Automated website audit reports for web studios

Industry: web studios and agencies · Client: our own product · Proof: live in production

The situation

Web studios sell monthly care plans, but most care-plan reports only list the updates that ran. Clients cannot see whether their site is easy to find on Google, turns visitors into enquiries, reads well on a phone or exposes anything it should not. Checking that by hand for every client site, every month, does not scale. A report the client does not trust does not keep the plan.

A studio needs three things from it: a report that proves the care plan is worth paying for, findings specific enough to turn into paid work and nothing in it that names a third-party tool their client could go and buy directly.

What we built

We built an automated website audit report that runs on every client site a studio covers and arrives each month under the studio's own brand. A headless browser loads each public page the way a visitor sees it, a catalogue of deterministic checks finds what needs fixing and the findings are ranked so the most valuable fix comes first.

Every check is written to be measured, not guessed. A check either finds a plain fact on the page or it does not run, and before a check can appear in a paid report it is scored against a set of test sites with known faults planted in them. Checks that touch security only run once the studio has proved it controls the domain, so the report can never be used to probe a stranger's site. Reports are generated on a schedule, kept for comparison and printed to PDF from the same page the client sees online, so the two never disagree.

The pieces we built:

• A versioned catalogue of shipped checks across the report's sections: search, AI search, conversion, trust, phone, accessibility and security
• A headless browser renderer that records page facts and lab speed figures
• Deterministic detectors with a ranking that weighs impact, severity and effort
• An accuracy harness: each check is scored against sites with planted faults, and paid reports only use checks proven at 0.95 precision or better
• Domain ownership proof by meta tag, file or DNS record before sensitive checks run
• Month-on-month results with charts and a print-ready PDF in the studio's brand
• An agency console to edit a report and export any finding as a ready-to-work fix ticket

The result

Studios get a report their clients can read in a minute: what was checked, what was found and what to fix next, under the studio's brand. Because every check is measured against planted faults before it counts, the report stays accurate as the catalogue grows. Checkout opened on 10 October 2026.

For the studio, each finding is also a quote: export it as a fix ticket, price it and do the work, then show it cleared in next month's report. The report becomes the proof that the care plan is working, which is what keeps a client paying for it.

Built with

Python, Django, Wagtail, Celery, Next.js, headless Chromium, PostgreSQL and hosted checkout.