We check security, SEO, email spoofing, AI visibility and speed in a real browser. Findings are free; Solo ($12/mo) adds the prompt that fixes them.
QA Spider crawls your site in a real browser — more pages on a paid plan — and flags what could cost you: leaky security headers, an email domain anyone can spoof, weak SEO, AI assistants that cannot read you, thin accessibility and slow real-user speed. The audit and its findings are free; Solo ($12/mo) adds a prompt you paste straight into Cursor, Claude or ChatGPT to fix each one.
Free, no card. The report is ready in a few minutes; we only read public pages and change nothing. You sign in with an email code first.
A returning visitor can be moved to plain HTTP on a shared network, where session cookies can be read.
Add a Strict-Transport-Security header to every response…Anyone can send email that looks like it comes from your domain, and receivers are told to deliver it.
Screen readers announce these fields as “edit text” with no name.
ChatGPTDoes not recognize example.com
ClaudeDoes not recognize example.com
AI search crawlersAllowed by robots.txt
Your homepage does not say who you are in a form assistants read. The fix prompt adds it.
Not checked: sign-in flow (no test account given). Never counted as passed.
Sites lose customers quietly: people cannot find you in Google or in AI answers, a page breaks, it loads too slowly, or someone sends email in your name. QA Spider finds those leaks for free, hands you the fix on a plan, and it is built to give you the most for the least: more of what you get and how sure you can be, less time and less work.
We raise: What you get
More of the people who look for you find you in Google and AI answers, can use the site, get pages that load fast and email they can trust. What stands in the way is ranked by what to fix first.
We raise: How sure you can be
Every finding shows what we saw on your page and why it matters. What we could not check is marked not checked, never passed. We ran it on qaspider.com first and fixed what it found.
We cut: How long it takes
The report is on screen in a few minutes, with a copy in your inbox. No call to book and no audit to wait weeks for.
We cut: What it asks of you
Type your address, create an account and enter the code we email you. Nothing to install and no access to anything: public pages, read-only. With Solo, each fix is one prompt you paste into Cursor, Claude or ChatGPT.
What you do
3 steps
Then one paste per fix.
What QA Spider does
21 checks in 5 areas
Then it ranks what it found by what to fix first and, on a plan, writes a fix prompt for each finding.
Free to start, no card. The free audit shows the summary and your first findings. Solo ($12/mo) opens every finding with its full fix prompt.
Every finding says what it is and what it costs you; how to fix each one comes with Solo. Anything we could not check is listed as not checked, never as passed.
Security headers, cookies, DMARC and SPF (can someone send email as you?), certificate, Google Safe Browsing.
Pages that fail, broken links, console errors, missing pages that answer 200 instead of 404.
Titles, descriptions, canonicals, structured data and sitemap.
Whether the crawlers behind ChatGPT, Perplexity and Claude may read your site, and whether your homepage says who you are in a form they read. On Pro, what ChatGPT and Claude actually say about you.
Alt text, form labels, zoom on phones, page language.
Real-user speed from Chrome (CrUX) and Lighthouse lab scores.
We ran it on qaspider.com first. It found missing security headers, unlabelled form fields and lists that screen readers read as plain text. We fixed each.
The spider scans a web page and pins three things to fix on it.
Any public website: a shop, a landing page, a SaaS app. Nothing to install. Sign in with an email code and the report lands in your inbox in a few minutes.
A finding's fix prompt is copied into an AI coding tool, two lines of code change, and the finding is marked fixed.
Each finding comes with a prompt for your own AI tool. Free shows your first 4 findings. Solo unlocks the rest.
It only reads. It never submits a form or changes anything. It signs in only if you give it a test account.
It asks first. It identifies itself and stops if your robots.txt says no.
It keeps little. Your address and the report, deleted on request.
The spider walks your site the way it walks this web, strand by strand, and stops at each problem it finds. These four come from the sample report at the top of the page.
Sample findings, not a real site. The last one is shown after its fix prompt was used.
Connect Google Search Console (read-only) and Boost SEO tells you what to do first, then whether it worked.
Read-only. We never change your site or Search Console. We promise no rankings.
A page tells Google not to list it. If that is not what you want, remove the tag and the pages can appear in search.
Remove the noindex tag from these 12 URLs…Then, in this order: fix the broken sitemap · add 3 internal links · check results in 14 days
For product teams: autonomous UI and API tests that run on every deploy, file bugs where your team already works and tell you in chat.
Files bugs into
Alerts in
AI triage decides flaky test or real bug. Filing waits for your approval.
Free shows what is broken. Solo ($12/mo) shows how to fix all of it. Pro ($29/mo) adds Boost SEO and an audit that runs itself every week.
$0
See what is broken.
What you get:
$12/mo
Fix everything, not just the first four.
Everything in Free, plus:
$29/mo
Get found in search, and check it worked.
Everything in Solo, plus:
Testing on Pro is on demand. Scheduled runs, bug-tracker filing and chat alerts are Enterprise.
Choose ProLet's talk
Testing for your whole team.
Everything in Pro, plus:
Prices in USD, per organisation, per month. Free needs no card. Solo and Pro are billed monthly by card through Stripe; cancel any time. Compare all plans
The free audit reads up to 20 pages of your site in a real browser. It checks security headers, cookies, whether your email domain can be spoofed (DMARC and SPF), your certificate, Google Safe Browsing status, titles, descriptions, canonicals, structured data, your sitemap, accessibility basics, real-user speed from Chrome, Lighthouse scores and broken links. Paid plans read more pages per audit.
Every audit costs us a real crawl and a few speed lookups, so it runs for a person, not an anonymous click. You sign in with an email code or a social login and the audit starts straight away.
Free gives you the full run, the summary and your first 4 findings. Solo ($12/mo) unlocks every finding with its full fix prompt, including on the audits you ran before you subscribed, and reads up to 40 pages per audit.
Yes. The audit only reads: it never submits a form or changes anything, and signs in only if you give it a test account. If your robots.txt refuses automated access, it stops and says so.
Your email address and the report, so we can send it to you and you can open it again. We do not add you to a mailing list. To delete both, reply to the report email or write to [email protected].
Lighthouse measures one page in a lab, and AI page reviews read your copy. The audit also reads what your server sends (headers), the DNS records that decide whether someone can send email as you, whether missing pages wrongly answer 200, and real-user speed. Every check is listed, including the ones we could not run.
Boost SEO is a Pro feature for site owners. Connect Google Search Console (read-only) and it tells you what to fix first, why pages are not indexed, where you are almost on page 1, and whether your changes worked.
No. Boost SEO is read-only and shows what Google reports. After a fix we say a position “moved after you changed it”, never “because of”. We never send your Search Console data to an AI model.
Pro includes 1,000 testing credits a month for running and generating tests. Run generated tests on demand, pick which ones to run, save suites, generate a test from a description, or edit one visually. Scheduling, tracker filing, chat alerts and AI triage are part of Enterprise.
Yes, that is the Enterprise plan: autonomous UI and API tests, bugs filed to your tracker and alerts in chat. See “For teams”, or connect with us.