Michael Olmos

Audit MX, SPF, DMARC, and optional DKIM selectors with normalized DNS evidence and actionable findings.

Catch missing fields, invalid prices, duplicate IDs, inconsistent variants, and Google Merchant feed risks before import.

Extract clean YouTube transcripts with timestamps, language preference, chapters, video metadata, plain text, and explicit failure records—no buyer API key required.

Audit public ads.txt or app-ads.txt files for syntax, seller relationships, duplicate tuples, variables, and exact line evidence.

Turn noisy website snapshots into meaningful pricing, product, availability, legal, contact, and structural change alerts with importance, confidence, and before/after evidence—no AI key required.

Find why users may leave: turn App Store, Google Play, and support reviews into version-aware churn reasons, evidence, priority scores, and fixes.

Validate email syntax and mail domains with MX evidence, disposable-domain and role-address flags, transparent risk labels, and no SMTP messages.

Audit public URLs with complete redirect chains, status groups, timings, method fallback, and truthful failure evidence.

Monitor SaaS pricing pages and receive normalized plans, prices, billing units, packaging signals, screenshot evidence, and typed changes—not noisy page diffs.

Parse enforced and report-only Content-Security-Policy from response headers and HTML metadata into normalized directive and risk evidence.

Audit observable Set-Cookie headers for Secure, HttpOnly, SameSite, prefixes, Partitioned cookies, scope, expiry, and normalized evidence.

Test simple and OPTIONS preflight CORS behavior with normalized policy evidence, risky-pattern findings, and truthful per-endpoint failures.

Audit static HTML tables for captions, headers, scope, identifiers, presentation roles, and normalized table evidence.

Test Apify datasets against versioned contracts. Catch missing and extra fields, type and nullability drift, duplicate keys, and breaking schema changes with CI-ready evidence.

Audit static form controls for labels, names, types, autocomplete, required state, fieldsets, button names, and explicit accessibility evidence.

Extract H1-H6 structure, text, anchors, order gaps, duplicate headings, and accessible outline evidence for public pages.

Audit hreflang syntax, duplicates, canonical alignment, self-reference, x-default, and bounded reciprocal links with evidence.

Audit Cache-Control, validators, freshness, Vary, Age, and conditional revalidation with exact HTTP evidence and bounded public-web fetching.

Audit iframe titles, names, sources, lazy loading, sandboxing, referrer policy, duplicates, and normalized static evidence.

Audit HTML image alternative-text evidence, decorative semantics, source normalization, dimensions, and loading hints without claiming a full accessibility certification.

Extract, validate, and flatten JSON-LD schema nodes with block evidence, type inventory, malformed-block reporting, and page metadata context.

Audit links for observable accessible names, generic text, unsafe schemes, destination consistency, and normalized evidence.

Find insecure HTTP subresources and form actions on HTTPS pages with normalized URLs, active/passive classification, tag evidence, and remediation-ready output.

Validate public OpenAPI and Swagger documents into endpoint inventory, documentation, operation ID, response, and security evidence without calling API operations.