Skip to main content
SGSiteGraph

lootly.io

Customer Loyalty Software | Enhance Retention with Lootly

Last scanned Aug 24, 2026, 1:22 PM

91

Overall score

Excellent

Summary

Transform customer engagement with our customizable, all-in-one loyalty software. This website uses Apache hosted on AWS. SEO is excellent (100/100) and accessibility is excellent (100/100). Security scores fair (65/100) and performance excellent (100/100).

Transform customer engagement with our customizable, all-in-one loyalty software. Manage rewards, referrals, and affiliates easily—request a demo today!

United States
Hosted on AWS

Top issues to fix

5 issues found · 2 high priority

  • Missing Strict-Transport-Security header

    Security

    Add HSTS so browsers always use HTTPS — this closes the protocol-downgrade attack window.

  • Missing Content-Security-Policy header

    Security

    Add a CSP to control which sources can run scripts — the strongest single defense against XSS.

  • Missing X-Content-Type-Options header

    Security

    Add X-Content-Type-Options: nosniff to stop MIME-sniffing attacks.

  • Missing X-Frame-Options header

    Security

    Add X-Frame-Options (or a CSP frame-ancestors rule) to prevent clickjacking via hidden iframes.

  • 3 cookies without Secure/HttpOnly flags

    Security

    Set Secure and HttpOnly on session cookies so they can't leak over HTTP or be read by injected scripts.

100

SEO

0 issue(s) found

100

Performance

540 ms

65

Security

HTTPS & header checks

100

Accessibility

0 issue(s) found

Not enough scan history yet to show a trend — check back after this site has been re-scanned a few more times.

Organization

Company details published in this site's own structured data.

Transform customer engagement with our customizable, all-in-one loyalty software. Manage rewards, referrals, and affiliates easily—request a demo today!

Contact

Email, phone, and address published on this site's own pages.

Meta tags

Title
Customer Loyalty Software | Enhance Retention with Lootly
Description
Transform customer engagement with our customizable, all-in-one loyalty software. Manage rewards, referrals, and affiliates easily—request a demo today!
Canonical
https://lootly.io
Language
en
Charset
utf-8
Viewport
width=device-width, initial-scale=1
Robots meta
Manifest

OpenGraph & Twitter Card

OpenGraph

og:title
Customer Loyalty Software for Established and Growing Businesses
og:description
Lootly is a powerful and customizable loyalty app that allows you to manage rewards, referrals and affiliates in one platform.
og:type
og:url
https://www.lootly.io

Twitter Card

twitter:card
twitter:title
twitter:description

Technologies

Detected frameworks, languages, and tools.

Hosting & CDN

Hosting provider
AWS
CDN provider
IP address
98.86.210.205
ASN
AS16509 (AMAZON-02 - Amazon.com, Inc., US)

DNS records

TypeValue
A
  • 98.86.210.205
  • 52.7.137.229
  • 44.207.178.162
AAAA
MX
  • alt3.aspmx.l.google.com
  • aspmx.l.google.com
  • alt2.aspmx.l.google.com
  • alt4.aspmx.l.google.com
  • alt1.aspmx.l.google.com
TXT
  • google-site-verification=1b-JeKN1Yz5ZNRMjy7iDoiSUTje9ndkff5LvVMtB1VY
  • v=spf1 a include:spf.mail.intercom.io ~all
  • facebook-domain-verification=2lpdr9gaznhfg7igzqr8xz8jx25ao4
NS
  • ns-303.awsdns-37.com
  • ns-565.awsdns-06.net
  • ns-1428.awsdns-50.org
  • ns-1741.awsdns-25.co.uk
CAA
CNAME
IPv6 supportNo

TLS / SSL certificate

Version
TLS 1.2
Issuer
Amazon
Subject
lootly.io
Valid from
Oct 4, 2025
Valid to
Nov 1, 2026
Days until expiry
68
SAN domains
lootly.io, *.lootly.io

Security headers

  • Strict-Transport-SecurityMissing
  • Content-Security-PolicyMissing
  • X-Frame-OptionsMissing
  • X-Content-Type-OptionsMissing
  • Referrer-PolicyMissing
  • Permissions-PolicyMissing

Compression: gzip · 4 cookie(s) observed

Content & assets

Headings

H1 1 · H2 9 · H3 0

Links

44 internal · 4 external · 0 broken

Images

24 total · 0 missing alt

Scripts / Styles

33 scripts · 3 stylesheets

JS / CSS size

933 KB · 286 KB

Page size

82.3 KB

Robots.txt & Sitemap

robots.txt
Found
Disallow rules
19
sitemap.xml
Found
URLs in sitemap
122

SEO issues

No SEO issues detected.

Accessibility issues

No accessibility issues detected.

Scan details

Requested URL
https://lootly.io
Final URL
https://lootly.io
HTTP status
200
HTTP version
HTTP/2
Response time
539 ms
HTML size
82.3 KB
Redirect chain
https://lootly.io

See something wrong on this report? Request a correction

Frequently asked questions

What technology does lootly.io use?
lootly.io is built with Laravel, WooCommerce, BigCommerce, Google Analytics, Google Ads, Meta Pixel, Apache.
Is lootly.io secure (HTTPS)?
Yes. lootly.io uses TLS 1.2 with a certificate issued by Amazon, valid until Nov 1, 2026.
Who hosts lootly.io?
lootly.io is hosted on AWS.
What is lootly.io's SEO score?
lootly.io scored 100/100 for SEO in the latest analysis (excellent).
What is lootly.io's overall website score?
lootly.io has an overall SiteGraph score of 91/100, combining SEO, performance, security, and accessibility.