Your scan report — what L1, L2 and L3 show

# Your scan report — what L1, L2 and L3 show Every site scan produces a report. What's in it depends on your tier. ## L1 — the free scan report **Every scan has one, free, no card needed** (email captured = same report, just delivered). The L1 report covers what we can see from walking your site: - **Security** — score + verdict + per-finding name/status, the headline checks AI builders skip (TLS, security headers, cookie flags, mixed content, CSRF on forms, auth tokens in URLs). - **SEO** — score + findings across the pages you walked. - **Tech stack** — what your site is built with (framework, CDN, hosting, bot protection). - **Personal-data collection** — what PII your forms ask users for (see the separate article). - **The pages you walked** — URL, title, status for each. **L1 does not include performance.** Performance is a paid upgrade — see below. (A scan that was blocked by a firewall/WAF shows a partial report plus how to allowlist us for a free re-test.) ## L2 — the performance report (paid) L2 adds a **load test**: we replay your recorded journey under multiple concurrent users in real cloud browsers, then give you a **separate performance report** at `/scan//perf-report`: - Per-transaction response times (min / avg / median / p90 / p95 / p99 / max + std deviation) - Slowest and fastest steps, response-time distribution - Connection breakdown (TTFB / DNS / connect / SSL / payload) where captured - Errors by status code - AI fix prompts for the slow steps You only get an L2 performance report **if a load test actually ran** — we never show made-up performance numbers. If a journey can't be safely load-tested (needs login, unique data per user, or makes real purchases), we tell you why instead of faking it. L2 also issues a **verifiable certificate** + an embeddable badge. ## L3 — Watch & Report (subscription) Everything in L2, plus ongoing monitoring: monthly auto-rescans, a security-score trend over time, drift alerts when your posture changes, and an auto-renewing certificate. ## Where the reports link Your certificate page links to both: the **L1 scan report** (always) and the **L2 performance report** (only when a load test ran for that scan).