Free audit tools
These tools fetch real public targets and return evidence from deterministic checks. If a runner is not live yet, the app says so instead of generating a fake result.
34
Live tools
34
Registered tools
7
Audit types
Live now
SEO tools with real fetch, parse, and API adapter results.
Meta Tag Checker
Fetch a live page and inspect title, meta description, headings, canonical, robots, and viewport tags.
Robots.txt Checker
Fetch robots.txt from the submitted site and report crawl directives and sitemap references.
Sitemap Checker
Find sitemap directives and fetch XML sitemaps to count URLs and parsing issues.
Open Graph Preview Checker
Inspect Open Graph and Twitter card tags from a live page.
Schema Markup Checker
Parse JSON-LD structured data and report detected schema types and JSON errors.
Core Web Vitals Checker
Run PageSpeed Insights for a submitted public URL and report real Lighthouse/Core Web Vitals metrics when available.
Verified Contract Checker
Check pasted Solidity source or a supported explorer URL for verified source metadata, compiler pragma, contracts, and imports.
ERC20 Risk Checker
Run static source checks for ERC20-like functions, mint/burn controls, pause logic, blacklist/whitelist naming, and approvals.
Proxy Checker
Run static source checks for delegatecall, upgrade functions, implementation slot wording, initializers, and proxy admin controls.
Token Tax Checker
Run static source checks for fee/tax naming, transfer overrides, exclusions, trading limits, and owner fee setters.
Ownership Checker
Run static source checks for Ownable, role-based access, renounceOwnership, privileged setters, and withdraw/rescue controls.
Frontend Speed Checker
Fetch a public page and report real HTML response time, document size, script count, stylesheet count, and image count.
Accessibility Checker
Parse a public page for accessibility basics: language, H1 structure, landmarks, image alt text, form labels, and button names.
Broken Link Checker
Sample public links from a page and fetch them to identify broken internal or external URLs.
Bundle Size Checker
Fetch same-origin scripts and stylesheets referenced by a page and estimate sampled transfer size.
Mobile UX Checker
Parse mobile UX signals from a public page: viewport tag, fixed-width CSS hints, interactive element count, and mobile input types.
Prisma Schema Checker
Parse Prisma schema text for models, IDs, indexes, relations, cascade deletes, and likely PII fields.
SQL Index Checker
Parse SQL DDL or migrations for tables, indexes, duplicate index names, foreign keys, and nullability signals.
Supabase RLS Checker
Parse Supabase SQL for row-level security enable statements, policies, anon grants, and service_role exposure signals.
Mongo Schema Checker
Parse Mongo/Mongoose-style schema text or JSON for collections, indexes, required fields, ObjectId signals, and likely PII.
App Store Listing Checker
Fetch a public App Store listing from Apple's lookup endpoint and report metadata, screenshots, ratings, version, and listing depth.
App Title Checker
Check the public listing title against Apple's app-name length limit and extract deterministic title/genre keyword signals.
Screenshot Copy Checker
Fetch screenshot asset URLs from Apple lookup and report real device screenshot coverage without inventing OCR captions.
ASO Keyword Ideas
Extract deterministic keyword candidates and repetition signals from the live App Store title, genre, and description.
API Health Checker
Probe a public API endpoint for status, response time, content type, cache policy, and server hints.
CORS Checker
Fetch a public endpoint and inspect CORS headers for wildcard origins, credentials, and broad method exposure.
OpenAPI Checker
Look for public OpenAPI/Swagger JSON at the submitted URL or common spec paths and report paths/auth schemes.
Webhook Security Checker
Safely check a public webhook endpoint for reachability, unauthenticated GET behavior, signature hints, and error leakage.
Rate Limit Checker
Send a tiny safe sample of repeated public requests and report latency and any HTTP 429 rate-limit signal.
SSL Checker
Inspect the submitted HTTPS host certificate, issuer, expiry, and hostname/SAN evidence.
Public Route Checker
Safely request common public routes on the submitted domain and report status codes without exploit automation.
Exposed Files Checker
Safely check common public file paths such as .env, .git/config, backups, robots.txt, and sitemap.xml.
Subdomain Surface Checker
Run DNS-only checks for common subdomain names and report public resolutions without probing services.
Tech Stack Checker
Fetch a public page and fingerprint visible technology signals from headers, assets, generator tags, and scripts.
Registered next
These pages are mapped in the audit registry, but disabled until their deterministic runners are implemented.