# warOnSaaS Scanner

> A free, open-source scan of what AI assistants and search engines can read on a website's home page, scored out of 100, with the fix for every gap. No AI model is involved, so the same site gets the same score every time.

## What it checks

- What AI assistants can read (40% of the score): Whether ChatGPT, Claude, Perplexity and the like can read the site and quote it correctly.
- Search basics (25% of the score): The basics a search engine reads first: title, description, headings and links.
- Speed (25% of the score): How much the page costs to load, and Google's own speed test on a phone when it is available.
- Security basics (10% of the score): Encryption, a few security headers, language and phone layout.

## Key pages

- [Run a scan](https://scanner.waronsaas.com/): put in a website address and watch the scan
- [Reports](https://scanner.waronsaas.com/report/example-com): each scanned site has a shareable report at /report/<site-with-dashes>
- [Source code](https://github.com/warOnSaaS/scanner): Apache-2.0

## For agents

- MCP server (Streamable HTTP, OAuth sign-in with a free warOnSaaS account): https://scanner.waronsaas.com/mcp. Tools: scan_site, get_scan_status, get_report, compare_sites, list_recent_scans, list_checks.
- JSON API: GET https://scanner.waronsaas.com/api/scan?url=example.com (signed in), GET https://scanner.waronsaas.com/api/report/example-com (open to anyone)
- Reading any report or page never needs an account. Starting a scan does; without one the API answers 401 with error.code "sign_in". Sign in at https://scanner.waronsaas.com/auth/waronsaas; OAuth discovery for AI apps at https://scanner.waronsaas.com/.well-known/oauth-authorization-server.
- Live stream: GET https://scanner.waronsaas.com/api/scan/stream?url=example.com (server-sent events: step, area, done, fail)