AXRAY
Sign inCreate account

Contact

One inbox, read by a person. Messages sent here are answered within 48 hours on working days — that is a number we can keep, not an aspiration. You can also write directly to hello@axray.online.




We store your address and your message so we can reply, and for nothing else. See the privacy policy.

What if I disagree with a score?

Send the report link and the check id. If a check is wrong we fix the check, not the score, the fix appears in the changelog, and the specification page updates on the next deploy.

How do I report a security problem?

Through security.txt, or straight to the address in it. We confirm receipt, and we would rather hear about something small than not hear about it. The security page sets out what the scanner does to a site it is pointed at and what is kept afterwards, which is usually the question underneath the question.

How long does a reply take?

Within 48 hours on working days, from one inbox read by a person rather than a queue. If a message is about a score, including the report link and the check id usually turns a conversation into a single reply, because both of those tell us exactly what was measured and when.

Can I get an invoice, or change what is on one?

Payments are taken by Paddle, which is the merchant of record and issues the receipt, so invoice details and VAT identifiers are edited there rather than here. Write to us and we will point you at the right place for your country, or fix it with Paddle on your behalf if that is faster.

Can you scan something that needs a login?

No, and it is not a limitation we intend to remove. AXRAY never authenticates anywhere, which is what lets us say that we hold no credential of yours and that nothing behind your login has ever been fetched by us. A page an assistant cannot reach without signing in is a page an assistant cannot read either, so the honest answer for that URL is the one we would give you anyway.

What is your crawler doing on my site?

AXRAY fetches with the user-agent Mozilla/5.0 (compatible; AXRAY/1.0; +https://axray.online/bot) AgentExperienceScanner. A default scan is a handful of requests, and one host is fetched at most 30 times an hour across every user combined.

If you would rather we did not fetch your site at all, put this in your /robots.txt:

User-agent: AXRAY
Disallow: /

We honour it from the next scan onwards, for everybody, with nothing to send us. The documentation explains the details, including narrower rules and how to have an existing report removed.