01 — Ship files
Configs you paste. Not a PDF you ignore.
nginx headers, vercel.json, a WordPress mu-plugin, llms.txt, security.txt. Copy or download. This is how you leave Semrush and Lighthouse behind.
Launch · every feature unlocked FOR FREE
Free Website Audit for SEO, Security, Performance & AI Search
Not another score. A ship file.
Scan multiple pages, detect your CMS and uncover technical SEO, security, performance, accessibility and AI-search issues. Get implementation-ready fixes instead of another generic score.
No card. Three guest scans, then an account. Save them to a workspace →
WordPressShopifyNext.jsWebflowWooCommerceWixSquarespaceDrupalJoomlaGhostMagento / Adobe Commerce: FPC, apps, and a crawl that skips checkoutBigCommercePrestaShopHubSpot CMSFramerNuxtGatsbyAstroRemixSvelteKitDocusaurusContentful: we saw the CDN. The origin is still your framework.SanityStrapiLaravelDjangoRailsTYPO3Craft CMSDudaWeeblyBlogger / Blogspot: a template, a custom domain, and almost no header UIShopify Hydrogen: Oxygen, RSC, not a theme app embed
Live index
Last ten. Top ten.
Latest unique hosts
02 — URL walk
Homepage lies. Five interiors tell on you.
Not a TTFB ping. Each walked URL gets the full brief: headers, titles, schema, noindex, cache, AI-bot policy, WCAG in the HTML. Observer 5 interiors. Operator 10. Studio 20. Guest scans use five. Launch signed-in uses twenty.
03 — AI citations
What a model can quote vs invent
We simulate the answer an engine can ground from your HTML. Then we list the facts it would have to hallucinate. That is GEO, not a keyword density toy.
04 — Deltas & vs
Beat last week. Beat the competitor.
Rescan the same host and watch the score move. Optional competitor URL from the form: we fingerprint their CMS, score the same chapters, and put their findings next to yours — what they ship that you still hide.
Blog
Notes you can ship
Jakub Jóźwiak · 31 August 2026
CORS Configuration Checker for Real Website Risk
A CORS configuration checker reveals which origins can read your site responses, where credentials leak, and how to turn header findings into fast fixes.
Read the note →Technical SEO Audit: Find What the Homepage Hides
A technical SEO audit should crawl beyond the homepage, expose deployable fixes, and show where search, speed, and AI visibility break down at scale.
AI Search Optimization That Ships, Not Scores
AI search optimization means making your site easy for answer engines to crawl, verify, and cite with clear facts, schema, and deployable fixes at scale.
Questions we actually get
How is this not Lighthouse / Semrush / another SEO crawler?
Those tools score a URL and email you a PDF. SiteRune fingerprints the CMS, walks the interior (full chapters, not TTFB-only), writes the actual config files, and shows what an answer engine can ground from your HTML. The score is the trailer. The ship tab is the movie.
How many pages do you actually scan?
Homepage plus interiors from nav, sitemap, and llms.txt. Guest and Observer: 5 interiors. Operator: 10. Studio: 20. During Launch, a signed-in workspace walks 20 — same as Studio — while guest scans stay on 5. Each of those URLs gets security, SEO, performance, AI-search, and HTML accessibility — not a ping.
Is this a penetration test?
No. SiteRune only looks at what a polite crawler can see: HTML, headers, robots, sitemaps, public JSON-LD. It does not run exploits, fuzzers, or credential stuffing. The security chapter is a configuration review, not a red team.
Do I need an account?
Three guest scans from the homepage, no card. After that, create a free account to keep history and keep scanning. Launch still unlocks every feature on the account.
Launch notes. Not a drip sequence.
Product drops, methodology changes, public briefs worth stealing from. Unsubscribe in one click. Accounts are added automatically.