The sample wall

Real sites, really audited.

Every card below is a live audit we actually ran — scored, evidence-led, and honest. Click any one to read the full report. This is exactly what you get.

7.1/10

nodejs.orgDocumentation

Strong engineering, one locale shipping untranslated. Three serious WCAG failures repeat on every audited page and structured data is absent site-wide. Scored on 2 templates only — the homepage and Download; deeper sections (/docs, /learn, /blog) were not assessed.

11 findings · The Spanish homepage ships an English hero — H1, subtitle and both CTAs

6.9/10

simonwillison.netPersonal blog

Fast, clean, genuinely accessible — held under 7 by one dead feature on 25 archive pages and a machine-readable layer that is entirely absent.

13 findings · Tag cloud is dead on all 25 year archives — stale SRI hash blocks the script, container renders 560 × 0 px

6.7/10

linear.appSaaS · Product

Genuinely strong engineering, undercut by two site-wide defects: a canonical that hands a product page to a login stub, and a mobile menu no screen reader can name.

10 findings · /build tells Google its canonical version is a login page returning 200

6.3/10

stripe.comSaaS · Developer tools

Excellent platform engineering — sandboxed third parties, strict email auth, clean AI-crawler surface — undercut by two keyboard blockers sitting on the sales-lead path and a marketing template that emits 153 <h1> elements on the pricing page.

15 findings · Contact-sales form: 43 invisible controls still accept keyboard focus — the 8th Tab lands on a hidden 'Back' button

5.8/10

cnn.comNews · Media

Sound newsroom product · A broken error template and a 9,662 ms mobile homepage drag an otherwise competent build below the line

10 findings · The 404 template runs a separate legacy stack — 34 console errors, 10 CORS-blocked brand fonts, one TLS cert failure

5.8/10

www.sunexpress.comAirline · Travel

Correct where it counts, structurally slow — accessibility and consent are genuinely well built, but a client-rendered shell, a 12,147 ms LCP and a consent banner that covers the mobile booking widget hold it down. Homepage only — this score does not certify the booking funnel.

11 findings · 1,807,041 bytes of HTML deliver 114 characters of crawler-readable text — no H1, no JSON-LD

5.6/10

nettikasinopro.comAffiliate · Comparison

Well-engineered, genuinely trustworthy — and undermined by two defects. Three "different" pages ship an identical 36-casino list, and analytics cookies fire before any consent on a Finnish-language site.

14 findings · Three "different" pages ship the identical 36-casino list in the identical order

5.4/10

weather.comWeather · Utility

Solid engineering carrying a heavy ad stack. A 15,848 ms mobile LCP, ad and analytics vendors loading 1,273 ms before the consent dialog appears, and a primary nav tab that 404s outside the US are the ship-stoppers. Scope: 4 templates.

16 findings · The Allergies tab 404s for every non-US location — the other six nav tabs resolve

5.1/10

allbirds.comEcommerce · DTC

Strong storefront, four critical defects. The shopping experience itself is well built — but a dead consent platform, keyboard-unreachable legal policies and a 12.6-second mobile LCP are shipping on every page.

15 findings · Consent platform never loads — OneTrust script requests /consent/undefined/ and 404s

4.7/10

webflow.comWebsite builder

Strong platform, four shipping defects. Excellent layout stability and security posture, undercut by live 404s off the homepage, a missing mobile H1 on /apps, and ad/analytics tags firing before the consent banner.

16 findings · Three in-page links return a live 404 — including the homepage's Engineering-teams feature card