Sloptic's checks
The catalog comprises 102 checks across 60 different kinds of slop. Each check is a single file in the open grader.
The counts
44 of the 102 run on any URL. The remaining 58 send test traffic, so they only run once you verify your site or event.
| area | kinds | runs on any URL | needs verification | total |
|---|---|---|---|---|
| security | 30 | 17 | 43 | 60 |
| accessibility & quality | 18 | 15 | 14 | 29 |
| performance | 12 | 12 | 1 | 13 |
| all | 60 | 44 | 58 | 102 |
security
30 different faults, 60 checks between them. Click on a link to learn more about it.
| category | checks | runs on |
|---|---|---|
| access control | 7 | verified only |
| exposed files | 7 | 2 of 7 on any URL |
| security headers | 7 | any URL |
| sql injection | 5 | verified only |
| session handling | 4 | verified only |
| cross-site scripting | 2 | verified only |
| exposed data | 2 | 1 of 2 on any URL |
| file uploads | 2 | verified only |
| managed backend rules | 2 | verified only |
| secrets in the shipped code | 2 | any URL |
| command injection | 1 | verified only |
| cross-origin sharing rules | 1 | any URL |
| cross-site request forgery | 1 | verified only |
| debug mode left on | 1 | verified only |
| filter injection | 1 | verified only |
| host header handling | 1 | verified only |
| known-vulnerable dependencies | 1 | any URL |
| login rate limiting | 1 | verified only |
| mixed content | 1 | any URL |
| open redirects | 1 | verified only |
| oversized request handling | 1 | verified only |
| path traversal | 1 | verified only |
| response splitting | 1 | verified only |
| scripting in the browser | 1 | verified only |
| server-side request forgery | 1 | verified only |
| session lifetime | 1 | verified only |
| subresource integrity | 1 | any URL |
| template injection | 1 | verified only |
| transport security | 1 | any URL |
| xml external entities | 1 | verified only |
accessibility & quality
18 different faults, 29 checks between them. Click on a link to learn more about it.
| category | checks | runs on |
|---|---|---|
| honest navigation | 5 | 3 of 5 on any URL |
| availability | 3 | any URL |
| accessibility | 2 | any URL |
| data integrity | 2 | verified only |
| email verification | 2 | verified only |
| input validation | 2 | verified only |
| race conditions | 2 | verified only |
| broken links | 1 | any URL |
| console errors | 1 | any URL |
| content types | 1 | any URL |
| crash resistance | 1 | verified only |
| crawlability | 1 | any URL |
| dead controls | 1 | verified only |
| development build left online | 1 | any URL |
| error handling | 1 | verified only |
| http conformance | 1 | any URL |
| pages that fail quietly | 1 | any URL |
| password reset | 1 | verified only |
performance
12 different faults, 13 checks between them. Click on a link to learn more about it.
| category | checks | runs on |
|---|---|---|
| core web vitals | 2 | any URL |
| behavior under load | 1 | verified only |
| caching | 1 | any URL |
| DOM size | 1 | any URL |
| font loading | 1 | any URL |
| largest contentful paint | 1 | any URL |
| load time | 1 | any URL |
| minification | 1 | any URL |
| overall Lighthouse score | 1 | any URL |
| page weight | 1 | any URL |
| request count | 1 | any URL |
| server response speed | 1 | any URL |