Why web-audit.me
How we audit a website
One tool that runs the checks a QA engineer runs before a launch, and writes up the results so a non-engineer can act on them.
59
Checks per scan
7
Report categories
12
Pages crawled
Every report opens with what to fix first
Findings are sorted into 7 plain-language categories, and the worst ones and the cheap fixes are pulled to the top, each with its suggested fix.
How it works
- Our own engine, not a middleman
- Every scan runs on our own stack: Playwright for real browser testing, Lighthouse for performance, and axe-core for accessibility. We make genuine requests against your site and report exactly what we find. No third-party scanning API sits between you and your results.
- 59 checks, grouped into 7 plain-language categories
- Security headers, SSL/TLS, SQL injection, XSS, broken links, SEO, Core Web Vitals, WCAG accessibility, privacy and legal compliance. Each category carries a health status, so you can see what matters without reading every finding.
- Your whole site, not just the homepage
- A crawl discovers pages through your sitemap and internal links, up to 12 of them, then tests each one. Findings point to the exact page and file where an issue lives.
- Privacy-first and authorized-only
- Scan without an account and the report is deleted after 24 hours; with a free account we keep your 3 most recent reports for 30 days. web-audit.me is built for sites you own or are authorized to test, never for probing systems you do not control.