TesterAgentHow we test, and what we don’t do
TesterAgent opens your pages in a real browser (Chromium) on desktop and a throttled slow-4G phone profile and runs rule-based checks: crawl, tech stack and hosting, speed, UX/UI and accessibility, translation, functions, passive security and generated test cases. APKs are analysed as files without installing them. Nothing is submitted or changed on production sites.
The checks
| Check | What it measures | Free check (no account) | Free | Pro | Business |
|---|---|---|---|---|---|
| Crawl pages & links | Finds your pages and links in a real browser; broken links, status errors, console errors. | Yes | Yes | Yes | Yes |
| Scale & tech stack | Hosting, CDN, caching, compression and HTTP/2-3: can the site take more visitors? | Yes | Yes | Yes | Yes |
| Security (passive) | Passive: security headers, HTTPS redirect, cookie flags, exposed files, mixed content, SRI, secrets in HTML. | — | — | Yes | Yes |
| Performance | LCP, FCP, TBT, CLS, TTFB and page weight on desktop and a throttled slow-4G phone. | Yes | — | Yes | Yes |
| UX/UI & accessibility | axe accessibility rules, horizontal overflow, tap targets, tiny text, alt text, contrast, screenshots. | Yes | Yes | Yes | Yes |
| Translation / locales | lang/dir, untranslated text and raw keys, cut-off text, hreflang, suspected wrong words, Thai letters in Lao. | Yes | — | Yes | Yes |
| Functions (search, forms, buttons) | 404 page, form labels and validation (never submits), search, dead links, buttons that throw JS errors. | Yes | Yes | Yes | Yes |
| Test cases (generate & run) | Lists every function and generates rule-based test cases (not AI), runs them in safe mode, CSV export. | — | — | Yes | Yes |
| APK | Target API, 16 KB alignment, permissions, signing, leaked keys, size, translations (static; file deleted after). | 150 MB | 150 MB | 500 MB | 1 GB |
Safety rules
- Only sites and apps you own or are authorised to test; private networks are blocked.
- Production safe mode: forms are never submitted, and every non-GET request our clicks cause is blocked.
- We never click pay, delete, transfer or log out.
- Logged-in testing: you log in yourself in a live view; we never see or store your password, and the session is deleted when the audit ends.
- Uploaded APKs are deleted right after the check.
- For the free check we store only a one-way hash of your IP address.
Limits
- Lao and Thai words are checked against wordlists, so names and loanwords can be flagged as “suspected”.
- Speed numbers are lab measurements, not real-user data.
- Security checks are passive; this is not a penetration test.
- APK checks don’t accept .aab bundles or split APKs; the free check doesn’t run the app.