SYS-01EDGE SCANEVIDENCE-FIRST / NO LOGIN

Website Stack Scanner

Enter a URL to detect frameworks, hosting/CDN, data services, analytics and security headers from public HTML and response metadata. The result is presented as a system-health report, not a logo wall.

01Framework and platform traces02Hosting / CDN signals03Security headers

SYS-01 / EVIDENCE WORKBENCH

OBSERVED → HEURISTIC → DECISION

PUBLIC URL

Reads public HTML, HTTP headers, robots.txt, sitemap and advisory-file signals. Response bodies are bounded; JavaScript is not executed and private areas are not accessed.

Raw signals, quality checks and measurement boundaries appear here after a URL is scanned.

AC-METHODEVIDENCE → DECISION

The tool does not invent what it cannot observe.

The performance preflight is not Core Web Vitals. JSON-LD is preflighted against common documented Google properties, not the official Rich Results Test. Static accessibility signals are not axe/WCAG conformance.

Continue with FORGE

VERIFIED SECURITY / MDN HTTP OBSERVATORY V2

INDEPENDENT SOURCE

TARGET URL

This grade is not an Ahmet Canal heuristic; it comes from MDN's public Observatory v2 API. Verification sends the target host to MDN, and domain scan history may be publicly visible in Observatory.

After the main scan, verify the same URL here with an independent HTTP security grade.

WHEN TO USE IT

Understand the visible technology and delivery layers behind a website
Map public dependencies before a rebuild or migration
Review hosting, CDN and baseline security headers in one preflight

METHOD / INTERPRETATION

What is detected?

The scanner reads traces in public HTML and HTTP response headers. Framework, hosting/CDN, analytics, data services, payments and security layers are reported only when a reliable public signal exists.

How should the score be read?

A higher score does not mean more technology is better. It summarizes HTTP reachability, delivery signals, security headers and discovery files. Technology that cannot be detected publicly is not automatically treated as a problem.

BOUNDARY

Source code, private repositories, internal services and infrastructure visible only after authentication cannot be inspected.

If this output needs to become a real technical decision, move it into the FORGE flow.

Open FORGE

Website Stack Scanner

The tool does not invent what it cannot observe.

What is detected?

How should the score be read?

Has your product grown faster than its system?

Move from reading to a decision.

Technical call

Decision blocker