Find what's broken on your website.
Expired certs, missing security headers, broken DMARC, sliding Lighthouse scores — Full Stack Audit catches them on a schedule, before your customers do.
- Free during early access
- 113 expert checks
- Scheduled monitoring
- Email alerts on regressions
TLS 1.3, expires in 87 days
max-age=63072000; includeSubDomains; preload
Header missing — consider adding a strict CSP
Mobile: 3.4s — above the 2.5s target
og:title, og:description, og:image present
p=quarantine; rua reporting enabled
One audit. Every angle.
Full Stack Audit bundles the kind of checks you'd otherwise string together from a dozen separate tools — into a single, actionable report.
- Security19 checks
- HSTS, CSP, TLS, certificates, mixed content and exposed file scans.
- Performance13 checks
- Compression, HTTP/2, caching, TTFB, image and JS optimization.
- Lighthouse9 checks
- Real Lighthouse scores, Core Web Vitals and performance budgets.
- SEO22 checks
- Titles, meta, Open Graph, sitemaps, structured data, hreflang.
- DNS9 checks
- DNSSEC, CAA, propagation, nameservers and domain expiry.
- Email5 checks
- SPF, DKIM, DMARC, BIMI and MTA-STS deliverability checks.
- Redirects5 checks
- HTTP→HTTPS, www handling, path preservation, broken links.
- Mobile5 checks
- Viewport, manifest, responsive design, touch targets, PWA.
- Accessibility & HTML13 checks
- ARIA, color contrast, keyboard navigation, semantic HTML, validation.
- Privacy3 checks
- Cookie attributes, cookie policy and privacy policy detection.
- Analytics3 checks
- Web analytics, APM and error-reporting coverage.
- Extras7 checks
- AI bot rules, llms.txt, CORS, social links, print styles.
From domain to report in minutes
No agents to install, no scripts to paste. Add a URL and we do the rest.
Add your website
Paste your root URL. We auto-detect your site name and pick sensible defaults for scheduling and page selection.
We run the full audit
Checks run in parallel. Pages are rendered with real Chrome so JavaScript apps, Lighthouse scores and Core Web Vitals are accurate.
Get prioritized results
A clean report grouped by category and severity. Silence noise, trigger audits on demand, and get emailed when things break.
Run audits on a schedule. Get alerts when things break.
Set a cadence per project — daily, weekly, whatever fits. Full Stack Audit keeps running while you sleep. When a check starts failing, an email lands in your inbox with the specific rule, the page it failed on, and the offending value.
- Flexible per-project scheduling
- Conditional email notifications
- Silence noisy checks per-site, permanently or temporarily
- Project
- acme-corp.com
- Check
- SSL certificate
- Previous
- Passed (30 days left)
- Now
- Failed — expires in 6 days
30-day audit history
Performance data from actual Chrome, not synthetic approximations.
Pages are rendered with headless Chrome. Lighthouse scores, Core Web Vitals, unused JavaScript, cache policy and more come from real audits — the same engine Google uses for Page Experience rankings.
- Mobile-first performance scoring
- LCP, CLS, INP, Speed Index, FCP
- Works with JavaScript-heavy SPAs
- Configurable pages to Lighthouse per project
Invite the whole team. Assign roles. Skip the back-and-forth.
Every project supports multiple members with admin or viewer roles. Hand reports off to stakeholders without sharing logins. Silence checks that don't apply to your stack without cluttering everyone's view.
- Per-project admin and viewer roles
- Shared audit history and results
- Silence checks at project scope
- Export reports as Markdown for PRs and tickets
- MGAdmin
maria.garcia@acme.com
- JDAdmin
jack.dupont@acme.com
- RKViewer
rita.khan@acme.com
- LSViewer
luca.smith@acme.com
Works for teams of one — and of fifty
Pre-launch checklist
Run every check before going live. Security headers, SEO tags, performance — sign off with confidence.
Regression monitoring
Weekly scheduled audits surface regressions that sneak in between deploys — SSL expiring, robots.txt broken, Lighthouse dropping.
Security compliance
Verify HSTS, CSP, TLS configuration and more across every site you operate. Catch exposed files and version disclosure before attackers do.
SEO hygiene
Track canonical URLs, meta descriptions, Open Graph and structured data. Your marketing team gets a steady baseline instead of alarm-driven audits.
Agencies & freelancers
Manage dozens of client sites in one place. Export polished reports, silence irrelevant checks per-client, let clients view without logging in for you.
Deliverability ops
SPF, DKIM, DMARC, BIMI, MTA-STS — verified continuously, before your sending domain quietly breaks.
Stop stitching tools together
Full Stack Audit replaces the checklist of browser tabs most engineers run by hand.
The old way
- Open SSL Labs for SSL grade
- Run PageSpeed Insights for Lighthouse
- Copy-paste headers into securityheaders.com
- Check DMARC via dmarcian
- Spot-check SEO tags in Chrome DevTools
- Remember to do all of this next month
With Full Stack Audit
- Paste your URL once
- 113 checks run in parallel
- Grouped report by category and severity
- Scheduled re-runs with email alerts
- Silenced checks stay silenced
- Share with your team — no extra seats
Free during early access
We're in beta. The Free plan is available today. Larger plans for teams and agencies are coming later.
Free
Solo developers and a single site.
- 1 project
- All 113 expert checks
- Weekly schedule
- Up to 10 pages per audit
- 1 Lighthouse page per project
- 1 team member
- 1 manual audit / project / day
- 30-day audit history
- Email alerts on regressions
Need more than the Free plan?
Drop your email and we'll let you know when paid plans launch. No spam, no commitment.
Frequently asked questions
No. Full Stack Audit runs externally against your public URLs. No scripts, no DNS records, no server access needed.
We render your pages in real Chrome and run Lighthouse with a mobile profile — the same methodology Google uses for Page Experience. Scores reflect reality, not synthetic approximations.
Yes. Any check can be silenced per project, temporarily or permanently, without cluttering your report.
As often as you'd like. Every project has its own interval — daily, weekly, monthly. You can also trigger an audit on demand at any time.
Yes. Pages are rendered with headless Chrome so SPAs, client-rendered content and dynamic meta tags are all evaluated correctly.
Every project supports multiple members with admin or viewer roles. Reports and history are shared across the team.
Today the audit hits public URLs only. Authenticated and staging support is on the roadmap — let us know if you need it.
We store your account info (email, name) and the audit results we collect for the URLs you submit. Data is hosted in the EU. We don't sell or share it. See our privacy policy for details.
You can delete your projects and account at any time from the app. When you do, we permanently remove all associated audit history and notification preferences.
Know exactly what's wrong with your website
Free during early access. Plans coming later — anything you build now keeps working.