QAlaunch
This is a real report from a real scan of a public demo store, shown in full so you can see exactly what a paid report contains before you buy one.
Sample report·1 page tested

practicesoftwaretesting.com
10 issues found

Every issue below includes what we saw, why it matters and how to fix it.

1High
5Medium
4Low
Scan my own site free →
Health score
70
out of 100
Needs attention
Functionality
2
UI Bugs
1
Usability
2
Mobile
1
Accessibility
2
Security
2
Functionality · 2
View evidence
● MEDIUMFunctionality

Filter sidebar shows empty lists with no visible options

Where: Left sidebar — Sort / Filter controls

The programmatic scan detected three visible list containers in the left-hand filter sidebar (Sort and Price Range area) that contain no list items. These appear to be dropdown or checkbox filter groups that should be populated with options but are rendering as empty. Visitors trying to filter products by category or other attributes may see blank filter areas.

Impact: Users who try to filter products may find the filter options missing, reducing their ability to find relevant products.
● LOWFunctionality

Two image attribution links in the footer return a 401 error

Where: Image attribution links

Two links pointing to Unsplash (for the hero image credit — 'Barn Images' and 'Unsplash') return a 401 Unauthorized status when followed. Visitors who click these attribution links will land on an error page rather than the intended Unsplash content.

Impact: Visitors who click the image attribution links will see an error page, which may look like a broken site feature.
UI Bugs · 1
View evidence
● MEDIUMUI Bugs

Hero banner has no headline or call-to-action text

Where: Hero banner

The hero image at the top of the page shows only a photograph of tools with no overlay text, headline, or call-to-action button. A first-time visitor has no immediate indication of what the site is for or what they should do next. The value proposition is entirely absent from the most prominent visual area on the page.

Impact: Visitors may not understand the site's purpose within the first 5 seconds, reducing engagement and increasing bounce rate.
Usability · 2
View evidence
● MEDIUMUsability

Sort dropdown has no label telling users what it does

Where: Left sidebar — Sort dropdown

The Sort dropdown in the left sidebar has no visible label and no placeholder text. Visitors see only a blank dropdown with a chevron arrow, with no indication of what the control sorts or what the available options are. The form scan confirms this input has no associated label.

Impact: Visitors may overlook or misuse the sort control, reducing the likelihood they find products in the order they prefer.
● LOWUsability

No cookie consent banner is shown despite likely use of tracking

Where: Site-wide — cookie consent

The automated check found no cookie consent banner on the site. If the site uses analytics, session tracking, or any cookies beyond strictly necessary ones, a consent mechanism is required under GDPR and CCPA regulations. As a practice/demo site that may use analytics to measure usage, this is worth addressing.

Impact: Operating without a consent banner where required could create compliance risk and reduce visitor trust.
Mobile · 1
View evidence
● MEDIUMMobile

First product card title is partially hidden behind floating buttons on mobile

Where: Product listing — first product card (mobile)

On the mobile screenshot, the product title 'Combination Pliers' is partially obscured by the red RSS/notification floating button on the left side of the screen. The first few characters of the product name are cut off, forcing users to infer the full name. The floating action buttons at the bottom corners compete with product content.

Impact: Mobile shoppers may have difficulty reading product names, reducing confidence and potentially missing products they want.
Accessibility · 2
● HIGHAccessibility

Navigation list is not structured correctly for screen readers

Where: Navigation / list elements

The axe accessibility scan found that one or more list elements on the page contain items that are not proper list entries, breaking the expected list structure. Screen reader users navigating by list landmarks will encounter a confusing or broken experience when moving through the navigation or other list-based content.

Impact: Screen reader users may be unable to navigate the site's menus correctly, excluding a portion of your audience.
● LOWAccessibility

Heading levels skip in a way that breaks the page outline for screen readers

Where: Page-wide heading hierarchy

The axe scan found that heading levels jump inconsistently — for example going from an H1 directly to an H3 or H4 — instead of incrementing by one level at a time. Screen reader users who navigate by headings to understand the page structure will encounter a confusing outline.

Impact: Screen reader users navigating by headings may get a broken or misleading sense of the page's content structure.
Security · 2
● MEDIUMSecurity

Several recommended browser security headers are missing from responses

Where: HTTP response headers

The server response is missing several standard security headers: Content-Security-Policy, X-Frame-Options, X-Content-Type-Options, Strict-Transport-Security, Referrer-Policy, and Permissions-Policy. These headers protect visitors from common web attacks such as clickjacking and content-type sniffing. While the site uses HTTPS, the absence of these headers leaves known security gaps.

Impact: Without these headers, visitors are exposed to a higher risk of certain browser-based attacks, which may concern security-conscious testers using the site.
● LOWSecurity

Some external links open in a new tab without the noopener security attribute

Where: Top announcement bar — Documentation link; image attribution links

Three external links — including the 'Documentation' link in the top announcement bar and 'Barn Images' — open in a new tab without the rel='noopener' attribute. This exposes the page to a known browser security issue called reverse tabnapping, where the newly opened tab could potentially redirect the original page.

Impact: A malicious external page opened via these links could redirect the original site tab, potentially misleading visitors.
A note on accuracy: this report comes from automated testing in a real browser with an AI review on top. It is thorough, but not infallible — a small number of findings may turn out not to be real once you check them by hand. Treat it as a prioritised list to verify, not a verdict.
Your site, the same way

Get this report for your own website

Start with the free scan — it shows 3 of the issues found at no cost. The full report, with every issue, its evidence and its fix, is $19 one-time for your homepage.

Scan my website free →