Get Your Website or App Certified
Demonstrate your commitment to quality with a professional website audit or application safety assessment. Receive a detailed report, official certificate, and an embeddable badge to showcase your standards.
Website audits from $499 | certificate & badge included | request a quote
Comprehensive Website Analysis
For websites, our audit engine performs 298 individual checks across 12 critical categories, covering security, performance, SEO, compliance, and more. Applications use a separate safety engine — see below.
Transport Security
TLS/SSL configuration, certificate validity, protocol versions, HSTS, OCSP stapling, cipher strength, and encryption analysis.
Security Headers
Content Security Policy, X-Frame-Options, HSTS, CORP, COEP, COOP, Permissions Policy, Referrer-Policy, and clickjacking protection.
Cookie Security
Secure, HttpOnly, SameSite attributes, cookie prefixes, session fixation, and cookie naming analysis.
DNS & Email Security
SPF, DKIM, DMARC records, DNSSEC, CAA, MX configuration, and DNS lookup analysis.
Information Exposure
Server headers, technology leaks, directory listing, backup files, config files, source maps, debug indicators, and WordPress detection.
Authentication & Forms
Login form security, CSRF protection, password policies, rate limiting, CAPTCHA, session management, OAuth, and account lockout.
Client-Side Security
JavaScript vulnerabilities, eval/innerHTML usage, SRI, postMessage security, localStorage, outdated libraries, and open redirects.
Performance
Response times, page size, compression, caching, HTTP/2, lazy loading, DOM size, render-blocking resources, and font optimisation.
SEO & Accessibility
Meta tags, robots.txt, sitemap, canonical URLs, headings, alt text, mobile viewport, and analytics detection.
Reliability
DNS resolution, redirect chains, response variance, custom 404, CDN detection, TTFB, keep-alive, and error codes.
Progressive Web App
Web app manifest, service worker, icons, start URL, display mode, theme colour, Apple meta tags, offline capability, and app shortcuts.
Legal & Compliance
Privacy policy, terms & conditions, cookie consent, GDPR, CCPA, payment security (PCI), plus site-type checks for gambling, healthcare, finance, and more.
What the App Check Does
Upload an APK, EXE, DLL, JAR, IPA, or similar package. Our application safety engine performs heuristic and signature-based analysis (binaries are never executed) and produces a separate Application Safety Score (0–1000) — never mixed with the website score.
Integrity & Identity
File hashes, digital signature artefacts, extension/content mismatch, deceptive double extensions, and trusted publisher indicators.
Malware Heuristics
High entropy/packing signals, suspicious API imports, malware-like strings, ransomware/miner indicators, C2 endpoints, anti-analysis patterns, and weak/misused crypto heuristics.
Permissions & Capabilities
Dangerous permissions and risky combinations, exported components without protection, accessibility/overlay abuse, SMS/call access on non-messaging apps, tapjacking/task-affinity signals, sharedUserId, and package-visibility sprawl.
Packaging & Structure
APK signing completeness, debug/test flags left on, PE anomalies, archive nesting risk, native ABI anomalies, and backup enabled with sensitive-data hints.
Privacy & Tracking
Tracker/ad SDK density, hardcoded secrets and API-key patterns, cleartext traffic / network-security-config signals, WebView JS-bridge risks, and aggressive PII collection hints.
Reputation & Metadata
Suspicious naming, missing version/publisher metadata, size anomalies, and overall end-user trust signals — plus auditor manual red flags when needed.
How We Score
Website audits and application safety scans each start at 1,000 points. Points are deducted for each failed check, weighted by severity. Scores map to a letter grade — but the two systems are kept completely separate.
12 Scoring Categories
Each category contributes a weighted portion of the total 1,000 points
What You Receive
Every audit includes a comprehensive package designed to help you understand, improve, and showcase your website's standards.
Comprehensive PDF Report
A detailed document covering all findings, categorised by severity, with specific recommendations for remediation.
Official Certificate
A professional certificate confirming your website has been audited and meets our standards. Perfect for compliance documentation. Each certificate includes a unique reference number that can be verified online.
Embeddable Badge
A professional badge in two styles (with or without grade) that you can add to your website to show visitors you've been audited.
Why Audit With AS Online?
Choose Your Audit Plan
Every website plan includes our full 298-check multipage audit engine, verifiable certificate, and report artefacts. Tiers differ by expert review depth, retests, multi-site coverage, and ongoing support.
- 298-check multipage audit engine
- Detailed PDF assurance report
- Verifiable official certificate
- 1 embeddable trust badge
- 1 free retest after fixes
- Direct email support
- Everything in Starter
- Manual expert review layer
- Priority "Top 5 Fix First" list
- 2 embeddable badge styles
- 2 free retests
- Priority email support
- Everything in Pro
- Multi-site / bulk audits
- Quarterly re-audits
- Custom compliance checks
- Unlimited retests
- Dedicated support channel
- Separate Application Safety Score (never mixed with website scoring)
- Public or private assessment options
- Malware heuristics, permissions, privacy & packaging review
- Safety Cert, embeddable badge & detailed report artefacts
- Ready for public showcase when you opt in
- Custom scoping — contact for enterprise / multi-app programmes
- You submit a quote request (or email us).
- We review scope and reply with price and payment details.
- After agreement, we run the audit and deliver report, certificate, and badge.
Simple Process
Request a Quote
Submit the quote form with your website URL. We reply within 24 hours with a quote and payment details — there is no online checkout.
We Audit
Our engine runs 298 checks across 12 categories. We review results and prepare your report.
Receive Report
Get your detailed PDF report, certificate, and your embeddable badge.
Fix & Retest
Implement our recommendations. Your audit includes 1 free retest to verify improvements.
Already Have a Certificate?
Verify the authenticity of an existing AS Online Services audit certificate. Enter the reference number (found on your certificate) to confirm its validity.
Verify a CertificateFrequently Asked Questions
About 298 checks across security, performance, SEO, reliability, and compliance. Applications use a separate safety engine with its own score.
Starter $499, Pro $1,299, Enterprise from $2,999. Application Safety Testing is custom-quoted. Request a quote — we reply with pricing; there is no online checkout.
Yes. We certify websites and applications. Application safety testing covers APK, EXE, DLL, JAR and related packages with a separate Application Safety Score that is never mixed with website scoring.
The app engine runs heuristic and signature-based checks across integrity, malware indicators, permissions (including dangerous combinations, exported components, overlay/tapjacking, and package visibility), packaging (debug/test flags, native ABI anomalies, backup risk), privacy/tracking (secrets, cleartext/NSC, WebView bridges, tracker density), and reputation. Binaries are not executed. The score shows where an app stands on safety signals — it is not a recommendation to install or avoid the app.
Every website starts at 1,000 points. Points are deducted for each failed check, weighted by severity. Your final score maps to a letter grade from A+ (950–1000, Outstanding) down to E (0–549, Critical).
Results are typically delivered within 24 hours after we start the audit: PDF report, certificate, and badge codes.
Yes — every certificate has a unique reference you can check at asonlinesvc.dev/verify.
Starter includes 1 free retest, Pro includes 2, and Enterprise offers unlimited retests so you can verify improvements.
Ready to Get Certified?
Website certification from $499 — detailed report, verifiable certificate, embeddable badge, and retest included. Request a quote through the form; we reply with a quote and payment details. There is no online checkout.
View Our Portfolio