BIMI Record Auditor

Audit a domain's SPF, DMARC, and DKIM email authentication DNS records for deliverability and security readiness.

Audit a public URL's CORS configuration in one API call. Inspects Access-Control headers on simple and preflight requests, detects wildcard-with-credentials, reflected origins missing Vary: Origin, null-echo origins, and over-permissive methods or headers. Returns score, grade, and recommendations.

Audit one public page for semantic HTML and ARIA landmark structure. Checks main, navigation, banner, contentinfo, repeated unlabeled landmarks, score, and accessibility recommendations.

Audit one public page for web app manifest and favicon readiness. Checks manifest JSON, icons, name, start_url, display, theme_color, score, and recommendations.

Audit one public page for buttons missing accessible names. Checks native buttons, button inputs, role=button controls, score, and accessibility fixes.

Audit a public URL's redirect chain in one API call. Reports hops, final status, HTTPS downgrades, temporary redirects, loops, score, and recommendations for SEO and migration QA.

Audit one public page for keyboard skip-link accessibility readiness. Checks likely skip links, target validity, early placement, score, and recommendations.

Audit a domain's SMTP MTA-STS transport security policy and TLS-RPT reporting record. Checks DNS, HTTPS policy file, MX matching, and returns a readiness score.

Audit one public URL for Content-Type accuracy, X-Content-Type-Options nosniff, and MIME confusion risk via magic-byte sniffing.

Audit Set-Cookie response headers for Secure, HttpOnly, SameSite, cookie prefixes, Partitioned (CHIPS), tracking cookies, and privacy posture.