Domain-wide site audit
Discover pages from a site's sitemap, then check metadata, response reachability, security headers, Domain Rating, and certificate history.
Want to audit just one page instead? Use the single-page site audit.
Discovery reads robots.txt and sitemap XML server-side. It returns at most 50 page URLs. The default selection is 15 pages to stay within the existing endpoints' hourly request limits.
How this domain audit works
The Worker discovers sitemap URLs server-side to avoid browser CORS restrictions. The report then batches the existing metadata, security-header, and status endpoints within their current per-request URL caps. Domain Rating is supplied by Ahrefs, while certificate information comes from public Certificate Transparency logs.
This is a bounded audit, not a full crawler. It only sees URLs listed in the discovered sitemap, returns up to 50 discovered URLs, and audits only the pages you select. The default selection is 15 pages. Broken-link checking runs against the domain homepage only.
Frequently asked questions
What if a sitemap is missing or incomplete?
The audit analyzes only URLs discovered in the sitemap. If the sitemap is missing, inaccessible, or incomplete, discovery may return an error or fewer pages than the site actually contains.
Why are only 15 pages selected by default?
The selection is capped by default to keep multiple endpoint requests within their separate hourly limits. You can select from the discovered list, up to the 50 URLs returned by discovery.
Does it check broken links on every page?
No. Broken-link checking runs on the homepage only because that endpoint checks one URL per request and has its own hourly rate limit. Use the standalone Broken Links tool for other pages.
Is the certificate status a live SSL check?
No. Certificate data is taken from public Certificate Transparency logs via crt.sh, not a live TLS handshake.