MCS Score — Website Compliance for DACH | mekyn
The compliance score the DACH region needs.
Performance. Accessibility. SEO. Privacy. Security.
Five dimensions. One number. No excuses.
The mekyn Compliance Standard is the first open, reproducible website score for Germany, Austria and Switzerland.
MIT licence · Version 1.0.0 · Last updated: 2026-05-01
Reference score · mekyn.com
Compliance Score: 99.5/100
Grade A · Excellent
Measured on 2026-05-01 with MCS v1.0.0.
Anyone can reproduce this score — the algorithm is public.
| Dimension | Criterion | Max points | Weight |
|---|---|---|---|
| Performance | Lighthouse Performance Score | 40 | 40 % |
| Performance | LCP (Largest Contentful Paint) | 20 | 20 % |
| Performance | INP (Interaction to Next Paint) | 20 | 20 % |
| Performance | CLS (Cumulative Layout Shift) | 20 | 20 % |
| Accessibility | Lighthouse Accessibility Score | 40 | 40 % |
| Accessibility | Alt texts on all images | 20 | 20 % |
| Accessibility | HTML lang attribute | 20 | 20 % |
| Accessibility | Best Practices (focus/keyboard) | 20 | 20 % |
| SEO | Lighthouse SEO Score | 30 | 30 % |
| SEO | Canonical tag | 15 | 15 % |
| SEO | XML sitemap | 15 | 15 % |
| SEO | robots.txt | 10 | 10 % |
| SEO | Schema markup | 15 | 15 % |
| SEO | Mobile-friendly | 15 | 15 % |
| Privacy | HTTPS | 25 | 25 % |
| Privacy | HSTS | 20 | 20 % |
| Privacy | Privacy policy | 25 | 25 % |
| Privacy | Cookie consent | 20 | 20 % |
| Privacy | EU hosting | 10 | 10 % |
| Security | HTTPS | 25 | 25 % |
| Security | TLS 1.2+ (1.3 recommended) | 20 | 20 % |
| Security | Content-Security-Policy | 20 | 20 % |
| Security | X-Frame-Options | 10 | 10 % |
| Security | X-Content-Type-Options | 10 | 10 % |
| Security | Referrer-Policy | 10 | 10 % |
| Security | Imprint / legal notice | 5 | 5 % |
Five dimensions.
The MCS does not only check what Google sees. It checks what users experience, what authorities require and what data-protection officers expect.
Performance
Lighthouse Performance, Core Web Vitals (LCP, INP, CLS), load-time optimisation. Slow sites lose visitors — and rankings.
Security
HTTPS, TLS 1.3, CSP, HSTS, security headers. An insecure trust signal destroys conversion — no matter how beautiful the site.
Privacy
GDPR compliance, cookie consent, privacy policy, EU hosting, no US-cloud transfers without legal basis. Mandatory, not optional.
SEO
OnPage, structured data, indexability, mobile-first, canonical, sitemap. Technical foundation for visibility — not just content.
Accessibility
WCAG 2.2 AA, BFSG/WZG compliance, alt texts, keyboard navigation, ARIA. Accessibility is law, SEO signal and ethical duty.
Frequently asked questions
What is the MCS score?
The mekyn Compliance Standard (MCS) is the first open, reproducible compliance score for websites in the DACH region. It evaluates five dimensions — performance, accessibility, SEO, privacy, security — and returns an overall rating from 0 to 100. The algorithm is publicly documented on GitHub.How is the MCS calculated?
Each of the five dimensions has its own criteria with points. Performance and accessibility 25 % each, SEO 20 %, privacy and security 15 % each. Points are normalised, weighted and summed. Same inputs always produce the same score — the algorithm is deterministic.What is a good MCS score?
A (90–100) = Excellent · B (80–89) = Very good · C (70–79) = Good · D (60–69) = Satisfactory · F (< 60) = Insufficient. For BFSG/WZG compliance we recommend at least C in accessibility. For SEO-first sites the target should be A.Is the MCS free?
Yes. The check on mekyn.com is free and requires no signup. The algorithm is open source (MIT licence). Anyone can calculate the score themselves — we hide nothing.How does MCS differ from Lighthouse?
Lighthouse checks performance, accessibility, best practices and SEO — but not privacy and security in detail. The MCS adds GDPR relevance (cookie consent, EU hosting, privacy policy) and security headers (CSP, HSTS, TLS). It also weights accessibility higher because BFSG/WZG compliance is mandatory.Do you score your own sites differently?
No. We use the same code, the same algorithm and the same criteria for ourselves as for everyone else. mekyn.com currently scores 99.5/100 (A). The report is publicly visible. If we get worse, we show that.