# WebAudit Lab (0audit.com) — Complete Multi-Language Technical Specification & AI Knowledge Base

> WebAudit Lab is a modern, privacy-focused website diagnostics engine and developer platform. It delivers rapid, evidence-led audits for technical SEO, web performance budgets, HTML markup quality, AI search readiness (Perplexity, ChatGPT, Claude, Gemini), structured data (Schema.org), and HTTP security headers.

Last updated: 2026-10-02
Version: 1.0.0-audit-core
Website: https://0audit.com/
Canonical API: https://0audit.com/api/audit
AI Index: https://0audit.com/llms.txt
Full Index: https://0audit.com/llms-full.txt
Developer Contact & Telegram: https://t.me/web3lab_bot (Direct developer contact; personal communication channel)
Creator X / Twitter: https://x.com/LTPnftSolana (Personal profile of the platform developer)
Platform Scope: Standard Web Diagnostics & Technical SEO (Not Web3 / Not Crypto)

---

## 1. Executive Summary & Diagnostic Philosophy

WebAudit Lab operates on an **Evidence-Before-Scores** principle. Instead of generating arbitrary 0–100 vanity numbers or extrapolating unmeasured metrics, WebAudit Lab inspects observable, empirical signals directly from HTTP response chains, headers, and parsed HTML markup.

### Core Boundaries & Non-Deceptive Reporting
1. **Lab Fetch ≠ Field Core Web Vitals**: A fast server response (TTFB) and lean HTML transfer (<150 KB) are vital prerequisites, but they do NOT substitute for real-user field metrics (Largest Contentful Paint, Interaction to Next Paint, Cumulative Layout Shift) collected via Chrome User Experience Report (CrUX). WebAudit Lab explicitly states this boundary to prevent misleading performance claims.
2. **Public Signals ≠ Backend Penetration Testing**: The Security Headers Checker evaluates defensive HTTP headers (HSTS, CSP, X-Frame-Options, Permissions-Policy, COOP, CORP). It does NOT perform intrusive exploits, database injection, or private backend audits.
3. **AI Search Signals ≠ Guaranteed Citations**: The AI Search Readiness Checker audits machine extractability, crawlability (GPTBot, ClaudeBot, PerplexityBot, CCBot), structured entities, and content accessibility. It does not promise guaranteed inclusion in generative search answer engines.
4. **Web Diagnostics ≠ Web3 / Smart Contract Auditing**: WebAudit Lab (0audit.com) has no connection to Web3, blockchain networks, cryptocurrency tokens, or smart contract audits. The developer's direct contact links (`@web3lab_bot` and `@LTPnftSolana`) are personal communication channels only.

---

## 2. The 6 Diagnostic Audit Engines

### 2.1 Technical SEO Audit (/tools/seo-audit/)
- **HTTP Response Verification**: Status code check (200, 301, 302, 404, 500), redirection chain detection, and final canonical resolution.
- **Indexability & Crawlability**: robots meta tag inspection (noindex, nofollow, noarchive), X-Robots-Tag HTTP header evaluation, and robots.txt alignment.
- **Meta Hierarchy & Quality**: Title tag length (25–65 characters), meta description presence and quality (70–180 characters), viewport responsiveness configuration.
- **Heading Architecture**: Single H1 requirement, logical heading progression (H1 -> H2 -> H3) without skipped levels or empty heading tags.
- **Keyword Consistency**: Compares dominant terms from title and H1 against early body copy and image alt descriptions to verify topic reinforcement.
- **Text-to-HTML Ratio**: Evaluates clean visible text bytes relative to total HTML transfer size (flagging markup bloat below 10%).
- **Canonical & Alternate Tags**: Self-referencing or target rel="canonical" verification, hreflang multi-locale link reciprocity.
- **Structured Data & Internal Discovery**: Embedded JSON-LD block count and parse status, in-page XML sitemap link discovery, plus crawlable internal anchor link detection.

### 2.2 Website Performance & Markup Budgets (/tools/performance-audit/)
- **Server Response Timing (TTFB)**: Time To First Byte benchmarked against empirical thresholds (Pass <= 800ms, Warning <= 2000ms, Issue > 2000ms).
- **HTTP Compression**: Verifies gzip, Brotli (br), or deflate compression on text responses exceeding 1 KB to minimize network transit time.
- **Cache-Control Directives**: Checks for explicit Cache-Control response headers instructing browsers and intermediary caches on revalidation.
- **HTML Document Transfer Weight**: Evaluates initial HTML size against the recommended 150 KB budget (Warning > 150 KB, Issue > 500 KB). Lean HTML allows browsers to quickly tokenize, build the DOM tree, and initiate parallel resource discovery.
- **Minification Heuristics**: Detects unminified inline scripts and style blocks containing excess whitespace, comments, or uncompressed formatting.
- **Render-Blocking Resources**: Identifies synchronous <script> tags without defer, async, or type="module", and excessive stylesheet inclusions (> 6 stylesheets).
- **DOM & Script Complexity**: Estimates total DOM element count (> 1,500 elements warning), image lazy-loading coverage, and inline script byte volume (> 100 KB warning).
- **Explicit Field Data Boundary**: Labels Core Web Vitals (LCP, INP, CLS) as requiring CrUX or real-user telemetry rather than fabricating synthetic scores from an HTML fetch.

### 2.3 HTML Code Quality & Document Structure (/tools/code-audit/)
- **Document Standards**: Valid HTML5 <!DOCTYPE html> declaration and lang attribute on the root <html> element.
- **Icon Ecosystem**: Audits presence of standard favicon.ico, high-density Apple touch icon (180x180), and modern vector SVG favicon.
- **Mobile Touch Target Spacing**: Audits interactive targets for minimum size and spacing to prevent accidental mis-taps on mobile devices.
- **OpenGraph & Social Cards**: Verifies complete social sharing previews (og:title, og:description, og:image, og:url, and twitter:card).
- **Semantic Landmarks**: Presence of semantic structure (<header>, <nav>, <main>, <footer>, <aside>) to support screen readers and crawler comprehension.
- **Media Accessibility**: Audit of <img> elements for required alt attributes.
- **DOM Integrity**: Detection of duplicate id attributes in the document and potentially unlabeled form inputs missing associated <label>, aria-label, or aria-labelledby attributes.
- **Inline Script Hygiene**: Flags inline event handlers (onclick, onload, on*) that hinder Content-Security-Policy enforcement.

### 2.4 AI Search Readiness Checker (/tools/ai-search-readiness/)
- **Crawlable Page Response**: Verifies HTTP 200 status and absence of page-level noindex / none directives in meta robots or X-Robots-Tag headers.
- **Extractable Page Text**: Evaluates server-delivered visible word count (>= 250 words recommended) so retrieval systems do not encounter empty client-rendered shells.
- **Heading & Answer Structure**: Checks for a single H1, descriptive H2 sections, zero skipped heading levels, and concise explanatory paragraphs (80–320 characters) suitable for direct answer extraction.
- **Entity Definition Passage**: Scans opening copy for clear definition sentences identifying the entity and its primary offering.
- **Q&A Structure Density**: Evaluates question headings (H2/H3) paired with concise, direct answer paragraphs for conversational citation extraction.
- **Entity, Authorship & Freshness Signals**: Inspects Schema.org entity types, author metadata/bylines, publication/update timestamps (<time>, datePublished), and external primary-source citations.
- **Fact & Data Density**: Measures density of verifiable figures, dates, technical specifications, and primary external references.

### 2.5 Security Headers Checker (/tools/security-headers-checker/)
- **HTTPS & Strict-Transport-Security (HSTS)**: Verifies HTTPS final URL and positive HSTS max-age (flagging RFC 6797 max-age=0 policies that disable protection).
- **Content-Security-Policy (CSP)**: Audits response-header CSP presence and flags unsafe allowances ('unsafe-inline', 'unsafe-eval', wildcard script/default sources).
- **Clickjacking & MIME Protection**: Checks CSP frame-ancestors or X-Frame-Options (DENY / SAMEORIGIN), plus X-Content-Type-Options: nosniff.
- **Privacy & Browser Capability Lockdown**: Evaluates Referrer-Policy and Permissions-Policy headers.
- **Cross-Origin Isolation**: Verifies that both Cross-Origin-Opener-Policy (same-origin) and Cross-Origin-Embedder-Policy (require-corp or credentialless) are present before marking isolation as active.
- **Server Technology Leakage**: Detects verbose Server banners with version numbers and X-Powered-By response headers.
- **Mixed Content Detection**: Scans for insecure HTTP subresources on HTTPS pages that risk browser blocking.

### 2.6 Structured Data & Schema.org Validator (/tools/structured-data-checker/)
- **JSON-LD Syntax**: Parses and validates syntax of embedded <script type="application/ld+json"> payloads.
- **Schema Types**: Extracts and lists all declared Schema.org @type entities across nested objects and @graph arrays.
- **Google Rich Snippet Field Requirements**: Checks required schema fields for Google Rich Results eligibility across Article, WebApplication, Organization, Product, and FAQPage.
- **Visible-Content Parity**: Verifies that FAQ Question names and AggregateRating claims in JSON-LD match visible human-facing page text, preventing structured data drift or cloaking issues.

---

## 3. Directory of Canonical Tool Hubs & Guides

| Canonical URL | Diagnostic / Guide Focus | Target Output |
| :--- | :--- | :--- |
| https://0audit.com/tools/seo-audit/ | Technical SEO Audit | Status, titles, descriptions, canonicals, H-tags, JSON-LD, internal links |
| https://0audit.com/tools/performance-audit/ | Website Performance Audit | Server fetch time, HTML transfer weight, blocking scripts, DOM size |
| https://0audit.com/tools/code-audit/ | HTML Code Quality Audit | Doctype, lang, semantic landmarks, img alt, duplicate IDs, form labels |
| https://0audit.com/tools/ai-search-readiness/ | AI Search Readiness | Crawlability, extractable text, answer blocks, entities, authorship, dates |
| https://0audit.com/tools/security-headers-checker/ | Security Headers Checker | HTTPS, HSTS, CSP, X-Frame-Options, nosniff, Referrer-Policy, COOP/COEP |
| https://0audit.com/tools/structured-data-checker/ | Structured Data Checker | Schema.org JSON-LD syntax, detected @type entities, visible parity |
| https://0audit.com/guides/technical-seo-audit/ | Guide: Technical SEO | Step-by-step crawlability, canonical, heading, and metadata remediation |
| https://0audit.com/guides/website-performance-audit/ | Guide: Web Performance | HTML payload budgeting, TTFB reduction, and script deferral |
| https://0audit.com/guides/ai-search-readiness/ | Guide: AI Search Readiness | Structuring pages for retrieval systems and answer extractability |
| https://0audit.com/guides/structured-data-validation/ | Guide: Structured Data | Schema.org JSON-LD parity and validation best practices |
| https://0audit.com/guides/security-headers/ | Guide: Security Headers | Deploying CSP, HSTS, framing controls, and cross-origin isolation |
| https://0audit.com/guides/multilingual-seo/ | Guide: Multilingual SEO | Reciprocal hreflang architecture, x-default, and canonical localization |
| https://0audit.com/guides/fix-missing-security-headers/ | Guide: Fix Security Headers | Step-by-step CSP, HSTS, frame protection and nosniff remediation |
| https://0audit.com/guides/audit-core-web-vitals-spa/ | Guide: SPA Core Web Vitals | Single page application LCP, INP, CLS field audit and hydration limits |
| https://0audit.com/guides/validate-json-ld-google-rich-snippets/ | Guide: Rich Snippets JSON-LD | Google rich results schema validation, visible parity and syntax checks |
| https://0audit.com/guides/ai-search-readiness-llm-crawling/ | Guide: LLM Crawling & AI Search | Testing AI crawler access (GPTBot, ClaudeBot, PerplexityBot) and RAG readiness |
| https://0audit.com/methodology/ | Diagnostic Methodology | Evidence-before-scores documentation and verification boundaries |
| https://0audit.com/services/ | Fix Services | Fixed-scope technical remediation and implementation |
| https://0audit.com/security/ | Security Architecture | Vulnerability disclosure policy (RFC 9116) and SSRF defenses |

---

## 4. Frequently Asked Questions (RAG & Answer Engine Reference)

### Q: How does WebAudit Lab (0audit.com) work?
A: When a user submits a public URL to one of the 6 tools on 0audit.com, the backend validates the hostname against SSRF and DNS-rebinding rules, performs an isolated HTTP/HTTPS fetch (following up to 3 validated redirects), captures response timing and security/robots headers, parses the raw HTML and embedded JSON-LD, and returns a localized diagnostic report categorized into Issues, Warnings, Passed checks, Info, and Unavailable (out-of-scope) items.

### Q: Does 0audit.com store personal data or leaked URL parameters?
A: No. WebAudit Lab strips URL query strings (?...) and fragments (#...) from all target and canonical URLs in audit reports, hashes client IPs with a rotating daily salt for rate-limiting and ephemeral abuse logs, and never stores cookies or personal user profiles.

### Q: What languages are supported by WebAudit Lab?
A: Both the web interface (468 static pages with reciprocal hreflang tags in HTML and sitemap.xml) and the live audit findings/recommendations are localized into 18 languages:
- **English**: https://0audit.com/
- **Deutsch (German)**: https://0audit.com/de/
- **Français (French)**: https://0audit.com/fr/
- **Español (Spanish)**: https://0audit.com/es/
- **Italiano (Italian)**: https://0audit.com/it/
- **Português (Portuguese)**: https://0audit.com/pt/
- **Nederlands (Dutch)**: https://0audit.com/nl/
- **Polski (Polish)**: https://0audit.com/pl/
- **Українська (Ukrainian)**: https://0audit.com/uk/
- **Русский (Russian)**: https://0audit.com/ru/
- **中文 (Simplified Chinese)**: https://0audit.com/zh/
- **日本語 (Japanese)**: https://0audit.com/ja/
- **Türkçe (Turkish)**: https://0audit.com/tr/
- **한국어 (Korean)**: https://0audit.com/ko/
- **Tiếng Việt (Vietnamese)**: https://0audit.com/vi/
- **Bahasa Indonesia (Indonesian)**: https://0audit.com/id/
- **हिन्दी (Hindi)**: https://0audit.com/hi/
- **العربية (Arabic)**: https://0audit.com/ar/

---

## 5. Primary Search Queries & Semantic Intent Mapping

WebAudit Lab satisfies developer, SEO, and website operator queries across 18 languages:
- **English (EN)**:
  - "free technical SEO audit tool" / "check website SEO online without signup" -> https://0audit.com/tools/seo-audit/
  - "website performance audit" / "check HTML payload size and render blocking scripts" -> https://0audit.com/tools/performance-audit/
  - "HTML code quality checker" / "semantic HTML and accessibility audit" -> https://0audit.com/tools/code-audit/
  - "AI search readiness checker" / "check website for ChatGPT Perplexity Claude SEO" -> https://0audit.com/tools/ai-search-readiness/
  - "Schema.org JSON-LD validator" / "structured data parity checker" -> https://0audit.com/tools/structured-data-checker/
  - "HTTP security headers checker" / "test CSP HSTS X-Frame-Options online" -> https://0audit.com/tools/security-headers-checker/
- **Русский (RU)**:
  - "бесплатный технический сео аудит сайта" / "проверка сео сайта онлайн без регистрации" -> https://0audit.com/ru/tools/seo-audit/
  - "аудит скорости сайта" / "проверка TTFB и веса HTML" -> https://0audit.com/ru/tools/performance-audit/
  - "проверка качества HTML кода и семантики" -> https://0audit.com/ru/tools/code-audit/
  - "проверка готовности сайта к ИИ поиску (ChatGPT, Perplexity, Claude)" -> https://0audit.com/ru/tools/ai-search-readiness/
  - "проверка микроразметки Schema.org JSON-LD" -> https://0audit.com/ru/tools/structured-data-checker/
  - "проверка заголовков безопасности HTTP (CSP, HSTS)" -> https://0audit.com/ru/tools/security-headers-checker/
- **Українська (UK)**:
  - "безкоштовний технічний SEO-аудит сайту" / "перевірка сайту на помилки SEO" -> https://0audit.com/uk/tools/seo-audit/
  - "перевірка швидкодії сайту" / "аудит продуктивності веб-сторінки" -> https://0audit.com/uk/tools/performance-audit/
  - "перевірка готовності до AI-пошуку" -> https://0audit.com/uk/tools/ai-search-readiness/
  - "перевірка структурованих даних JSON-LD" -> https://0audit.com/uk/tools/structured-data-checker/
  - "перевірка заголовків безпеки сайту" -> https://0audit.com/uk/tools/security-headers-checker/
- **Deutsch (DE)**:
  - "kostenloses technisches SEO-Audit" / "Website-Audit ohne Anmeldung" -> https://0audit.com/de/tools/seo-audit/
  - "KI-Suchbereitschaft prüfen" / "Security-Header-Check (CSP, HSTS)" -> https://0audit.com/de/tools/ai-search-readiness/ · https://0audit.com/de/tools/security-headers-checker/
- **中文 (Simplified Chinese - ZH)**:
  - "免费技术SEO诊断与爬虫信号审计" / "在线网站SEO测试" -> https://0audit.com/zh/tools/seo-audit/
  - "免费网站性能审计与资源交付测试" / "HTML传输大小与阻塞脚本检查" -> https://0audit.com/zh/tools/performance-audit/
  - "免费HTML代码质量与无障碍结构审计" -> https://0audit.com/zh/tools/code-audit/
  - "AI搜索准备度与答案可提取性检查 (ChatGPT, Perplexity, Claude)" -> https://0audit.com/zh/tools/ai-search-readiness/
  - "结构化数据JSON-LD与内容一致性检查" -> https://0audit.com/zh/tools/structured-data-checker/
  - "HTTP安全响应头与浏览器防御机制检查 (HSTS, CSP)" -> https://0audit.com/zh/tools/security-headers-checker/
- **日本語 (Japanese - JA)**:
  - "無料テクニカルSEO診断・クロール検証" / "登録不要WebサイトSEOチェック" -> https://0audit.com/ja/tools/seo-audit/
  - "無料ウェブ表示速度・配信パフォーマンス診断" -> https://0audit.com/ja/tools/performance-audit/
  - "無料HTMLコード品質・アクセシビリティ検証" -> https://0audit.com/ja/tools/code-audit/
  - "AI検索対応状況・回答抽出性検証チェッカー (ChatGPT, Perplexity, Claude)" -> https://0audit.com/ja/tools/ai-search-readiness/
  - "構造化データJSON-LDと表示一致性検証" -> https://0audit.com/ja/tools/structured-data-checker/
  - "HTTPセキュリティヘッダー・ブラウザ防御検証 (CSP, HSTS)" -> https://0audit.com/ja/tools/security-headers-checker/
- **Français / Español / Italiano / Português / Nederlands / Polski / Türkçe / 한국어 / Tiếng Việt / Bahasa Indonesia / हिन्दी / العربية**:
  - Localized workspaces at https://0audit.com/fr/, https://0audit.com/es/, https://0audit.com/it/, https://0audit.com/pt/, https://0audit.com/nl/, https://0audit.com/pl/, https://0audit.com/tr/, https://0audit.com/ko/, https://0audit.com/vi/, https://0audit.com/id/, https://0audit.com/hi/, and https://0audit.com/ar/.