Help Center
What is the difference between a Website URL audit and a GitHub / ZIP audit?
A Website URL audit inspects live HTTP headers, TLS, cookies, browser behavior, WCAG accessibility (@axe-core), mobile layout (390px), and performance. Connecting a GitHub repo or ZIP archive additionally unlocks static source-code analysis, live OSV.dev dependency CVE lookups, Dockerfile checks, and unified .patch generation.
How are CONFIRMED vs. SUSPECTED findings determined?
Our Finding Verification Agent performs independent re-checks and validates concrete DOM/HTTP/advisory proof before marking a defect CONFIRMED. Heuristic static code matches that depend on runtime input paths are labeled SUSPECTED with explicit confidence scores.
Can I generate reports in English, French, or German without rerunning the audit?
Yes. Canonical technical evidence (snippets, headers, selectors, URLs) is stored separately from localized EN / FR / DE explanations, enabling instant multi-language PDF, JSON, SARIF, and ZIP exports.
How are test credentials protected?
Smart Test Access encrypts credentials using AES-256-GCM with random IVs and authentication tags, never echoes secrets back to clients or reports, and supports instant rotation or revocation.