Website scanner
Scan your website page by page
Nobody fixes, documents or budgets for what has never been enumerated. A scan answers a different question from an audit: not what is wrong, but what is actually there. VeriFixScan crawls your pages and returns the inventory — the resources they pull in, the images they reference, the cookies they set, the outside parties they call and the technologies underneath.
An inventory, not a verdict
A checker reports that a page is slow. A scanner reports that it references two hundred and six resources drawn from nine external domains. The second is what you need before deciding which of them to remove. Every list here is built from responses that really arrived, deduplicated across the pages the crawl managed to reach.
What the crawl reaches, and what it leaves alone
The scan begins at the address you give it and follows links outward from there. Pages behind a login, behind a form, or excluded by your robots.txt are never fetched — those boundaries are respected rather than worked around. Coverage is reported beside the findings, so a short list is never mistaken for a clean one.
Outside parties are the part nobody has a list of
External scripts, fonts, embeds and pixels accumulate across years and across teams, and the list of them usually exists in nobody's head. The scan names the external domains serving resources to your pages, the trackers it could observe and the cookies really set in response headers, so the inventory exists before anyone starts asking about it.
One scan, read three ways
The inventory feeds everything else: a technology surfaced here is what the audit reasons about, and a resource counted here is what the performance findings measure. Scanning is not a separate exercise from checking a site — it is the layer sitting underneath.
What the scan enumerates
Each of these is a real check, and each one lists what it observed rather than what it expected to find.
Resources referenced
Number of resources the served HTML references (not browser requests).
Image inventory
Deduplicated list of the images the crawled pages really reference.
Third-party resources
External domains serving resources to the pages.
Cookie inventory
Every cookie observed in real Set-Cookie response headers during the crawl.
Tracker inventory
Consolidated view of every tracker the single detector could see, plus the ones it could not.
Technology inventory
Deduplicated list of every technology observed, with its category, evidence and detection method.
Subdomains
Subdomains observable from public sources (site links, DNS answers, mail records).
Structured data
JSON-LD structured data is present.
Infrastructure summary
Single consolidated view of IP, ASN, provider, CDN, proxy, WAF, DDoS and origin observability.
VeriFixScan scans what answers from outside and what your robots.txt allows. Pages behind a login are never fetched, and the scan does not look for vulnerabilities: it produces an inventory of your site, not a security assessment.
Enter your website address and VeriFixScan analyses it straight away. No account, no installation, nothing to add to your site.
Frequently asked questions
- What does a website scanner actually do?
- It crawls your pages and lists what they contain: the resources referenced, the images, the cookies set, the external domains called and the technologies detected. The result is an inventory you can act on rather than a score.
- How many pages does the scan cover?
- That depends on your plan and on how far the crawl gets from the address you give it. Coverage is reported alongside the findings, so you always know what the numbers rest on.
- Does the scan respect robots.txt?
- Yes. Paths your robots.txt disallows are never fetched. VeriFixScan does not work around crawl restrictions, rate limits or bot protection.
- Can it scan pages that require a login?
- No. The scan runs from outside with no credentials, so anything behind an authentication step stays out of reach and is reported as not covered rather than as clean.
- Is this a security scan?
- No. It inventories what your site exposes publicly. It does not probe for weaknesses and it never attempts to break anything.