I built Talon Audit: a privacy-first approach to website exposure and remediation
Most website audit tools answer one narrow question.
A performance tool asks whether the page is fast.
A security tool asks whether a protection is missing.
An accessibility tool asks whether the interface meets specific standards.
A conversion tool asks whether users are completing key actions.
Visitors do not experience those categories separately.
They experience one website.
That observation led me to build Talon Audit, a privacy-first website analysis platform that connects technical exposure, reliability, usability, and conversion risk in one workflow.
The four-domain model
Talon analyses websites across four connected domains:
Exposure
Public security and privacy signals, including browser protections, TLS, cookies, third-party scripts, mixed content, and visible configuration risks.
Integrity
Broken resources, failed routes, script errors, redirects, forms, and reliability regressions.
Experience
Accessibility, mobile usability, visual clarity, speed, and interaction friction.
Conversion
Messaging, trust signals, pricing paths, calls to action, and barriers that stop users from moving forward.
From detection to action
The product follows a five-stage workflow:
Detect → Explain → Fix → Verify → Monitor
Every finding includes:
evidence
severity
confidence
impact
remediation guidance
verification method
The goal is not to produce the longest possible report. It is to help teams decide what matters and what to do next.
Passive by design
Talon performs passive, low-impact analysis only.
It does not exploit systems, bypass authentication, or claim to replace authorised penetration testing. Users must confirm they own the website or are authorised to test it.
Customer reports are private, and the public demo uses a fictional environment rather than exposing real domains.
AI-native, not AI-directed
I built Talon through a terminal-first workflow using Codex 5.5 and Claude Fable.
AI accelerated implementation, debugging, interface iteration, code review, and remediation-language refinement.
The core product decisions remained human:
defining the four-domain model
setting honest security boundaries
designing the scoring and prioritisation system
protecting customer data
controlling the product positioning
deciding what Talon should not claim
The result is a live SaaS product focused on turning public website signals into prioritized, verifiable action.
Live product: talonaudit.com
Top comments (0)