Public scan research

56 public med spa scans found booking paths that quietly break.

In a May 2026 pilot, SiteLeak scanned 56 public med spa entry pages. 23 showed a booking, form, or mobile CTA problem specific enough to turn into a Fix Packet. No business names, domains, raw URLs, or screenshots are published.

Fix-ready issues

23/56

The scan found a specific booking, form, or mobile CTA problem that could be handed to an owner or site editor.

Broken Book Now links

12/56

The clearest recurring failure was a Book Now, scheduler, or booking-provider page that appeared unreachable from a public path.

Public names

0

The public page shows category-level counts only. Business names, domains, screenshots, and raw URLs stay private.

Aggregate findings

No names, just recurring public evidence.

56 public med spa entry pages

Scan window

May 2026 pilot

Pages counted

All 56

Public names

0 published

The percentages count all 56 sampled pages, including 4 scans that failed. That keeps the public rates conservative instead of removing failed scans from the sample.

Stale or unreachable booking links

Booking buttons or scheduler destinations appeared unreachable from public paths.

21%

12/56

23% of completed scans

A paid ad, treatment page, or homepage Book Now click can look fine until the visitor reaches a broken scheduler page.

Counting rule: Counted once per site when a public booking action or scheduler destination matched a broken booking-link signal.

  • External booking provider link unreachable
  • Broken booking link
  • Booking path dead end

Mobile CTA evidence issues

Mobile checks found booking/contact actions that were missing, blocked, or visually covered.

21%

12/56

23% of completed scans

Med spa visitors often arrive on a phone; a hidden or obstructed booking action can make the page look fine on desktop but fail in the patient path.

Counting rule: Counted once per site when mobile evidence found a missing, covered, or weak above-fold booking/contact action.

  • Mobile CTA obstructed
  • No above-fold CTA

Form submit path unavailable

Public consultation, booking, service, or contact forms did not expose a usable submit path.

16%

9/56

17% of completed scans

A consultation form can collect intent only if the visitor can see and use the final submit action without debugging the page.

Counting rule: Counted once per site when a public form path had a missing submit, disabled submit, or unreachable external form destination.

  • Form missing submit
  • Form submit disabled
  • External form link unreachable

Fix-ready booking or form findings

The scan found a specific booking, form, or mobile CTA problem that could be turned into a fix ticket.

41%

23/56

44% of completed scans

This is the point where a free scan can become useful paid work: the report can name the path to fix and the retest step.

Counting rule: Counted once per site when the scan found a critical issue or a concrete booking/form/mobile-path issue with a repair note.

  • Strong paid report recommendation
  • Concrete affected path
  • Repair note available

Why this matters

The recurring pattern: the public site looks normal, but the booking path changed.

That is why the useful paid path is not just a one-time report. The Fix Packet gives the affected URL, repair note, and retest step; monitoring keeps checking the same booking and contact paths after the fix.

Research guardrails

  • No businesses, domains, screenshots, or raw URLs are published.
  • No private booking systems, patient data, CRM records, forms, calls, or purchases were accessed.
  • Counts are evidence signals from a pilot batch, not a claim about every med spa website.
  • Future refreshes should use the research script and publish only aggregate counts.

Method and evidence standard

Public pages only, counted conservatively, anonymized before publishing.

SiteLeak checked public pages only. The scanner did not log in, submit forms, create appointments, place calls, or complete purchases. Public homepage and linked booking/contact paths with mobile browser evidence when it could be captured.

Sample frame

Public med spa entry pages were checked as patient-facing paths, not as private admin systems or booking accounts.

Scanner actions

SiteLeak followed public links and inspected public booking/contact signals. It did not submit forms, create appointments, place calls, or log in.

Counting rule

Each finding is counted at most once per sampled site, even when a site had multiple matching URLs or repeated instances of the same issue.

Conservative rate

Failed scans stay inside the 56-page sample, so the public rates are lower than rates calculated only from completed scans.

Need concrete examples before scanning? Open the med spa proof page.