LAB/002 · WEB INSPECTOR · STATUS: EXPERIMENT

Status

Public Scan open and evolving. There are no accounts, verified domains, deep scans or history yet: they will arrive with the Founding Testers beta.

ROADMAP

DONEPHASE 0 · FOUNDATIONInfrastructure, job queue, own database, deployment and backups.
DONEPHASE 1 · PUBLIC SCANSSRF protection and DNS, TLS, HTTP and security header engines.
DONEPHASE 2 · BROWSERIsolated real browser: accessibility, cookies, third parties and trackers.
IN PROGRESSPHASE 3 · TRANSPARENCY & LEARNPublic methodology, learning pages, business view and English version.
NEXTPHASE 4 · CONSENT SCENARIOSCompare cookies and third parties before consent, after rejecting and after accepting.
PLANNEDPHASE 5 · ACCOUNTS & FOUNDING TESTERSAccounts, domain verification and a 90-day beta with no card.
PLANNEDPHASE 6 · DEEP SCAN & HISTORYDeep scan, external footprint, history, changes and alerts.
PLANNEDPHASE 7 · MAIL INSPECTOR · LAB/003SPF, DKIM, DMARC and a real email test.

A single measurement from a server in Germany: timings are indicative.
Cookie banners are not interacted with yet (arrives in phase 4).
On heavy sites, accessibility is usually checked on the main page only because of the time budget.
Some sites block automated browsers: in that case results stay NOT DETERMINED.

2026-09-28 · methodology 0.3.0

Isolated real browser: axe-core accessibility, cookies, storage, third parties and trackers on the initial visit.
First finding on our own house: insufficient contrast on node249.org → fixed and verified.

2026-09-28 · methodology 0.2.0

Public Scan open: DNS, TLS, HTTP and security headers (20 rules) with SSRF protection.
First Web Inspector finding: our nginx exposed its version → fixed (server_tokens off).

2026-09-28 · methodology 0.1.0