Agencies and freelancers
Show a client exactly what to fix, with a report you can share.
Security, speed, accessibility and SEO in one report. Your first audit is free.
Paste a URL and we scan it for security headers, TLS, exposed paths, CORS and cookie problems, mixed content, and run a real Lighthouse review for performance, accessibility and SEO, along with a check for signs that a site was generated by AI. It is all self-hosted: no third-party scanning service sees your URL.
Show a client exactly what to fix, with a report you can share.
Check your own site before customers or Google find the problems.
Run an audit from your pipeline through the API.
Do a quick technical check of a site before you buy or partner.
Enter a website address below. Your first audit needs no sign-up.
Read the report: what passed, what failed and why it matters.
Create a free account to keep reports, run more audits and use the deep audit.
Run a free audit right here, then create a free account to keep the report and run the deeper audit.
Security headers, TLS, performance, SEO, and whether it looks AI-generated — a real scan, not a guess. One free audit, no login required to run it.
We email your report when it's ready. No account needed, no spam — unsubscribe from any message.
Your first audit is free. After that audits are billed at the rate on the pricing page.
POST /v1/audits, authenticated with your X-IdentifyOrg-Key header.
{
"url": "https://example.com"
}{
"id": "aud_01hxyz...",
"url": "https://example.com/",
"status": "ready",
"score": 78,
"grade": "C",
"findings": [
{
"category": "headers",
"severity": "warning",
"title": "Content-Security-Policy header is missing",
"detail": "",
"fix": "Add a Content-Security-Policy response header to reduce this class of attack surface."
}
],
"lighthouse": {
"performance": { "score": 92, "title": "Performance" },
"accessibility": { "score": 96, "title": "Accessibility" },
"best_practices": { "score": 96, "title": "Best Practices" },
"seo": { "score": 100, "title": "SEO" }
},
"ai_signals": { "signals": [], "count": 0 },
"cost": 300.0,
"created_at": "2026-07-02T10:24:00Z"
}When the test convinces you, the developer section shows exactly how to connect it: the endpoint, the request and response, SDKs for your language and webhooks.
Yes. Your first audit is free, and you can run it without an account on this page.
Security headers, TLS, exposed paths, CORS and cookie settings, mixed content, performance, accessibility and SEO, plus AI-generated-site signals.
No. The scan is self-hosted, with no third-party scanning APIs involved.
A multi-page crawl with active security tests, available only for domains you have verified you own.
Yes. Everything is available through the API.