How does it find the files without a plugin or a login?
It reads the website the way a search engine does: it starts at the homepage and the sitemap, follows links on that domain, and records every link or embed that points at a PDF. Nothing is installed, and nothing is guessed at. A URL nothing links to is not found, because looking for it would mean probing a site rather than reading it.
Do you respect robots.txt?
No, and it is better to say so plainly than to bury it. robots.txt tells search engines what to index; this tool answers a question about your own published documents, on your behalf, and a rule written years ago for search crawlers should not decide whether you can count your own PDFs. The scanner reads only pages the site links to, identifies itself by name, paces its requests, never signs in or guesses URLs, and stores no documents. If you would rather it never visited your domain, tell us and we will refuse it permanently, which no request can override.
How much traffic does a scan send to the site?
It walks the site once, at about four requests a second at its fastest, and opens up to 10 PDF files. One live crawl per domain per day is shared by everyone who asks about that domain, so a site is read once however many people run the tool, and a second request inside that window is answered from the first scan's results.
Why did it only check ten documents?
Opening a file costs the site bandwidth and costs us processing, so the free scan opens the ten most-linked documents, which are the ones most visitors actually meet. Every other file is listed with its URL and where it is linked from, and the report says plainly which ones were opened.
Does a clean automated result mean the document is accessible?
No. Automated checks find missing tags, missing titles, missing language, and structural failures. They cannot tell whether the reading order matches the page, whether a table's meaning survives, or whether a description is useful. Those need a person, and the report says so next to every count.
Can I scan a website I do not own?
The scanner only reads pages that are already public, so technically yes, and the report is about published URLs rather than anything private. If you run the site, connecting the domain is better: an owner-verified crawl reads more pages, monitors for changes, and can turn a file into a remediation draft.
What does the site script do that this does not?
Two things. It sees links a crawler cannot: pages built by JavaScript, pages behind a login, and files linked only from a search result. And it is the only way to switch a live PDF link to an approved accessible version, which no crawler can do from the outside.
What do you keep?
The list of public URLs, the automated findings, and a salted hash of the requesting address for abuse reports. The report expires after seven days. No PDF from the scanned site is stored: a checked file is downloaded, audited, and discarded.
How do I ask you not to scan my domain?
Contact us and we will add the domain to the scanner's refusal list. It takes effect immediately, applies to everyone, and nothing overrides it.