Help & FAQ

Web auditing tools like ours work by making automated HTTP requests to websites and analyzing the responses. However, many websites implement security measures specifically designed to block or slow down automated requests:

• Web Application Firewalls (WAF) - Services like Cloudflare, Akamai, and AWS WAF detect and block automated traffic patterns
• Bot Protection - CAPTCHA challenges, JavaScript challenges, and behavioral analysis that automated tools cannot pass
• Rate Limiting - Servers that restrict how many requests can be made from a single source in a given time period
• IP Blocking - Some sites block entire ranges of IP addresses associated with cloud hosting providers
• Geographic Restrictions - Sites that only allow access from certain countries or regions

These security measures are legitimate and important for protecting websites from malicious bots, scrapers, and DDoS attacks. Our scanner respects these protections and will not attempt to bypass them.

If a scan fails, here are some things you can try:

1. Try a simpler URL - Scan the homepage (e.g., example.com) instead of a deep page (e.g., example.com/products/category/item)
2. Wait and retry - Some rate limits reset after a few minutes. Wait 2-5 minutes and try again
3. Try with/without www - Some sites behave differently with "www.example.com" vs "example.com"
4. Check if the site is accessible - Try visiting the site in your browser to make sure it's actually online
5. Verify the URL - Make sure there are no typos in the domain name