I'm building a website integrity and security monitor. The backend is written in Java/PostgreSQL. The front end is written in JS/React. It will allow for interactive use via front end or be API driven.
I initially was using SSE to push events down to the front end during long scans but decided to switch over to plain old HTTP polling for better reliability across different browsers (and versions of different browsers).
Here are the areas of analysis:
- accessibility
-- check for images with missing alt text
-- check for various form controls missing labels
-- headings not following (h1->h2->h3...)
-- missing lang attribute on <html>
- content
-- check for forbidden words and phrases
-- check for required words and phrases
- performance
-- evaluate time to load page
-- check for excessive inline JS
-- check for inline styles
- security
-- check for SSL certificate expiring soon
-- check for security HTTP headers
-- check whether Server HTTP header is too revealing
- seo
-- check for missing title in head section
-- check for missing meta description
-- check for multiple H1 headings
- site integrity
-- check for broken links
-- check for use of deprecated tags
-- check for insecure http link
- spell check
-- check for possibly misspelled words
Going for a 100% self-service model. No corporate sales cycles, no slide decks, no meetings.
Targeting a June launch.