Catch the unintended side-effects of a growing website

ScanTheThings automatically audits your pages so you can keep things clean and compliant without the manual hunt

Instant In-Browser Audit
3 of 3 free guest audits remaining today
Audits (All 10 Included in Free Scan):
|
See The Capabilities
Scroll to inspect the 10 scan engines below
Comprehensive 10-Point Audit

The silent website issues that slip past review—caught before your visitors notice.

From ADA accessibility risks to broken checkout buttons and dead links, ScanTheThings audits every detail that affects your visitors in a single instant pass.

Accessibility & Compliance (WCAG)

Ensure every customer can use your product and protect your business from legal demand letters.

  • Low-Contrast & Unreadable Text Catches text that fails WCAG AA (4.5:1 ratio) or washes out on mobile screens in sunlight.
  • Missing Screen Reader Labels Detects form fields, buttons, and checkout inputs that blind or visually impaired users cannot identify or submit.
  • Keyboard & Navigation Traps Flags popups, modals, and dropdown menus that trap or lock out visitors navigating without a mouse.
Why it matters: Over 4,000 ADA lawsuits are filed each year. Beyond legal protection, accessible sites convert better and welcome 100% of your buyers.

Brand Polish & First Impressions

Prevent the embarrassing visual glitches that make a professional company look careless or broken.

  • Leaked Placeholders & Raw HTML Catches raw template variables like {{ customer.name }} and unescaped tags like <sup>1</sup>, <br>, or &nbsp; leaking into live headings and footnotes.
  • Embarrassing Spelling Mistakes Audits live rendered text across every page using a full 150k-word dictionary before clients, prospects, or executives read it.
  • Dead Links & 404 Disappointments Crawls internal and external hyperlinks to catch broken URLs, renamed marketing routes, and dead partner links.
Why it matters: Credibility is fragile. A dead link on your pricing page or raw placeholder code on your home page makes buyers hesitate right before purchase.

Speed, Stability & Conversions

Find the invisible technical glitches that cause prospective customers to leave in silence.

  • Silent Button & Form Freezes Traps hidden browser exceptions where a user clicks "Submit" or "Buy Now" and nothing happens—with zero visible warning.
  • Bloated Images & Media Lag Flags oversized 5MB–10MB graphics and unoptimized assets that freeze mobile devices and tank Core Web Vitals speed scores.
  • Blocked Scripts & Broken Social Previews Verifies that security policies (CSP) aren't blocking chat widgets or analytics, and confirms preview cards work in Slack and LinkedIn.
Why it matters: When a button freezes or a page lags, customers don't file support tickets—they simply close the tab and buy from your competitor.
Team & Workflow Architecture

Designed for teams who ship, not just developers who code

Traditional accessibility scanners are built for one person running one test at a time. ScanTheThings keeps everyone involved.

01 // Collaborative Workspaces

Audits Built for the Whole Team

The Problem: Most audit tools generate dense, isolated PDF reports or command-line outputs that only a developer can decipher. Product managers, designers, and QA leads get left out of the loop.
How ScanTheThings Solves It: Shared workspaces turn site audits into a centralized, visual hub. Anyone on the team—from content editors to product managers—can trigger a scan across a list of URLs and instantly see clear, readable insights without needing to write a line of code.
WORKSPACE LIVE
// TEAM: Acme Growth
List: Marketing Funnel
/index (Homepage)
Clean (0) 160ms
/pricing-plans
1 Contrast 210ms
/checkout-start
Clean (0) 290ms
Audit completed 4m ago
▶ Run Suite Audit
02 // Signal Over Noise

Noise-Free Collaboration (Ignore the Fluff)

The Problem: Automated audits usually flood teams with hundreds of repeat warnings for things that aren't actually broken. Eventually, everyone gets alert fatigue and stops looking at the reports altogether.
How ScanTheThings Solves It: One-click shared ignore rules. When a developer or QA lead verifies an acceptable quirk, they can mute it across the entire workspace. Your team only spends time discussing actual, unexpected regressions, keeping your reports actionable.
1 RULE APPLIED
WCAG 2.1 AA color-contrast
Node #4
<button class="btn-holiday bg-amber-400 text-white">Holiday Special</button>
Muted Across Entire Workspace
Active Ignore Rule

Reason: "Approved marketing design exception for Q4 seasonal campaign banner."

Verified by Alex (Lead QA) Mute Settings
14 other repeat warnings suppressed ✓ 0 Noise
03 // Zero-Surveillance Architecture

Privacy-First, Zero-Tracker Philosophy

The Problem: Most commercial audit platforms slap dozens of tracking pixels, session recorders, and third-party profiling scripts onto their tools, then charge steep subscription fees to cover their sales overhead.
How ScanTheThings Solves It: 100% cookie-free telemetry. No invasive ad trackers, no third-party profiling scripts, and no creepy retargeting. We rely on teams sharing a genuinely useful tool with their peers, which keeps our overhead lean, our pricing ridiculous, and your business data strictly private.
100% PRIVATE
Platform Telemetry Audit Evaluated on active session
0 Trackers Injected
Ad Retargeting Pixels 0 Detected
Session Replay Video BLOCKED (None)
3rd-Party Profilers 0 Requests
Cookie Storage Cookie-Free
Strict Zero-Host-Cost Guarantee: All audit probes run directly in your local browser sandbox or your private GitHub Actions CI runner. No business data ever leaves your control.
04 // Client-Side Engine

Zero Mandatory Installs. Real In-Browser Scans.

The Problem: Legacy audit extensions often demand permission to "read and change all data on every website you visit"—a severe supply-chain risk that enterprise IT security policies ban. Conversely, dumb cloud bots get blocked by Cloudflare firewalls (403 Forbidden) and locked out of internal staging environments.
How ScanTheThings Solves It:

1. Web App (Zero Installs): The core web runner operates 100% inside standard unprivileged browser tabs using isolated sandboxed iframes and your local CPU. Zero downloads, zero Chrome plugins, and zero IT security tickets required.

2. Browser Extension (Optional Power Tool): When you need to audit pages protected by strict anti-bot firewalls (Cloudflare Super Bot Fight Mode), private intranet portals, or local dev (localhost), our official extension audits the live tab in 1 click. Unlike legacy tools, it uses strict activeTab permissions—only running when explicitly clicked, with zero background tracking.

IN-BROWSER SESSION
TRADITIONAL BROWSER EXTENSION IT Security Flagged

↳ Demands "Read and change all data on all websites" • Blocked on enterprise devices; exposes internal network traffic.

SCANTHETHINGS (UNPRIVILEGED WEB TAB)
0 Plugins Required
✓ Sandboxed Isolation: Standard iframe runtime with zero host system access
Caught Runtime Bug: TypeError: Cannot read properties of undefined at bundle.js:412
SCANTHETHINGS EXTENSION (OPTIONAL)
ActiveTab Only
✓ Zero Snooping: Only inspects the tab when you click the icon
✓ Firewall Bypass: Audits Cloudflare-protected & behind-login pages
Security profile: 100% Client-Side Sandbox Behind-login audit complete
05 // Universal AI Workflow

Universal Autonomous Auditing for Any AI Development Workflow

The Problem: AI coding assistants and agents generate frontend code at blinding speed, but they operate blind to runtime accessibility regressions, broken contrast ratios, and missing ARIA landmarks on your dev server. Without a live browser feedback loop, developers are forced to manually copy errors between browser DevTools and AI chat prompts.
How ScanTheThings Solves It: ScanTheThings is 100% editor- and model-agnostic. Rather than locking you into a proprietary AI tool, our open Model Context Protocol (MCP) server integrates directly into whatever AI workflow you already use. Run npx scanthethings-mcp to equip your AI agent with native inspection tools to audit http://localhost:3000, pull exact WCAG remediation patterns, and autonomously self-heal bugs in place before you commit.
Native MCP Agents

Claude Code, Cursor, Windsurf, Devin, Antigravity

VS Code & Extensions

Cline, Roo Code, Continue.dev, GitHub Copilot

Any Model / Web Chat

DeepSeek, OpenAI Codex, Ollama (Local), Grok, ChatGPT

Setup AI Agent MCP → Zero host CPU • Runs 100% locally • No proprietary lock-in
MCP ACTIVE
AGENT TOOL CALL MCP :: audit_webpage
> audit_webpage({ url: "http://localhost:3000" })
1 Violation Detected: color-contrast (WCAG 1.4.3 AA)

Target: <button class="btn-primary"> • Ratio 3.1:1 fails required 4.5:1

AUTONOMOUS SELF-HEAL get_wcag_guidance

Fetching remediation spec ➔ Updating CSS to #475569 (5.2:1 contrast ratio)

✓ Re-audit passed: 0 violations. Code ready for commit.
100% WCAG AA
Protocol: Universal MCP (Stdio) npx scanthethings-mcp
Pricing & Plans

"We're in this together" pricing

Zero cloud compute calculations. Zero surprise monthly overages. Start free forever or unlock team usage rates and automation for $50/year flat.

Free Tier

$0 / forever

Everything needed to audit personal sites, side projects, and clients.

Daily URL Scan Quota 2,500 URLs / day
Per-Batch Audit Limit 500 URLs / batch
All 10 Audit Engines ✓ Included ($0 extra)
Sitemap XML Sync 1-Click Import & Re-sync
Execution Runners Browser + CLI / Actions
Team Workspace Seats 2 Seats (up to 4 via refs)
Findings Retention 30 Days
Summary Trend History ✓ Permanent
Audit Export Formats Markdown & AI Prompts
Create Free Account →
✓ No credit card required • Zero setup fee

Pro Tier

$50 / year (Billed annually)

Built for engineering teams, agencies, and enterprise site compliance.

Daily URL Scan Quota 25,000 URLs / day
Per-Batch Audit Limit 2,500 URLs / batch
All 10 Audit Engines ✓ Included ($0 extra)
Sitemap XML Sync ✓ Auto Background Sync
Execution Runners Browser + CLI / Actions
Team Workspace Seats 15 Team Workspace Seats
Findings Retention 180 Days (6 Months)
Summary Trend History ✓ Permanent
Audit Export Formats Email Summaries & PDF
Get Pro Tier ($50/yr) →
✓ It's so worth it
// Passwordless Magic Links: There are no passwords to create, remember, or compromise. Accounts authenticate securely via instant email Magic Links. Your email will only be used to send login links, deliver scheduled reports, and reach out if we ever genuinely need to talk to you—never shared, sold, or spammed.
Frequently Asked Questions

Can I run audits from my phone?

Viewing and triggering reports works anywhere, but multi-URL in-browser scanning must run in a desktop tab or via CI/CD. Mobile operating systems (both iOS Safari and Android Chrome) aggressively freeze background tabs and put screens to sleep after 30 seconds to conserve battery—halting in-flight Axe-core tests and sandboxed iframes midway.

// Recommended for mobile: Trigger your audits via our free CI/CD & CLI automation runner. Headless runners execute the scan in real Chromium with zero battery drain, and the completed audit appears on your phone automatically.
Enterprise & Compliance FAQ

How do corporate security (InfoSec) teams evaluate ScanTheThings?

ScanTheThings was engineered specifically to clear enterprise security reviews with zero friction on locked-down corporate laptops:

  • // 01 Zero Mandatory Elevated Privileges: The core web runner requires no plugins, background daemons, or desktop executables—operating entirely inside unprivileged browser tabs. For behind-firewall auditing, our optional browser extension strictly uses activeTab permissions that only activate when explicitly clicked.
  • // 02 Zero Data Exfiltration: Axe-core checks, DOM audits, and network probes execute locally on your machine’s CPU via sandboxed iframes. Proprietary staging URLs, source code, and session tokens are never sent to foreign cloud databases.
  • // 03 DevTools Auditable in 60 Seconds: Security engineers can open browser DevTools (Network & Console) and verify in real time that zero tracking pixels, ad beacons, or outbound payload leaks exist.
CI/CD & Automation FAQ

Are automated CI/CD and CLI scans as reliable as in-browser scans?

Yes—in fact, for automated regression testing, headless CI/CD and CLI runs are even more consistent and robust. While both methods power their accessibility audits with the industry-standard Axe-core engine, they serve complementary operational roles:

In-Browser Scans

Streams live visual progress directly in your active tab and runs the full 10-engine sweep (broken links, 404 assets, CSP, console errors, and code leaks). Pauses if your laptop sleeps or the browser tab is closed.

CI/CD & CLI Automation

Runs 100% unattended across any pipeline (GitHub Actions, GitLab CI, Azure DevOps, Docker, or cron) using real Playwright Chromium—waiting for full SPA hydration (networkidle) in a pristine sandbox with zero browser extension interference.

// The Bottom Line: Use In-Browser scans for quick interactive exploration and multi-engine hygiene, and rely on CI/CD & CLI automation for mission-critical pull request gates and scheduled post-deploy health audits.
AI Developer Tooling FAQ

Can autonomous AI coding agents and my existing AI workflow audit my site automatically?

Yes! ScanTheThings is 100% editor- and model-agnostic with an official Model Context Protocol (MCP) server. Whether you use Claude Code, Cursor, Windsurf, or VS Code extensions (Cline, Roo Code, Continue, Copilot), configuring npx scanthethings-mcp equips your AI agent with real-time web auditing tools:

Live Localhost & Header Audits

Your agent calls audit_webpage and check_security_headers against http://localhost:3000 to verify WCAG compliance, console errors, and CSP/HSTS headers before you push.

Remediation Knowledge Base

When an issue is flagged, the agent calls get_wcag_guidance to pull exact "Good vs Bad" code patterns for color contrast, ARIA landmarks, form labels, and image alt tags.

// Setup in 60 Seconds: In Claude Code, run claude mcp add scanthethings -- npx -y scanthethings-mcp, or check out our Automation Hub for step-by-step IDE configs.
Bring Your Own Model (BYOM) FAQ

Does ScanTheThings work with VS Code extensions (Cline, Roo Code, Continue) and custom LLMs (DeepSeek, Codex, Ollama)?

Yes, 100%. ScanTheThings is completely editor-agnostic and model-agnostic. You do not need to switch to an AI-native IDE to get autonomous frontend auditing:

VS Code Agent Extensions

Popular autonomous extensions like Cline, Roo Code, and Continue.dev feature native MCP support. Simply add npx scanthethings-mcp to your cline_mcp_settings.json or Continue config.

Any LLM Provider

Connect any AI model: DeepSeek R1/Coder, OpenAI Codex/GPT-4o, Anthropic Claude, or Local Ollama models. MCP passes clean structured findings so any model can reason and self-heal regressions.

// Web Chat Assistants: Using browser-only assistants like Grok, ChatGPT, or Claude.ai? Click AI Debug Prompt on any report dashboard to export token-optimized context directly into your chat.