online store owners speak a different language than brochure site owners. Here's how to adapt your pitch:

  • Talk conversion, not tech — "Your site takes 4 seconds to load. That means you're losing about 28% of visitors before they see a product. Based on your current traffic, that's X visitors per month."
  • Talk revenue, not scores — "Your performance score is 45/100. By raising it to 80, you can expect a 15-20% increase in conversion rate. With your average order value of X, that's Y in additional monthly revenue."
  • Talk risk, not vulnerability — "Your WordPress version is publicly visible. Hackers use this information to target known flaws. A hacked e-commerce site means an average of 2 weeks of downtime and EUR 5,000 in recovery."
  • Talk compliance, not headers — "Your site isn't PCI DSS compliant on 3 points. In case of a data breach, you're liable, and your payment provider can suspend your account."

Golden rule: never say "TTFB", "HTTP header", "canonical", or "Content Security Policy" to a store owner. Translate everything into cart impact.

The e-commerce audit package

An e-commerce audit isn't a standard audit with a standard price. The stakes are higher, the analysis is more targeted, and the ROI for the client is immediate. Position it as a premium service.

  1. Full Orilyt audit (80+ tests) — The foundation. Run the audit via the API or dashboard. Cost: 1 credit.
  2. Targeted e-commerce analysis — Extract the 15-20 most impactful tests for e-commerce (performance, security, SEO, UX). Quantify each issue in revenue impact.
  3. Customized client report — Use Orilyt's Client PDF as a base, add an "e-commerce" analysis layer: lost revenue estimates, industry benchmark comparisons, prioritized action plan.
  4. Optimization quote — Offer 3 tiers: Quick Wins (1-day fixes), Standard Optimization (1 week), Performance Overhaul (2-4 weeks). Each tier with an estimated ROI.

Suggested pricing: a full e-commerce audit (audit + analysis + report + quote) is billed between EUR 300 and EUR 800 depending on catalog size. That's 2-4x the price of a standard audit — and the client understands why, because you speak their language.

Summary: the e-commerce checklist

Before pitching an audit to an e-commerce client, run through this checklist:

  1. Identify the site's monthly revenue (even approximate) to quantify losses
  2. Run the Orilyt audit and extract critical tests: TTFB, page weight, SSL, HTTPS, headers, SEO meta, mobile, sitemap
  3. Translate each issue into revenue impact: "X seconds of latency = Y% lost conversion = Z EUR per month"
  4. Prepare 3 optimization scenarios with estimated ROI (Quick Wins, Standard, Premium)
  5. Use the Orilyt Client PDF — never the technical report — for the presentation
  6. Position the package at a premium price (EUR 300-800) justified by the immediate ROI for the client

An e-commerce site that loses 1% conversion per second of latency is a client ready to invest in fixing the problem. Your audit is the tool that makes the problem visible — and your quote is the solution.

Ready to audit your first e-commerce site?
Run a free audit on a WooCommerce or PrestaShop site and see which tests directly impact sales.
Run a free audit
Previous Competitive Audit: Audit Competitors to Win the Contract Next Badge « Audité par Orilyt » : prouvez la qualité du site à vos visiteurs