FlawPilot Documentation
FlawPilot is a website health intelligence platform. Scan any URL in seconds
- FlawPilot grades security, performance, infrastructure, and SEO from publicly accessible signals, with no login, no credentials, free.
What FlawPilot does
FlawPilot inspects only what your site already exposes to the public internet: response headers, TLS configuration, DNS records, page metadata, and real-user performance signals. There is nothing to install, no agent to deploy, and no credentials to hand over.
Every scan produces a graded report across four categories:
| Category | What it covers |
|---|---|
| Security | Response headers, TLS, DNS/email auth, and known vulnerability signals |
| Performance | Core Web Vitals and loading speed across representative pages |
| Infrastructure | Open ports, subdomain hygiene, cloud storage, and edge protection |
| SEO | On-page metadata, crawlability, structured data, and link/image hygiene |
Who it's for
- Founders and product teams shipping on AI site builders (Lovable, v0.dev, Bolt.new, Replit) who need a health check before launch.
- Agencies running pre-handoff audits across a portfolio of client sites.
- Engineering teams who want a repeatable, external view of their public surface area.
Where to go next
- Getting Started - run your first scan.
- Scan Categories - what each category checks and why, and how the scores are calculated.
- Embed Badge - show your live health score in a README or on your site.
Drive FlawPilot from your own tools:
- MCP Integration - connect your AI assistant so it can trigger scans and read findings for you.
- REST API - trigger scans and poll results from scripts and CI/CD.
Run a scan now
No account needed - head to flawpilot.com and paste a URL.