Private area
That part of this site is for the operator
A few pages here hold customer records and scan history, and they need credentials. Nothing else does.
Scanning is not open on this instance right now
Free self-serve scanning is switched off here, so the scan form is behind the same credentials. What that means and what is still open is below.
What is open to everyone
- The scan form
Open on a deployment with self-serve scanning switched on.
- A complete report
Generated from a built-in fake merchant site. Every finding, every evidence crop, every raw signal value and the full signal table — the same output a scan produces, without running one.
- Paste mode
Paste a page's markup and it is analysed locally, with every network request blocked. Nothing at all is requested from the site, including by this server.
- Every check in the matrix
All the rules, grouped by jurisdiction, with the statute each relates to, the date each summary was last reviewed, and the sources it was drafted from.
- How every signal is computed
What each measurement is, how it is calculated, its known failure modes, and which direction it errs in. The page that lets you decide whether to believe a finding.
- What a scan cannot see
The structural limits. More useful than any report.