Your home page only
An unsolicited scan loads exactly one page. We do not crawl your site, follow internal links, or visit anything you have not linked from the page we loaded.
Scanning policy / Version 1.1
What our scanner does, and how to be excluded permanently.
If you arrived here from a line in your server logs, this page is why. Our scanner identifies itself and links here on every request, because a business owner who sees an unfamiliar bot in their analytics deserves a straight answer rather than a mystery.
What we do
We check, we score, and we show our work.
We check small business websites against a published accessibility and security checklist, and we contact some of the owners whose sites score poorly to offer a paid assessment. The mini-scan is free, unsolicited, and produces a score we are willing to show you. The checklist and the scoring weights are set out on our methodology page, and real scores appear in the scan library.
You can also simply ask, through the contact form. We cannot tell from a form who owns a website, so a submission is a request and nothing more: a founder decides whether to run the check and what to send back. Everything on this page applies to a requested scan exactly as it does to an unsolicited one, including the part where we load your home page and no other.
The rules our scanner follows
Enforced in the code, not merely stated here.
We identify ourselves
Every request carries a user-agent naming us and linking to this page. Nothing we send is anonymous.
We honor robots.txt and X-Robots-Tag
If either tells us not to, we stop before the page load, and we record that we stopped.
We are rate limited
No more than one request every four seconds to any single domain, with a hard ceiling on total requests.
We look, we do not touch
We read the page your server sends to any visitor. We do not submit forms, attempt logins, test for vulnerabilities, or probe for hidden pages. No active security testing of any kind.
We cache for 30 days
Once we have scanned a domain we do not scan it again for at least a month. The one exception is a site whose owner has hired us: work a client commissioned, on the dates set out in a signed agreement, is not an unsolicited scan.
Depth is gated on a signature
Reading more than the home page happens only after a client has signed an agreement authorizing the scope. That gate is compiled into the scanner, not left to a setting.
How to recognize us
Our requests carry this user-agent string:
Mozilla/5.0 (compatible; UditusBot/0.1.0; +https://uditus.com/scanning-policy)To block us, add this to your robots.txt:
User-agent: UditusBot
Disallow: /We check for it before every scan and we respect it immediately.
What we collect
Only what your server sends to any visitor: the HTML of your home page,its scripts and stylesheets, the response headers, and the results of running standard accessibility tests against it. We record which technologies we detected and how the page scored.
From that same home page — from that page and no other, and without any request beyond the ones the check has already made — we also pick out any email address published on it, together with where on the page we found it. We do that so that if we write to you at all, we write to an address you chose to publish rather than one we guessed at. Our privacy policy says the same thing at greater length.
We take nothing that is not already printed on the page we loaded, and we make no attempt to find personal information that is not. We do not collect anything about your visitors. We are not able to and we do not try.
How to be excluded, permanently
Email help@uditus.com with your domain name and we will add it to our suppression list. That listblocks bothscanning and any contact, and it is permanent — we do not expire opt-outs or ask again later.
That list stops what happens next; it does not by itself erase what is already recorded. Say in the same email that you want it deleted and we will delete what we hold about your site, including any address we picked off your page, and write back when it is done.
No explanation is needed and none will be requested. Blocking us in robots.txt has the same effect immediately, without emailing anybody.
What this scan is not
A scan is an assessment against a published checklist, observed on one date. It is not a certification, not a legal opinion, and not a statement about whether your website meets the requirements of the Americans with Disabilities Act or any other law. We are not a law firm and we do not give legal advice.
Automated testing detects only a portion of possible accessibility issues — a large share of them require human judgment. Nothing we send you predicts whether you will face any legal claim, and any message from us that reads that way is one we should not have sent. If you receive one, please tell us.
Who we are
Uditus is a trading name of Air2U LLC, an Indiana limited liability company. Our postal address is printed in the footer of every page on this site.
Questions
Questions about this policy go to help@uditus.com. We answer them.