The Artifact Machine

Check WCAG accessibility issues using axe-core in a real browser.

Check cookie consent banners, GDPR/CCPA signals, and privacy policy presence.

Runs axe-core on every domain in a list and returns violation counts by severity. Screens a portfolio or prospect list for the machine-checkable part of ADA/WCAG risk.

For every domain: whether AI crawlers are allowed, whether llms.txt exists, and whether the sitemap is reachable. No browser needed. Blocked or unreachable files are reported as unknown, never as absent.

One row per domain: search readiness, answer-engine readiness, and the gap between them. Finds companies that invested in SEO and get nothing back from AI assistants.

A small artifact for checking whether AI search engines and AI assistants can access, cite, and understand a website.

Estimate CO₂ emissions per page load. Know your website's climate impact.

Check touch targets, viewport, font sizes, and mobile usability.

Check JSON-LD structured data quality and rich-result readiness.

Check security headers (CSP, HSTS, XFO, etc.) on any website. HTTP-only, no browser needed.

Check XML sitemap health, freshness, and crawlability signals.

Detect frameworks, analytics, CDN, hosting, and CMS from any website. HTTP-only, no browser.

Categorize external scripts by purpose and measure their impact.

Estimates page weight and CO2 per view for every domain in a list, with a grade. No browser needed, so it runs cheaply over large lists. Useful for ESG screening and sustainability reporting.

For every domain: company name, postal address, published email addresses and phone numbers, social profiles, and links to the contact, about and careers pages. Only what the company published on its own site — no guessed addresses, no permuted name patterns.

One row per domain: cookie banner present, which consent platform, privacy and do-not-sell links, and forms collecting personal data. Screens a list for GDPR/CCPA exposure.

For each domain: declared language, hreflang coverage, x-default, and whether the site is genuinely multilingual. Identifies companies selling across borders, and those doing it wrong.

Screens a list for the mobile problems that cost conversions: missing viewport, disabled zoom, and tap targets too small or too close together to hit reliably.

Grades the security headers of every domain in a list: HSTS, CSP, X-Frame-Options and more, plus TLS. No browser needed, so it runs fast and cheap over large lists.

Checks whether each domain has the Open Graph and Twitter Card tags that control how its links look when shared. Finds sites whose links render blank on LinkedIn, Slack and X.

One row per domain showing which analytics, tag managers and ad pixels each site runs. Answers "which of these companies uses HubSpot / GA4 / Meta Pixel" across a whole list.

Inventories the trust signals on each domain: testimonials, ratings, badges, customer logos, social proof, and privacy/terms links. Finds sites asking for money without earning it.

Extract brand colors, fonts, logos, and metadata from any website.