FixWeb

// docs / quickstart

Quickstart

Sign up, run your first scan, read the report. The Free tier is real — no credit card required to evaluate.

1. Create an account

Visit /sign-in and choose Google, GitHub, or magic-link email. New accounts start on the Free plan, which includes 3 scans per month and passive scans only. You can upgrade later from Account → Billing.

2. Run a scan

01

Pick a target

From the dashboard click New scan, paste a URL, and submit. FixWeb normalises bare hostnames (example.com → https://example.com) and rejects internal addresses (RFC 1918, link-local, AWS metadata).

02

Wait ~20 seconds

A passive scan runs in three phases: crawl (Chromium renders the page to discover links, metadata, media, scripts, and forms), quality checks (crawlability, search presentation, content/schema, media, performance, accessibility, forms, mobile/i18n, and runtime signals), and aggregate (deduplicate + severity ranking). Live progress streams via the dashboard; you don't need to refresh.

03

Read the report

The report opens automatically when complete. Free plan users see only the highest-severity finding in full (title, description, evidence, remediation); other findings are stripped to severity-only stubs server-side. The Hobby plan and higher (Pro, Unlimited) unlock every finding plus the AI prompt copy button on each one.

3. Run an owner-depth scan (optional, Hobby plan and higher)

Owner-depth scans extend the same website-quality checks into verified domains and can include private journeys when you provide a short-lived test-account header. Add and verify a domain at Dashboard -> Domains (DNS TXT or HTTP file), then start an Owner-depth scan from New scan. You'll attest to the scan; we audit-log it server-side.

4. Use the REST API

Mint a bearer token at Account → API tokens. Plaintext is shown once; paste it into your CI / Cursor / curl.

curl
# Start a passive scan
curl -X POST https://fixweb.app/api/v1/scans \
  -H "Authorization: Bearer fxw_..." \
  -H "content-type: application/json" \
  -d '{"target":"https://staging.example.com"}'

Full reference at /docs/api.

5. Plug FixWeb into your AI agent (MCP)

FixWeb ships an MCP server at /api/mcp with seven tools, two resources, and a /fixweb-fix slash command for templated remediation prompts. Wire it into Claude Desktop / Cursor / Continue — see /docs/mcp.

Where to go next

  • Scan types — passive vs owner-depth vs GitHub repo scans, the attestation flow.
  • Domains — verify a domain, schedule re-scans, enable live monitoring.
  • Quotas & limits — per-tier caps, API rate limits, retention policies.

Stuck?

Email support@fixweb.app with the scan id and what you expected vs what you saw. The Hobby plan gets standard support, the Pro plan gets priority support, and the Unlimited plan includes dedicated support.

Quickstart — Docs · FixWeb