Live monitoring of 37audits.com

The Agentic Resource Discovery (ARD) specification defines how publishers advertise agentic resources in a static ai-catalog.json manifest so registries can index MCP servers, A2A agents, and other capabilities. This auditor discovers the catalog at the well-known URI (with robots.txt Agentmap and HTML link fallbacks), then validates publishing headers and the AI Catalog JSON Schema MUST/SHOULD rules.

This checker uses a headless browser to detect JavaScript errors and console messages that may indicate issues with the website. The checker uses Playwright to load the page in a headless browser, captures all console messages and errors, monitors for JavaScript execution issues, and reports any console errors or warnings.

A comprehensive cache validation checker that analyzes cache headers for different types of web resources according to industry best practices. It validates cache configuration for HTML pages, static assets, and API responses, with platform-specific logic for Liferay environments.

Analyzes whether your website and its static assets (CSS, JavaScript, images, fonts, videos) are being served through a Content Delivery Network (CDN). This checker examines the main HTML document and all first-load assets to determine CDN coverage across your entire website.

This auditor validates SSL certificates for HTTPS websites, ensuring they are properly configured and not expired. The checker connects to the website via HTTPS, retrieves the server's SSL certificate chain, extracts certificate information including expiration date, and validates certificate format and validity.

This checker validates that websites use proper content encoding (gzip, deflate, brotli) to optimize page loading performance. The checker sends HTTP request with Accept-Encoding header, analyzes Content-Encoding response header, validates compression method and configuration, and ensures proper content compression.

This checker validates the Content-Security-Policy header for presence and security configuration, flagging policies containing unsafe directives that weaken XSS protection. The checker retrieves the Content-Security-Policy header from HTTP response, analyzes the policy for unsafe directives (unsafe-inline, unsafe-eval), and validates policy syntax and configuration.

This checker analyzes Set-Cookie headers for security best practices including Secure, HttpOnly, and SameSite attributes. The checker retrieves all Set-Cookie headers from HTTP response, analyzes each cookie for security attributes, validates Secure, HttpOnly, and SameSite configuration, and checks for proper domain and path settings.

Analyzes websites for cookie consent banners and GDPR compliance mechanisms. This checker detects the presence of cookie consent interfaces, validates the availability of both accept and reject options, and assesses whether users have proper control over their cookie preferences.

Evaluates whether a website is Client-Side Rendered (CSR) or Server-Side Rendered (SSR) by comparing HTML content with JavaScript enabled vs disabled.

This checker scans the technology stack for known Common Vulnerabilities and Exposures (CVEs) using the CVE.org database to identify security risks. The checker queries CVE.org REST API for each software component, analyzes CVSS scores and severity levels, compares against configurable thresholds, and provides detailed vulnerability reporting.

Validates BIMI (Brand Indicators for Message Identification) configuration for brand authentication.

Validates DKIM (DomainKeys Identified Mail) signatures for email authentication and integrity.

Validates DMARC (Domain-based Message Authentication, Reporting and Conformance) policy configuration.

Validates MTA-STS (Mail Transfer Agent Strict Transport Security) configuration for secure email transmission.

Validates MX (Mail Exchange) records for a domain to ensure proper email routing configuration.

Validates SPF (Sender Policy Framework) records to prevent email spoofing and improve deliverability.

Validates TLS-RPT (TLS Reporting) configuration for monitoring email security issues.

Checks domain expiration dates using RDAP protocol to identify domains that are expiring soon and require renewal attention.

This checker crawls websites to find FAQ pages using multiple detection methods including schema markup, microdata, and content analysis. The checker crawls website pages within the same domain, looks for JSON-LD with "@type": "FAQPage", scans for microdata with FAQPage itemtype, analyzes heading text for FAQ indicators, and limits crawling to prevent excessive requests.

This checker validates that HTML pages contain proper Google Analytics implementation by checking for the presence of the Google Analytics Global Site Tag (gtag.js) script and its configuration. The checker analyzes the HTML page to look for gtag.js script tags with async attribute, validate Google Analytics measurement ID format (G-XXXXXXXXXX), check for proper script loading sequence and configuration, verify consistency between script src IDs and config IDs, detect legacy Universal Analytics (UA) IDs, and validate script placement in the head section.