Get Your Website or App Certified

Demonstrate your commitment to quality with a professional website audit or application safety assessment. Receive a detailed report, official certificate, and an embeddable badge to showcase your standards.

A+
950 / 1000
Websites & Applications, Scored
Website audits: ~298 checks across security, performance, SEO & compliance. App safety: a separate score for integrity, malware heuristics, permissions, and privacy. Verifiable certificates for both.

Website audits from $499 | certificate & badge included | PayPal accepted

Learn More
Our Auditing System

Comprehensive Website Analysis

For websites, our audit engine performs 298 individual checks across 12 critical categories, covering security, performance, SEO, compliance, and more. Applications use a separate safety engine — see below.

🔒

Transport Security

TLS/SSL configuration, certificate validity, protocol versions, HSTS, OCSP stapling, cipher strength, and encryption analysis.

🛡️

Security Headers

Content Security Policy, X-Frame-Options, HSTS, CORP, COEP, COOP, Permissions Policy, Referrer-Policy, and clickjacking protection.

🍪

Cookie Security

Secure, HttpOnly, SameSite attributes, cookie prefixes, session fixation, and cookie naming analysis.

📧

DNS & Email Security

SPF, DKIM, DMARC records, DNSSEC, CAA, MX configuration, and DNS lookup analysis.

👁️

Information Exposure

Server headers, technology leaks, directory listing, backup files, config files, source maps, debug indicators, and WordPress detection.

🔑

Authentication & Forms

Login form security, CSRF protection, password policies, rate limiting, CAPTCHA, session management, OAuth, and account lockout.

💻

Client-Side Security

JavaScript vulnerabilities, eval/innerHTML usage, SRI, postMessage security, localStorage, outdated libraries, and open redirects.

⚡

Performance

Response times, page size, compression, caching, HTTP/2, lazy loading, DOM size, render-blocking resources, and font optimisation.

🔍

SEO & Accessibility

Meta tags, robots.txt, sitemap, canonical URLs, headings, alt text, mobile viewport, and analytics detection.

📡

Reliability

DNS resolution, redirect chains, response variance, custom 404, CDN detection, TTFB, keep-alive, and error codes.

📱

Progressive Web App

Web app manifest, service worker, icons, start URL, display mode, theme colour, Apple meta tags, offline capability, and app shortcuts.

⚖️

Legal & Compliance

Privacy policy, terms & conditions, cookie consent, GDPR, CCPA, payment security (PCI), plus site-type checks for gambling, healthcare, finance, and more.

Application Safety

What the App Check Does

Upload an APK, EXE, DLL, JAR, IPA, or similar package. Our application safety engine performs heuristic and signature-based analysis (binaries are never executed) and produces a separate Application Safety Score (0–1000) — never mixed with the website score.

🔐

Integrity & Identity

File hashes, digital signature artefacts, extension/content mismatch, deceptive double extensions, and trusted publisher indicators.

🦠

Malware Heuristics

High entropy/packing signals, suspicious API imports, malware-like strings, ransomware/miner indicators, C2 endpoints, anti-analysis patterns, and weak/misused crypto heuristics.

🔑

Permissions & Capabilities

Dangerous permissions and risky combinations, exported components without protection, accessibility/overlay abuse, SMS/call access on non-messaging apps, tapjacking/task-affinity signals, sharedUserId, and package-visibility sprawl.

📦

Packaging & Structure

APK signing completeness, debug/test flags left on, PE anomalies, archive nesting risk, native ABI anomalies, and backup enabled with sensitive-data hints.

👁

Privacy & Tracking

Tracker/ad SDK density, hardcoded secrets and API-key patterns, cleartext traffic / network-security-config signals, WebView JS-bridge risks, and aggressive PII collection hints.

⭐

Reputation & Metadata

Suspicious naming, missing version/publisher metadata, size anomalies, and overall end-user trust signals — plus auditor manual red flags when needed.

How app scoring works — The Application Safety Score starts at 1,000 and is built from six weighted categories (integrity, malware, permissions, packaging, privacy, reputation). Failed checks deduct points by severity; Critical/High findings weigh more heavily, and clusters of Medium/High issues apply an extra density adjustment. Decision bands: Pass at 850+ with no Critical/High failures; Fail below 600, any Critical, or 3+ High; otherwise Caution. Grades use letter bands A+ through E with safety-focused labels. This score shows where an app stands on safety and security signals — it is not a recommendation to install or avoid the app.
Scoring Methodology

How We Score

Website audits and application safety scans each start at 1,000 points. Points are deducted for each failed check, weighted by severity. Scores map to a letter grade — but the two systems are kept completely separate.

A+ Outstanding 950 – 1000
A Excellent 900 – 949
B Good 800 – 899
C Fair 700 – 799
D Poor 550 – 699
E Critical 0 – 549

12 Scoring Categories

Each category contributes a weighted portion of the total 1,000 points

🔒
Transport Security
140
⚖️
Legal & Compliance
140
🛡️
Security Headers
120
👁️
Information Exposure
110
🔑
Authentication & Forms
80
💻
Client-Side Security
70
⚡
Performance
70
🍪
Cookie Security
60
📧
DNS & Email Security
60
🔍
SEO & Accessibility
50
📡
Reliability
50
📱
Progressive Web App
50
Transparent & Fair — Each check is weighted by severity (Critical, High, Medium, Low, Informational). Category scores are normalised against the maximum possible deductions, ensuring that even areas with many checks produce fair, proportional results. Your overall grade reflects the weighted combination of all 12 categories.
Deliverables

What You Receive

Every audit includes a comprehensive package designed to help you understand, improve, and showcase your website's standards.

📄
Detailed PDF Report
20+ Pages

Comprehensive PDF Report

A detailed document covering all findings, categorised by severity, with specific recommendations for remediation.

🏆
CERTIFICATE
OF WEBSITE AUDIT

Official Certificate

A professional certificate confirming your website has been audited and meets our standards. Perfect for compliance documentation. Each certificate includes a unique reference number that can be verified online.

A
Audit Verified yoursite.com

Embeddable Badge

A professional badge in two styles (with or without grade) that you can add to your website to show visitors you've been audited.

Why Choose Us

Why Audit With AS Online?

🎯
Comprehensive Analysis Over 298 checks across 12 categories — security, performance, SEO, compliance, and more.
💡
Actionable Recommendations Clear, specific guidance on how to fix each issue found.
🏅
Professional Certification Recognised certificate and badges to showcase your commitment.
👤
Personal Service Direct contact with the auditor - no automated tickets or support queues.
🔐
Security Expertise 14+ years of experience in software engineering, security, and web standards.
💰
Transparent Pricing Professional-grade certification from $499. Clear tiers for single sites through multi-site programmes. PayPal accepted.
🔄
Free Retest Included Every audit includes 1 free retest after you’ve implemented fixes, so you can improve your score.
✅
Public Verification Portal Every certificate comes with a unique reference number that anyone can verify instantly on our public verification portal. Badges link directly to it — one click proves your site was audited and shows the grade, score, and audit date. No trust gaps, no guesswork.
Pricing

Choose Your Audit Plan

Every website plan includes our full 298-check multipage audit engine, verifiable certificate, and report artefacts. Tiers differ by expert review depth, retests, multi-site coverage, and ongoing support.

Starter
$499
Full certification package for a single site — deep automated assessment with report, certificate, and badge.
  • 298-check multipage audit engine
  • Detailed PDF assurance report
  • Verifiable official certificate
  • 1 embeddable trust badge
  • 1 free retest after fixes
  • Direct email support
Professional
$1,299
For businesses and client-facing sites that need expert review, prioritised remediation, and stronger certification artefacts.
  • Everything in Starter
  • Manual expert review layer
  • Priority "Top 5 Fix First" list
  • 2 embeddable badge styles
  • 2 free retests
  • Priority email support
Enterprise
From $2,999
For agencies, SaaS platforms, and organisations needing multi-site, compliance-led, or ongoing audit programmes.
  • Everything in Professional
  • Multi-site / bulk audits
  • Quarterly re-audits
  • Custom compliance checks
  • Unlimited retests
  • Dedicated support channel
📱 Application Safety Testing
Custom Quote
Independent safety assessment for APK, EXE, DLL, and other application packages — including Application Safety Score, Safety Cert artefacts, and optional public showcase. Scoped per binary, platform, and disclosure preferences. Contact us for a tailored quote.
  • Separate Application Safety Score (never mixed with website scoring)
  • Public or private assessment options
  • Malware heuristics, permissions, privacy & packaging review
  • Safety Cert, embeddable badge & detailed report artefacts
  • Ready for public showcase when you opt in
  • Custom scoping — contact for enterprise / multi-app programmes
298 Security & Quality Checks
Verifiable Certificates
Results Within 24 Hours
Secure PayPal Checkout
How It Works

Simple Process

1

Request a Quote

Email us with your website URL and any specific requirements. We'll respond within 24 hours.

2

We Audit

Our engine runs 298 checks across 12 categories. We review results and prepare your report.

3

Receive Report

Get your detailed PDF report, certificate, and your embeddable badge.

4

Fix & Retest

Implement our recommendations. Your audit includes 1 free retest to verify improvements.

🔍

Already Have a Certificate?

Verify the authenticity of an existing AS Online Services audit certificate. Enter the reference number (found on your certificate) to confirm its validity.

Verify a Certificate
FAQ

Frequently Asked Questions

Our audit engine runs 298 individual checks across 12 categories: Transport Security, Security Headers, Cookie Security, DNS & Email Security, Information Exposure, Authentication & Forms, Client-Side Security, Performance, SEO & Accessibility, Reliability, Progressive Web App, and Legal & Compliance.

Our Starter plan is $499 and includes the full 298-check audit, PDF report, verifiable certificate, and 1 embeddable badge. The Professional plan is $1,299 and adds manual expert review, a priority fix list, and 2 retests. Enterprise plans start from $2,999 for multi-site and ongoing audits. Application Safety Testing is custom-quoted.

Yes. We certify websites and applications. Application safety testing covers APK, EXE, DLL, JAR and related packages with a separate Application Safety Score that is never mixed with website scoring.

The app engine runs heuristic and signature-based checks across integrity, malware indicators, permissions (including dangerous combinations, exported components, overlay/tapjacking, and package visibility), packaging (debug/test flags, native ABI anomalies, backup risk), privacy/tracking (secrets, cleartext/NSC, WebView bridges, tracker density), and reputation. Binaries are not executed. The score shows where an app stands on safety signals — it is not a recommendation to install or avoid the app.

Every website starts at 1,000 points. Points are deducted for each failed check, weighted by severity. Your final score maps to a letter grade from A+ (950–1000, Outstanding) down to E (0–549, Critical).

Results are delivered within 24 hours. You'll receive a detailed PDF report, your official certificate, and embeddable badge codes.

Yes. Every certificate includes a unique reference number that can be verified at asonlinesvc.dev/verify to confirm authenticity.

Yes. The Starter plan includes 1 free retest, Professional includes 2, and Enterprise offers unlimited retests so you can verify improvements.

Ready to Get Certified?

Website certification from $499 — detailed report, verifiable certificate, embeddable badge, and retest included. Pay securely via PayPal. Send us your website URL and we'll provide a quote within 24 hours.

View Our Portfolio

Get a Quote

Fill in the form or email us directly