24 of 59 checks are free — no account or credit card required
59 checks in 7 categories, all in one scan. 24 of them run free
Free checkPro check
Security
35 checks · 31% on the free scan
Protects your site and your visitors from hackers, data leaks, and scams.
Free · 11
Pro · 24See the 24 Pro checks
24 more checks, available with Pro.
Findings stream back over SSE while the scan is still going, so you see each check land instead of watching a progress bar.
Every scan runs our own engine: Playwright, Lighthouse and axe-core, making real requests against your site live. There is no third-party scanning API involved and no pre-written report. Every finding comes from that specific run.
The crawl discovers up to 12 pages via your sitemap and internal links, not just the URL you submit, so findings can point to any page across your site rather than only the entry point.
24 of the 59 checks run on every scan with no account and no card, and you get the full report for those. The remaining 35 are the ones that need a real browser session, and they run on Pro. Compare the free scan and Pro.
No check writes data, logs in, or submits forms that send messages. The injection tests only submit GET and search forms, and nothing creates accounts. We inspect responses and behavior rather than attacking your site.
Only scan sites you own or are explicitly authorized to test. web-audit.me is built for legitimate QA and security auditing, not for probing sites you don’t control. Read the terms of service.
It depends on how you scanned. Without an account, a report is deleted automatically after 24 hours. With a free account, we keep your 3 most recent reports for 30 days. Reports you unlock or run on Pro are kept until you delete them, and you can remove any report yourself from your dashboard at any time.