@amitfeldmanhq
"Find local businesses without a website" is a sharp wedge for agency lead-gen — the ICP is obvious and the value prop fits in one line.
Passive launch-day check on getmapleads.io (headers + public config only):
The good: TLS 1.3, robots.txt and sitemap.xml live, image alt hygiene clean.
Three findings worth a look:
Homepage took ~1.7s to serve on my check, and nginx/1.24.0 broadcasts its exact version (server_tokens off is a one-line fix). Not catastrophic, but for a landing page whose job is converting agency owners, first-load delay costs real signups — worth profiling server-side before buying any traffic.
Two H1 tags ("Find Local Businesses" / "Without a Website. Close Them." reads as one headline split across two H1s) and no canonical link. Demote the second H1 to a span/H2 and add the canonical — both one-line fixes.
All six core security headers unset (HSTS, CSP, XFO, nosniff, Referrer-Policy, Permissions-Policy). Cheapest wins first: HSTS max-age=31536000 and X-Content-Type-Options: nosniff.
Happy to re-run the check free once patched. Good luck with the launch!