Security & Privacy
Zero-Install Read-Only Architecture
Because AccessiLens never runs inside your end-users' browsers, your customers' PII, session telemetry, and browser storage are never touched by third-party scripts.
How to
Why InfoSec approves Option A rapidly
1
No third-party JavaScript injected into your production CSP.
2
No runtime script-src or connect-src allowlist expansions required for end users.
3
Crawler stores structural violation metadata (rule IDs, CSS selectors, node markup) rather than customer data.
Out-of-band TLS 1.3 scanning
All scan triggers and PDF/JSON exports operate over TLS 1.3 with authenticated Firebase portal tokens.