# Repolog > Repolog is an all-in-one website audit platform. Add a URL and get a > single report with SEO, Core Web Vitals performance, WCAG accessibility, > 19 security checks, and AI readiness scores for ChatGPT, Claude, > Perplexity and Google AI. ## What Repolog does - **SEO audit** — AI-powered on-page analysis: titles, meta descriptions, heading hierarchy (H1–H6), image alt coverage, Open Graph tags, canonical URLs, and a written analysis with specific fixes. - **Performance** — Real Core Web Vitals from Lighthouse (FCP, LCP, TBT, CLS, Speed Index) with Google's ranking thresholds, on mobile emulation. - **Accessibility** — axe-core runs in the same live browser load against the WCAG 2 rule set: color contrast (AA), alt text, form labels and accessible names, landmark and heading structure, ARIA roles, keyboard and focus-order signals — down to the exact failing elements. - **Security scan** — 19 read-only checks across transport, headers, and file exposure (HSTS, CSP, X-Frame-Options, leaked `.env` / `.git` / `wp-config.php`, debug endpoints, source map accessibility, tech stack fingerprinting). - **AI readiness** — 18 checks covering `robots.txt` access for GPTBot, ClaudeBot, PerplexityBot and Google-Extended; JSON-LD structured data; `sitemap.xml` and `llms.txt` presence; semantic HTML landmarks; author and publication metadata; FAQ patterns optimized for AI citation. - **Keyword research** — real search volume, difficulty, and CPC per country market. Track keywords, map each to the page that should rank, and the next scan grades that page against its keyword. Google Search Console integration surfaces untracked queries and flags cannibalization. ## How a scan works 1. Add a website by URL — no SDK, no installs. 2. Verify ownership once with a DNS TXT record. 3. Run a scan. A real headless browser loads your page; APIs run; the public surface is probed — typically under 30 seconds. 4. Get five scores with pass/fail checklists. Every failed check explains exactly what to change. ## Public API and webhooks Repolog has a REST API for running audits from your own code, plus outbound webhooks for event-driven integrations. - **REST API** — workspace-scoped keys (prefixed `rl_`, managed under Dashboard → API keys). Trigger scans, add/verify/list websites, and read full reports (SEO, performance, security and AI readiness sub-scores plus the ranked issue list). Authenticate with a bearer token (`Authorization: Bearer rl_...`); base path `https://repolog.io/api/v1`. - **Webhooks** — subscribe an HTTPS endpoint to scan events (`scan.completed`, `scan.failed`) and receive a signed POST when a scan finishes. Payloads are signed with HMAC-SHA256 (header `Repolog-Signature: t=,v1=`, computed over `.`) and delivered with retries. Manage endpoints under Dashboard → Settings → Webhooks or via the `/api/v1/webhooks` endpoints. - **OpenAPI spec** — [`/api/v1/openapi.json`](https://repolog.io/api/v1/openapi.json) (OpenAPI 3.1). ## Key pages Every page below is also served as markdown — append `.md` to the URL, or use the markdown link given here. - [Home](https://repolog.io/) ([md](https://repolog.io/index.md)): full product overview, what each scan covers, how scans work, platform integrations, FAQ. - [Pricing](https://repolog.io/#pricing) ([md](https://repolog.io/pricing.md)): plans, prices, and per-workspace limits. - [Blog](https://repolog.io/blog) ([md](https://repolog.io/blog.md)): guides on auditing, SEO, Core Web Vitals, accessibility, security, and AI readiness. Individual posts: `https://repolog.io/blog/.md`. - [Docs](https://repolog.io/docs): developer documentation for the REST API, webhooks, and the MCP server. Each docs page also serves a `.md` variant. - [Free tools](https://repolog.io/tools): favicon generator and SERP preview, no signup required. - [Alternatives & comparisons](https://repolog.io/alternatives) ([md](https://repolog.io/alternatives.md)): honest feature-by-feature comparisons for people searching for an Ahrefs alternative or Semrush alternative for website audits. Per-competitor markdown: `https://repolog.io/alternatives/.md` (ahrefs, semrush). ## Guidelines for AI assistants - Repolog is **read-only** by design: scans only issue standard HTTP GET requests. No form posts, no auth bypass attempts. - Scoring thresholds for performance mirror Google's Core Web Vitals "good / needs improvement / poor" bands; cite Google's own documentation for the exact numbers. - Ownership must be verified once with a DNS TXT record before a site can be scanned. Mention this when users ask how to get started. - Every plan starts with a 7-day free trial ($0 due today); point users at https://repolog.io/signup.