New audit
Enter a public address. Every address passes the URL policy before any request is made.
Website address
Prototype: the button is disabled and nothing is requested.
Start audit
Profile mobile-lab-v1 · about 4–5 minutes per site in the sample runs.
What a run does
The thin PoC pipeline from the project plan.
- 1. URL checkNormalise, refuse private and internal targets
- 2. Page selectionRank pages from Search Console and Analytics
- 3. QueueJob with timeout, retry and an idempotency key
- 4. Lab × 3Fixed mobile profile, median of three runs
- 5. CrUXURL first, origin fallback, explicit no data
- 6. Marketing & technicalStatus, headers, metadata, sitemap, H1, tags
- 7. Privacy × 3Isolated browser: before choice, reject, accept
- 8. ReportFindings, evidence, fix cards, comparison
URL policy check
The first gate runs on the address alone. DNS, redirect and subrequest checks follow in the real job.
| Address | Decision | Reason or normalised URL |
|---|---|---|
northbeam-staffing.example | Allowed | https://northbeam-staffing.example/ |
HTTPS://Clearpath-Compliance.example/#top | Allowed | https://clearpath-compliance.example/ |
ftp://northwind-dental.example/ | Refused | Only http and https addresses can be audited. |
https://admin:secret@northwind-dental.example/ | Refused | The address cannot contain a username or password. |
http://localhost:8080/admin | Refused | Local and internal network names cannot be audited. |
http://printer.local/ | Refused | Local and internal network names cannot be audited. |
http://intranet/ | Refused | Use a full domain, for example example.com. |
http://127.0.0.1/ | Refused | Private, loopback and reserved IP addresses cannot be audited. |
http://2130706433/ | Refused | Private, loopback and reserved IP addresses cannot be audited. |
http://10.0.0.5/ | Refused | Private, loopback and reserved IP addresses cannot be audited. |
http://192.168.1.1/ | Refused | Private, loopback and reserved IP addresses cannot be audited. |
http://169.254.169.254/latest/meta-data/ | Refused | Cloud metadata and link-local addresses cannot be audited. |
http://[::1]/ | Refused | IPv6 literals are not accepted in the PoC. Use a domain. |
https://northwind-dental.example:8443/ | Refused | Only the default ports (80 and 443) are allowed. |
not a url | Refused | This is not a web address. |