Prototype. Sample sites use fixture data on .example domains. Quick scans are a single read of a home page, not a full audit.

Evidence

Every finding points to stored evidence with a content hash and a retention date. Cookie and request snapshots are redacted: no full cookie values or sessions.

Items
99
Redacted
26
Retention
30 d
Workspace default
Storage
R2
Planned; not connected in the PoC
EvidenceSiteTypeHashRetentionRedaction
Title is present: “Home - Northbeam Staffing”. It leads with a generic word rather than the service.snapshot://northbeam-staffing.example/run-northbeam-2026-11-10/html_extractnorthbeam-staffing.exampleHTML extractsha256:demo:220830a42026-12-10not applicable
No meta description was found. Search engines will pick their own snippet from page text.snapshot://northbeam-staffing.example/run-northbeam-2026-11-10/html_extractnorthbeam-staffing.exampleHTML extractsha256:demo:492f4fda2026-12-10not applicable
Canonical points to https://northbeam-staffing.example/.snapshot://northbeam-staffing.example/run-northbeam-2026-11-10/html_extractnorthbeam-staffing.exampleHTML extractsha256:demo:7b1ac5b42026-12-10not applicable
No H1 on the home page. The main statement is an H3; the remaining section headings are H4.snapshot://northbeam-staffing.example/run-northbeam-2026-11-10/html_extractnorthbeam-staffing.exampleHTML extractsha256:demo:7deed0dd2026-12-10not applicable
Open Graph title, URL, type and locale are set; og:image and og:description were not found, so shared links show no preview image.snapshot://northbeam-staffing.example/run-northbeam-2026-11-10/html_extractnorthbeam-staffing.exampleHTML extractsha256:demo:37f6b1702026-12-10not applicable
A generator meta tag exposes a plugin name and version.snapshot://northbeam-staffing.example/run-northbeam-2026-11-10/html_extractnorthbeam-staffing.exampleHTML extractsha256:demo:fb09d8ff2026-12-10not applicable
No analytics tag was visible in the page read. Tags loaded later by scripts would not show here.snapshot://northbeam-staffing.example/run-northbeam-2026-11-10/html_extractnorthbeam-staffing.exampleHTML extractsha256:demo:02f9afc22026-12-10not applicable
No cookie notice appeared in the page read. A browser run is needed before saying whether one is required.snapshot://northbeam-staffing.example/run-northbeam-2026-11-10/html_extractnorthbeam-staffing.exampleHTML extractsha256:demo:fb758cff2026-12-10redacted
Title is present: “Home - Clearpath Compliance Ltd.”. It starts with “Home” instead of the service.snapshot://clearpath-compliance.example/run-clearpath-2026-11-10/html_extractclearpath-compliance.exampleHTML extractsha256:demo:9e6974062026-12-10not applicable
Meta description is about 240 characters. Search results usually cut it at around 155–160.snapshot://clearpath-compliance.example/run-clearpath-2026-11-10/html_extractclearpath-compliance.exampleHTML extractsha256:demo:6f77b5802026-12-10not applicable
Canonical points to https://clearpath-compliance.example/.snapshot://clearpath-compliance.example/run-clearpath-2026-11-10/html_extractclearpath-compliance.exampleHTML extractsha256:demo:a14586d22026-12-10not applicable
Meta robots allows indexing: index, follow, max-image-preview:large.snapshot://clearpath-compliance.example/run-clearpath-2026-11-10/html_extractclearpath-compliance.exampleHTML extractsha256:demo:3c4815812026-12-10not applicable
Two H1 headings: “Data protection” and “Internal audit and compliance advisory”.snapshot://clearpath-compliance.example/run-clearpath-2026-11-10/html_extractclearpath-compliance.exampleHTML extractsha256:demo:e393c3fb2026-12-10not applicable
Open Graph title, description, image and URL are set, plus a large Twitter card.snapshot://clearpath-compliance.example/run-clearpath-2026-11-10/html_extractclearpath-compliance.exampleHTML extractsha256:demo:99a4989e2026-12-10not applicable
A generator meta tag exposes the WordPress version.snapshot://clearpath-compliance.example/run-clearpath-2026-11-10/html_extractclearpath-compliance.exampleHTML extractsha256:demo:b690e36d2026-12-10not applicable
No analytics tag was visible in the page read, although the cookie notice says cookies measure traffic. A browser run would show what actually loads.snapshot://clearpath-compliance.example/run-clearpath-2026-11-10/html_extractclearpath-compliance.exampleHTML extractsha256:demo:a7ca61f02026-12-10not applicable
A cookie notice is shown at the bottom of the page with a link to the privacy notice.snapshot://clearpath-compliance.example/run-clearpath-2026-11-10/html_extractclearpath-compliance.exampleHTML extractsha256:demo:cf6366f12026-12-10redacted
The notice has one button, “I accept”. No reject or necessary-only option was visible next to it.snapshot://clearpath-compliance.example/run-clearpath-2026-11-10/html_extractclearpath-compliance.exampleHTML extractsha256:demo:b2623e182026-12-10redacted
The notice says cookies can be disabled at any time, but no settings control was visible.snapshot://clearpath-compliance.example/run-clearpath-2026-11-10/html_extractclearpath-compliance.exampleHTML extractsha256:demo:ca8762f32026-12-10redacted
The start URL answers 200.mock://evidence/ev-run-northwind-2026-11-09-marketing.http_statusnorthwind-dental.exampleHTTP headerssha256:demo:6d23f1a82026-12-10not applicable
The page loads over HTTPS without mixed content.mock://evidence/ev-run-northwind-2026-11-09-marketing.httpsnorthwind-dental.exampleHTML extractsha256:demo:dc40886a2026-12-10not applicable
Content-Security-Policy and X-Content-Type-Options are missing. Both were present in the previous run.mock://evidence/ev-run-northwind-2026-11-09-marketing.security_headersnorthwind-dental.exampleHTTP headerssha256:demo:6b3cea862026-12-10not applicable
Unique title: “Northwind Dental – family dentistry”.mock://evidence/ev-run-northwind-2026-11-09-marketing.titlenorthwind-dental.exampleHTML extractsha256:demo:60d37c612026-12-10not applicable
Meta description is 148 characters. It was 42 in the previous run.mock://evidence/ev-run-northwind-2026-11-09-marketing.meta_descriptionnorthwind-dental.exampleHTML extractsha256:demo:749f4ed12026-12-10not applicable
Canonical points to the HTTPS start URL.mock://evidence/ev-run-northwind-2026-11-09-marketing.canonicalnorthwind-dental.exampleHTML extractsha256:demo:2d5f27cd2026-12-10not applicable
No noindex. robots.txt allows the home page.mock://evidence/ev-run-northwind-2026-11-09-marketing.robotsnorthwind-dental.exampleHTML extractsha256:demo:1e0087ac2026-12-10not applicable
Sitemap index found and listed in robots.txt.mock://evidence/ev-run-northwind-2026-11-09-marketing.sitemapnorthwind-dental.exampleHTML extractsha256:demo:4cb1b8802026-12-10not applicable
One H1: “Gentle dentistry for the whole family”.mock://evidence/ev-run-northwind-2026-11-09-marketing.h1northwind-dental.exampleHTML extractsha256:demo:9fb8efca2026-12-10not applicable
Open Graph title is set; og:image is missing.mock://evidence/ev-run-northwind-2026-11-09-marketing.ognorthwind-dental.exampleHTML extractsha256:demo:39b193732026-12-10not applicable
One MockStat tag is in the HTML. The audit does not check that the account measures correctly.mock://evidence/ev-run-northwind-2026-11-09-marketing.analytics_tagsnorthwind-dental.exampleHTML extractsha256:demo:a4eff61d2026-12-10not applicable
All three isolated states ran: before a choice, after reject, after accept.mock://evidence/ev-run-northwind-2026-11-09-privacy.three_statenorthwind-dental.exampleHTML extractsha256:demo:3d77c89d2026-12-10redacted
A consent banner appears on first visit.mock://evidence/ev-run-northwind-2026-11-09-privacy.consent_uinorthwind-dental.exampleHTML extractsha256:demo:1e5cddec2026-12-10redacted
Reject sits in a second layer; accept is one click. The two paths are not equally easy.mock://evidence/ev-run-northwind-2026-11-09-privacy.reject_comparablenorthwind-dental.exampleHTML extractsha256:demo:dd45f4132026-12-10redacted
A MockStat request leaves before any choice is made.mock://evidence/ev-run-northwind-2026-11-09-privacy.tracker_before_decisionnorthwind-dental.exampleRequest logsha256:demo:539a1dfa2026-12-10redacted
Cookie settings can be reopened from the footer. The link was missing last time.mock://evidence/ev-run-northwind-2026-11-09-privacy.settings_reopennorthwind-dental.exampleHTML extractsha256:demo:37284eb42026-12-10redacted
mockstat_id is not classed as necessary: its purpose cannot be decided from the evidence.mock://evidence/ev-run-northwind-2026-11-09-privacy.necessary_classificationnorthwind-dental.exampleHTML extractsha256:demo:0f39e0612026-12-10redacted
LCP, three lab runs: 3080, 2960, 3140mock://evidence/ev-run-northwind-2026-11-09-perf.lab.lcpnorthwind-dental.exampleLab JSONsha256:demo:ea1e282c2026-12-10not applicable
CLS, three lab runs: 0.12, 0.11, 0.13mock://evidence/ev-run-northwind-2026-11-09-perf.lab.clsnorthwind-dental.exampleLab JSONsha256:demo:0e278edf2026-12-10not applicable
TBT, three lab runs: 410, 380, 440mock://evidence/ev-run-northwind-2026-11-09-perf.lab.tbtnorthwind-dental.exampleLab JSONsha256:demo:325fa0d12026-12-10not applicable
FCP, three lab runs: 1820, 1760, 1900mock://evidence/ev-run-northwind-2026-11-09-perf.lab.fcpnorthwind-dental.exampleLab JSONsha256:demo:35ee42fe2026-12-10not applicable
SPEED_INDEX, three lab runs: 3900, 3700, 4100mock://evidence/ev-run-northwind-2026-11-09-perf.lab.speed_indexnorthwind-dental.exampleLab JSONsha256:demo:3f93e8e72026-12-10not applicable
Lab scores: 63, 66, 64mock://evidence/ev-run-northwind-2026-11-09-perf.lab.scorenorthwind-dental.exampleLab JSONsha256:demo:55ab0d112026-12-10not applicable
CrUX url LCP: empty response.mock://evidence/ev-run-northwind-2026-11-09-perf.field.url.lcpnorthwind-dental.exampleCrUX JSONsha256:demo:f38dc74c2026-12-10not applicable
CrUX url CLS: empty response.mock://evidence/ev-run-northwind-2026-11-09-perf.field.url.clsnorthwind-dental.exampleCrUX JSONsha256:demo:1798c0ff2026-12-10not applicable
CrUX url INP: empty response.mock://evidence/ev-run-northwind-2026-11-09-perf.field.url.inpnorthwind-dental.exampleCrUX JSONsha256:demo:e074982e2026-12-10not applicable
CrUX origin LCP: 2910mock://evidence/ev-run-northwind-2026-11-09-perf.field.origin.lcpnorthwind-dental.exampleCrUX JSONsha256:demo:741cb3af2026-12-10not applicable
CrUX origin CLS: 0.09mock://evidence/ev-run-northwind-2026-11-09-perf.field.origin.clsnorthwind-dental.exampleCrUX JSONsha256:demo:b22b73742026-12-10not applicable
CrUX origin INP: empty response.mock://evidence/ev-run-northwind-2026-11-09-perf.field.origin.inpnorthwind-dental.exampleCrUX JSONsha256:demo:428f4e3d2026-12-10not applicable
before_decision: redacted list of cookies and requests.mock://evidence/ev-run-northwind-2026-11-09-privacy-before_decisionnorthwind-dental.exampleCookie snapshotsha256:demo:c5ca37022026-12-10redacted
after_reject: redacted list of cookies and requests.mock://evidence/ev-run-northwind-2026-11-09-privacy-after_rejectnorthwind-dental.exampleCookie snapshotsha256:demo:1787746c2026-12-10redacted
after_accept: redacted list of cookies and requests.mock://evidence/ev-run-northwind-2026-11-09-privacy-after_acceptnorthwind-dental.exampleCookie snapshotsha256:demo:4d342dd32026-12-10redacted
The start URL answers 200.mock://evidence/ev-run-lumen-2026-11-07-marketing.http_statuslumen-studio.exampleHTTP headerssha256:demo:0a9ee81a2026-12-10not applicable
HTTPS only, HSTS set.mock://evidence/ev-run-lumen-2026-11-07-marketing.httpslumen-studio.exampleHTML extractsha256:demo:4d8b506c2026-12-10not applicable
CSP, nosniff, frame and referrer headers are present.mock://evidence/ev-run-lumen-2026-11-07-marketing.security_headerslumen-studio.exampleHTTP headerssha256:demo:67484d302026-12-10not applicable
Unique title on the home page.mock://evidence/ev-run-lumen-2026-11-07-marketing.titlelumen-studio.exampleHTML extractsha256:demo:c1d24e1f2026-12-10not applicable
Meta description is 132 characters.mock://evidence/ev-run-lumen-2026-11-07-marketing.meta_descriptionlumen-studio.exampleHTML extractsha256:demo:0910cdb32026-12-10not applicable
Canonical points to the HTTPS start URL.mock://evidence/ev-run-lumen-2026-11-07-marketing.canonicallumen-studio.exampleHTML extractsha256:demo:a0c38bd72026-12-10not applicable
Sitemap found.mock://evidence/ev-run-lumen-2026-11-07-marketing.sitemaplumen-studio.exampleHTML extractsha256:demo:12046fa22026-12-10not applicable
One H1.mock://evidence/ev-run-lumen-2026-11-07-marketing.h1lumen-studio.exampleHTML extractsha256:demo:e45dbf742026-12-10not applicable
Open Graph title, description and image are set.mock://evidence/ev-run-lumen-2026-11-07-marketing.oglumen-studio.exampleHTML extractsha256:demo:124cbebd2026-12-10not applicable
All three isolated states ran.mock://evidence/ev-run-lumen-2026-11-07-privacy.three_statelumen-studio.exampleHTML extractsha256:demo:5766168b2026-12-10redacted
No banner, and no non-essential cookie or tracker was observed in any state.mock://evidence/ev-run-lumen-2026-11-07-privacy.consent_uilumen-studio.exampleHTML extractsha256:demo:f59b40ba2026-12-10redacted
No tracker request in any state.mock://evidence/ev-run-lumen-2026-11-07-privacy.tracker_before_decisionlumen-studio.exampleRequest logsha256:demo:42de8cfc2026-12-10redacted
LCP, three lab runs: 1420, 1380, 1510mock://evidence/ev-run-lumen-2026-11-07-perf.lab.lcplumen-studio.exampleLab JSONsha256:demo:fba0c6b22026-12-10not applicable
CLS, three lab runs: 0.01, 0, 0.01mock://evidence/ev-run-lumen-2026-11-07-perf.lab.clslumen-studio.exampleLab JSONsha256:demo:f83115e92026-12-10not applicable
TBT, three lab runs: 40, 30, 60mock://evidence/ev-run-lumen-2026-11-07-perf.lab.tbtlumen-studio.exampleLab JSONsha256:demo:5c39e2bf2026-12-10not applicable
FCP, three lab runs: 900, 880, 940mock://evidence/ev-run-lumen-2026-11-07-perf.lab.fcplumen-studio.exampleLab JSONsha256:demo:afd0abe02026-12-10not applicable
SPEED_INDEX, three lab runs: 1500, 1450, 1620mock://evidence/ev-run-lumen-2026-11-07-perf.lab.speed_indexlumen-studio.exampleLab JSONsha256:demo:5f30e2bd2026-12-10not applicable
Lab scores: 97, 98, 96mock://evidence/ev-run-lumen-2026-11-07-perf.lab.scorelumen-studio.exampleLab JSONsha256:demo:11166bfb2026-12-10not applicable
CrUX url LCP: empty response.mock://evidence/ev-run-lumen-2026-11-07-perf.field.url.lcplumen-studio.exampleCrUX JSONsha256:demo:e24357122026-12-10not applicable
CrUX url CLS: empty response.mock://evidence/ev-run-lumen-2026-11-07-perf.field.url.clslumen-studio.exampleCrUX JSONsha256:demo:ded3a6492026-12-10not applicable
CrUX url INP: empty response.mock://evidence/ev-run-lumen-2026-11-07-perf.field.url.inplumen-studio.exampleCrUX JSONsha256:demo:33a84c742026-12-10not applicable
CrUX origin LCP: empty response.mock://evidence/ev-run-lumen-2026-11-07-perf.field.origin.lcplumen-studio.exampleCrUX JSONsha256:demo:391c15152026-12-10not applicable
CrUX origin CLS: empty response.mock://evidence/ev-run-lumen-2026-11-07-perf.field.origin.clslumen-studio.exampleCrUX JSONsha256:demo:1ce11e2e2026-12-10not applicable
CrUX origin INP: empty response.mock://evidence/ev-run-lumen-2026-11-07-perf.field.origin.inplumen-studio.exampleCrUX JSONsha256:demo:5bab145b2026-12-10not applicable
before_decision: redacted list of cookies and requests.mock://evidence/ev-run-lumen-2026-11-07-privacy-before_decisionlumen-studio.exampleCookie snapshotsha256:demo:2c26d1fc2026-12-10redacted
after_reject: redacted list of cookies and requests.mock://evidence/ev-run-lumen-2026-11-07-privacy-after_rejectlumen-studio.exampleCookie snapshotsha256:demo:552bb1862026-12-10redacted
after_accept: redacted list of cookies and requests.mock://evidence/ev-run-lumen-2026-11-07-privacy-after_acceptlumen-studio.exampleCookie snapshotsha256:demo:f3e282e92026-12-10redacted
The start URL answers 200 after one redirect from the www host.mock://evidence/ev-run-harbor-2026-11-05-marketing.http_statusharbor-goods.exampleHTTP headerssha256:demo:9e8a637f2026-12-10not applicable
HTTPS without mixed content.mock://evidence/ev-run-harbor-2026-11-05-marketing.httpsharbor-goods.exampleHTML extractsha256:demo:79b904a12026-12-10not applicable
No Content-Security-Policy.mock://evidence/ev-run-harbor-2026-11-05-marketing.security_headersharbor-goods.exampleHTTP headerssha256:demo:92eae2732026-12-10not applicable
Unique title.mock://evidence/ev-run-harbor-2026-11-05-marketing.titleharbor-goods.exampleHTML extractsha256:demo:d444195e2026-12-10not applicable
Canonical points to the http:// version of the home page.mock://evidence/ev-run-harbor-2026-11-05-marketing.canonicalharbor-goods.exampleHTML extractsha256:demo:a8769f9a2026-12-10not applicable
The sitemap request timed out. That does not mean the file is missing.mock://evidence/ev-run-harbor-2026-11-05-marketing.sitemapharbor-goods.exampleNotesha256:demo:736d33932026-12-10not applicable
One H1.mock://evidence/ev-run-harbor-2026-11-05-marketing.h1harbor-goods.exampleHTML extractsha256:demo:ec051ad32026-12-10not applicable
All three isolated states ran.mock://evidence/ev-run-harbor-2026-11-05-privacy.three_stateharbor-goods.exampleHTML extractsha256:demo:4bd18ef22026-12-10redacted
A consent banner appears with accept and reject on the first layer.mock://evidence/ev-run-harbor-2026-11-05-privacy.consent_uiharbor-goods.exampleHTML extractsha256:demo:0d7f58092026-12-10redacted
Accept and reject have the same weight.mock://evidence/ev-run-harbor-2026-11-05-privacy.reject_comparableharbor-goods.exampleHTML extractsha256:demo:3ebe26c02026-12-10redacted
An advertising pixel request leaves before any choice. It did not in the previous run.mock://evidence/ev-run-harbor-2026-11-05-privacy.tracker_before_decisionharbor-goods.exampleRequest logsha256:demo:4b083dc12026-12-10redacted
Lab request timed out.mock://evidence/ev-run-harbor-2026-11-05-perf.lab.collectharbor-goods.exampleNotesha256:demo:0a915dec2026-12-10not applicable
CrUX url LCP: 3480mock://evidence/ev-run-harbor-2026-11-05-perf.field.url.lcpharbor-goods.exampleCrUX JSONsha256:demo:680b81812026-12-10not applicable
CrUX url CLS: 0.06mock://evidence/ev-run-harbor-2026-11-05-perf.field.url.clsharbor-goods.exampleCrUX JSONsha256:demo:e575cdda2026-12-10not applicable
CrUX url INP: 260mock://evidence/ev-run-harbor-2026-11-05-perf.field.url.inpharbor-goods.exampleCrUX JSONsha256:demo:243fc4072026-12-10not applicable
CrUX origin LCP: 3310mock://evidence/ev-run-harbor-2026-11-05-perf.field.origin.lcpharbor-goods.exampleCrUX JSONsha256:demo:31f8b3602026-12-10not applicable
CrUX origin CLS: 0.05mock://evidence/ev-run-harbor-2026-11-05-perf.field.origin.clsharbor-goods.exampleCrUX JSONsha256:demo:bcae1bb32026-12-10not applicable
CrUX origin INP: 240mock://evidence/ev-run-harbor-2026-11-05-perf.field.origin.inpharbor-goods.exampleCrUX JSONsha256:demo:835f3bc22026-12-10not applicable
before_decision: redacted list of cookies and requests.mock://evidence/ev-run-harbor-2026-11-05-privacy-before_decisionharbor-goods.exampleCookie snapshotsha256:demo:f1a522e92026-12-10redacted
after_reject: redacted list of cookies and requests.mock://evidence/ev-run-harbor-2026-11-05-privacy-after_rejectharbor-goods.exampleCookie snapshotsha256:demo:250724992026-12-10redacted
after_accept: redacted list of cookies and requests.mock://evidence/ev-run-harbor-2026-11-05-privacy-after_acceptharbor-goods.exampleCookie snapshotsha256:demo:a52449322026-12-10redacted