Oxwyn Studio
14 free tools. No account.

Some read your live site and tell you what they found, in the words you would use rather than the words a scanner would, from the same audit we start a paying client from. Others build a file you copy and publish, from your DMARC records to a privacy policy. All of them tell you what they cannot see, which is the part most free tools leave out.

What none of these can tell you

Every one of them reads your site from the outside, as a stranger would. That means none of them can see your CDN rules, your server configuration, your content, or whether the thing they flagged actually matters to your business. A clean result is the absence of the faults we can measure, not proof that nothing is wrong. Where a check has a hard limit, its own page says so before it says anything else: the accessibility one cannot certify conformance, the cookie one cannot determine lawfulness, and the AI crawler one cannot see whether your firewall is turning the crawlers away regardless of what your robots.txt permits.

Checks your live site

One scan, a door for each question

They are the same audit behind one door each, not a pile of separate scanners. Running one measures everything; the page you chose decides what it leads with, and the rest of the report is yours free when you ask for it.

Gives you something to keep

Files you build yourself

None of them sends anything anywhere. They run entirely in your browser, which is worth stating plainly given one of them asks for your address and telephone number.

07Generator

Publish your address and hours as data

Fill in your details and copy the JSON-LD into your page head, so a search engine reads your address, hours and phone number as facts rather than inferring them from sentences.

Free. Runs in your browser. Nothing sent or stored.

08Generator

Write your own llms.txt

Answer six questions and copy the file. The one place you describe your business in your own words instead of having a description assembled from your marketing copy.

Free. Runs in your browser. Nothing sent or stored.

09Generator

Build the records that stop domain spoofing

Answer a few questions and copy valid SPF, DKIM and DMARC records for your DNS host. Defaults lean cautious so your first attempt cannot bin your own mail.

Free. Runs in your browser. Nothing sent or stored.

10Generator

Tell researchers how to report a hole

Build a valid RFC 9116 security.txt so a researcher who finds a problem reaches the right inbox, not your public form or nobody. Copy and publish at /.well-known/.

Free. Runs in your browser. Nothing sent or stored.

11Generator

Choose which AI crawlers may read your site

Allow or block GPTBot, ClaudeBot, Google-Extended and the rest one at a time, with each choice explained, then copy the robots.txt to your site root.

Free. Runs in your browser. Nothing sent or stored.

12Generator

Build a privacy policy for your website

Answer a few plain-English questions and copy a starter privacy and cookie policy. A first draft to edit and have checked, not legal advice.

Free. Runs in your browser. Nothing sent or stored.

13Generator

Make your link share as a proper card

Write the title, description, Open Graph and Twitter Card tags so your page shows a clean preview when it is shared, then paste them into your page head.

Free. Runs in your browser. Nothing sent or stored.

14Generator

Build a tidy email signature

Add your name, role and contact details and copy a plain, client-safe HTML signature for Gmail, Outlook or Apple Mail. Runs in your browser.

Free. Runs in your browser. Nothing sent or stored.

The whole thing

Or ask all the questions at once

The X-Ray runs every check on this page and several more: your security headers, your certificate, how fast the page actually loads, whether Google can index it and what your site publishes about itself. Each tick is a check that has returned. Nothing on the screen advances on a timer.

We read public pages only. We do not log in, we do not probe admin paths, and we identify ourselves in your server logs as OxwynXRay.

Run a free X-Ray

Would rather read than scan? The engineering notes go into the same subjects at length, including why a passing check is not the same as a solved problem.