Why web-audit.me

How we audit a website

One tool that runs the checks a QA engineer runs before a launch, and writes up the results so a non-engineer can act on them.

59
Checks per scan
7
Report categories
12
Pages crawled

Every report opens with what to fix first

Findings are sorted into 7 plain-language categories, and the worst ones and the cheap fixes are pulled to the top, each with its suggested fix.

How it works

Our own engine, not a middleman
Every scan runs on our own stack: Playwright for real browser testing, Lighthouse for performance, and axe-core for accessibility. We make genuine requests against your site and report exactly what we find. No third-party scanning API sits between you and your results.
59 checks, grouped into 7 plain-language categories
Security headers, SSL/TLS, SQL injection, XSS, broken links, SEO, Core Web Vitals, WCAG accessibility, privacy and legal compliance. Each category carries a health status, so you can see what matters without reading every finding.
Your whole site, not just the homepage
A crawl discovers pages through your sitemap and internal links, up to 12 of them, then tests each one. Findings point to the exact page and file where an issue lives.
Privacy-first and authorized-only
Scan without an account and the report is deleted after 24 hours; with a free account we keep your 3 most recent reports for 30 days. web-audit.me is built for sites you own or are authorized to test, never for probing systems you do not control.