About
What WebTrustEngine does, who it serves, how it measures, and where it stops.
What WebTrustEngine is
WebTrustEngine is an audit engine that measures a website's technical trust, accessibility, performance, visibility and governance signals in a single pass and turns them into evidence. It produces two layers: a report a decision maker can read, and a work plan a delivery team can verify.
The measurable contract is machine-generated: 348 detectable checks (80 core + 268 granular), 68 defensive static security patterns, 21 runtime measurement bridges, 26 reversible fixers and 24 automatic action recipes. These are different units and are never summed into a single "total capability" number.
Who it serves
The primary reader is whoever has to make a decision about a web property: a managing director, an owner, a marketing or technology lead. The secondary reader is the person who will do the work — developer, content editor, infrastructure team. The report separates the two: decision and business impact first, then the measured signal, then the actionable step and the responsible team, and only then the technical evidence.
How it measures
The primary mode is static and passive: it reads a local folder, a ZIP package or an authorised URL, and analyses page source, configuration files and assets. Every finding is recorded with a file path, a pattern and a class; raw occurrences, unique signals, affected scope and proven root causes are counted separately, so the same problem is never counted twice.
Results ship with hashes, manifests and number provenance: the same input, scanned again with the same engine version, must produce the same number. Fixes are applied reversibly, and closure is re-measured automatically on the next scan.
The evidence boundary
We state this plainly, because scope is the easiest thing for an audit tool to overstate.
- It is not a penetration test. Active attack, form submission, writing to live systems and dynamic security testing are out of scope and require separate written authorisation.
- The score is not a guarantee. It does not replace a legal, security or accessibility certification; it exists to track progress across repeated scans with the same method.
- Unmeasured is never written as PASS. An indicator that cannot produce data is reported as insufficient data or not available; a gap is never presented as a success.
- It is not a third-party laboratory result. Measurement is local and auditable, and carries no independent accreditation claim.
Contact
For scope, review requests and press, follow the topic lanes on the Contact page. You can change your measurement choice at any time from the Measurement preference button in the footer of every page; that needs no application. How data is handled is written on the Privacy and Cookie Policy pages.