Assessment console

No application selected

Ownership: unknown Repository: unknown

No assessment selected

This console will show observed controls, evidence age, findings, and certificate state after an authenticated assessment has completed. It does not display placeholder scores or synthetic activity.

Run an evidence-backed verification

Submit a public HTTPS URL. PlatPhorm Ready runs bounded HTTP, discovery, specialist, contract, feed, policy, and MCP checks, then returns a run ID and evidence-backed results.

The dashboard uses your signed-in session. The shared PLATPHORM_API_KEY stays in Vercel and is never entered into or sent from the browser. Repository evidence is available through API or MCP only.

Control registry

8 domains are defined in the public standard. Coverage is unknown until an assessment produces evidence.

Protocols & transport

18 controls

TLS, HTTP behavior, DNS, redirects, compression, caching, cookies.

Pages & crawl surface

24 controls

Routes, sitemaps, robots, canonicals, hreflang, feeds, broken paths.

OWASP & vulnerability

31 controls

Headers, exposure, dependencies, DAST, secrets, supply-chain integrity.

Trust & well-known

16 controls

security.txt, change-password, policies, ownership, disclosures, contacts.

APIs & contracts

22 controls

OpenAPI, schemas, compatibility, errors, idempotency, rate limits, webhooks.

Legibility & access

19 controls

WCAG, semantics, contrast, language, keyboard, responsive rendering.

Agents & discovery

14 controls

MCP, llms.txt, structured data, agent permissions, human escalation.

Operations & evidence

40 controls

CI, provenance, SBOM, observability, incident readiness, retention.