What money can and cannot change at CrawlCheck
CrawlCheck measures sites and also sells fixes and monitoring. These are the rules that keep the second from touching the first.
- Payment cannot buy a better result. No plan, add-on, fix order or licence changes a measurement, a finding, a grade or an agent decision. A paid reader and a free reader get the same grade for the same site on the same day.
- The fix service is separate from the findings. A fix order changes the site, never the report. The grade moves only when a fresh scan measures the change, the same scan anyone can run. No one working a fix order can edit, hide or soften a finding.
- Paid plans buy time and detail, not a different answer. Watch and the other plans buy how often a site is measured, the history kept, the evidence shown in full and support. The reading underneath is the one a free scan gets.
- Anyone can challenge a finding for free. A site does not need an account or a plan to dispute a finding. Turnaround and how often a dispute found us wrong are published.
- Evidence works without us. Signed answers can be checked offline with the published keys and the open verifier, with no subscription and no call to CrawlCheck.
- Rules change in the open. Every change to how findings are scored or decisions are made is dated in the feed below. A change to agent decisions is listed 14 days before it takes effect, except removing a wrong block or blocking active harm, which apply the same day.
- Corrections, rule changes and revocations are kept apart. A correction says we read something wrong. A rule change says the rules moved. A revocation says stop relying on an earlier answer. Each has its own record, because each asks something different of you.
Rule changes
| Listed | Takes effect | Kind | Applies to | What changed |
|---|---|---|---|---|
| 2026-10-22 | 2026-10-22 | scoring | report grades | Exposed files and secrets now counts toward Reach and Error pages toward Read. Reports graded earlier keep the stages they were graded with until rescanned. (no notice: report grades only; no agent decision changed) |
| 2026-10-22 | 2026-10-22 | decision | preflight calls that name an MCP endpoint (opt-in) | A preflight for connect or transact may name an MCP endpoint and its approved tool-list hash. The decision then states the endpoint and tool state it covered, blocks when the live tools differ, and needs a person when they cannot be read. (no notice: opt-in: no existing call changes) |
| 2026-10-22 | 2026-10-22 | scoring | report grades and agent decisions | New finding codes start as advisory: shown, but held outside the grade and every decision until measured (see /accuracy). SECRETS_EXPOSED is the first. (no notice: loosens: removes an effect, never adds one) |
Corrections
| Date | Check | What was wrong | Fixed in |
|---|---|---|---|
| 2026-10-22 | aicite | "Cited by more than one engine" failed every site while only one engine was being asked; it is no longer judged until two are. | aicite3 |
| 2026-10-22 | listings | Listing names that drop a legal suffix (LLC) were read as different names; they now match. | lst1b |
| 2026-10-22 | listings | Platforms that show no website on any profile were failed for not linking back; they are now named, not failed. | lst2 |
Revocations
Answers that must no longer be relied on are listed, signed, at /api/v1/revocations.
Feed: /policy-changes.json · accuracy record: /accuracy · disputes: /disputes.