Arg Architect

Audit any website's security, performance, architecture and AI readiness locally. Reports never leave your device.

Arg Architect audits the website you choose and tells you what is wrong, why it matters, and how to fix it. Everything runs inside your browser: reports stay on your device and are never uploaded. WHAT IT CHECKS • Security: security headers (CSP, HSTS, frame protection, referrer and permissions policies), cookies, mixed content, exposed secrets, and known-vulnerable client libraries, grouped by the attack each defence stops. • Performance: Core Web Vitals and load timings measured over repeated controlled page loads, using the median of all runs. • Architecture: third-party dependencies, API origins, redirect chains, and the detected technology stack. • Payload and efficiency: JavaScript, CSS, image and font weight, image formats and sizing, caching, compression, duplicate requests, and HTTP versions. • Accessibility and DOM: image alt text, form labels, heading structure, landmarks, duplicate ids, and page size. • AI readiness: robots.txt bot rules, sitemaps, llms.txt, structured data, and agent discovery, with llms.txt relevance judged by a built-in multilingual language model. FINDINGS YOU CAN ACT ON Every failing check explains the problem, names exactly what fails (the header, the file, the element, the library and its advisories), and recommends a fix. Copy any finding as a ticket draft for your issue tracker. HOW IT WORKS • Audit the current tab, or queue up to 10 URLs at once. • Audits run in their own window, so your browsing is never touched, and you get a notification when the queue finishes. • Cookie banners are answered with reject or essential-only, never accept. • Choose Quick, Standard or Thorough measurement in Settings. HISTORY AND COMPARISON Saved reports are grouped by day. Compare any two runs side by side, every score, check and measurement, to track progress over time or between two versions of a site. Export reports and comparisons as PDF, Markdown, or JSON. PRIVATE BY DESIGN • No account, no analytics, no tracking. • The language model and the vulnerability database ship inside the extension. • Nothing runs on the pages you browse normally; the page collectors run only on the site being audited, only during the audit. • Optional lookups that send a hostname to a DNS service (CDN detection, AI discovery) are off by default. Made by Arg Software - https://arg.software