# plumbline

> plumbline checks a website against more than 250 rules: security headers, TLS, DNS and email, privacy, SEO, social cards and agent readiness. Type a domain and the checks run in the browser.

plumbline is a web app at https://plumbline.apps.mrida.ng. Scanning needs no account and stores nothing; a person who signs in with Google can keep domains, choose their checks and keep their reports. It is also an MCP server at https://plumbline.apps.mrida.ng/mcp.

## Public pages

- [Scan page](https://plumbline.apps.mrida.ng/): type a domain and see every check's outcome. A domain in the `domain` query parameter starts a scan straight away.

## Optional

- [Security contact](https://plumbline.apps.mrida.ng/.well-known/security.txt): how to report a vulnerability.
- [Security policy](https://plumbline.apps.mrida.ng/security-policy.txt): what to expect when you do.