What Boty Auditor checks

Boty Auditor is not only an accessibility auditor. The engine analyses six dimensions in the same crawl, and each one states in writing what it does not check. That limit travels inside the report: it is not fine print, it is part of the deliverable.

Web accessibility

Standards: WCAG 2.2 AA · WCAG-EM 1.0 · EN 301 549.

This is the only AI-assisted dimension: the automated engine (axe-core) flags what a machine can detect, an AI layer proposes findings for the judgment criteria (alt-text quality, reading order, focus…), a deterministic verifier checks them, and a person decides on every proposal before it reaches a signed report.

Stated limit. Does not cover assistive-technology sessions or full manual expert evaluation of the whole site; this evaluation covers the sampled pages.

Security posture

HTTP headers, TLS certificate and cookie flags: HSTS, CSP, X-Content-Type-Options, X-Frame-Options, weak TLS protocols, certificates close to expiry, cookies missing Secure or HttpOnly.

Stated limit. Observes only HTTP headers, the TLS certificate, and the flags on cookies sent; performs no active probing and does not assess exploitable vulnerabilities.

Privacy & consent

Whether a policy page is linked, and which third parties your site contacted before any consent interaction. The crawl only observes: it never blocks or accepts anything on your behalf.

Stated limit. Observes the presence of a policy page and which third parties were contacted before any consent interaction; does not assess the legal adequacy of the text nor assert GDPR compliance or non-compliance.

Broken links

HTTP status of the links the crawl already extracted from your pages.

Stated limit. Status-checks links the crawl already extracted; performs no directory brute-forcing and does not assess SEO impact.

Email authentication

SPF, DKIM and DMARC records published in your DNS, and the policy they declare.

Stated limit. Reads the published SPF, DKIM and DMARC records; does not assess deliverability or domain reputation.

Technical SEO

Title, meta description, H1 headings, canonical and duplicate titles, read from the same navigation the crawl already performs — at no extra cost and on every pack.

On the Professional and Evidence+ packs this dimension is augmented by an additional external crawl, which contributes cross-page relations and its own evidence. It is a second crawler: its page count is not the same as the accessibility sample’s, and the report distinguishes them.

Stated limit. Observes technical metadata (title, description, headings, canonical) of the crawled pages; does not assess ranking nor guarantee traffic.

What is not included

AI visibility (GEO) — whether ChatGPT, Gemini or Google’s AI Mode cite you — is built and tested, but deliberately outside the product. It depends entirely on paid external queries and its ChatGPT corpus is US/English-only, so it carries no signal for Spain. We would rather not count a dimension than charge half of one.

A note on the report’s “Method”

The report names the checkers that actually ran on your order, read from your own findings. It never lists what a pack could have run. If a checker did not run, it does not appear.