🛡️ QA Engine · v3.0.0

ConsoleSentinel™

Autonomous pre-production QA for web applications. ConsoleSentinel crawls your site, captures runtime errors, validates security headers, scans for accessibility failures, tests CSP policies, and delivers AI-enriched findings — before your users find the issues.

Go to ConsoleSentinel Quick Start

ConsoleSentinel Scan Report

HIGHMissing Content-Security-Policy — No CSP header detected. XSS attack surface exposed.

HIGHStrict-Transport-Security absent — HSTS header not set. Downgrade attacks possible.

MEDImage asset returns 404 — Broken resource path. Branding impacted on multiple pages.

LOWMissing og:image meta — Social share cards degraded on several pages.

LOWLCP exceeds threshold — Largest Contentful Paint above Core Web Vital target.

PASS8 checks passed — Navigation, redirects, canonical tags, aria labels...

Scan Capabilities

What ConsoleSentinel Finds

A multi-vector, multi-page scanning engine that catches what manual QA misses — systematically, every time.

🔴

Runtime Error Capture

Headless browser execution captures real JavaScript errors, unhandled promise rejections, and console noise — the same issues your users would hit.

♿

Accessibility Scanning

WCAG 2.1 AA compliance checks — missing alt attributes, poor color contrast, unlabelled form controls, skip-link validation, and keyboard navigation testing.

🔒

Security Header Validation

Validates the presence and correctness of CSP, HSTS, X-Frame-Options, X-Content-Type-Options, Permissions-Policy, and Referrer-Policy headers.

📋

Content Security Policy Analysis

Deep CSP parsing — detects unsafe directives (unsafe-inline, unsafe-eval), overly permissive sources, missing directives, and policy bypass vectors.

⚡

Performance Metrics

Captures Core Web Vitals — LCP, CLS, FID — alongside resource loading times, render-blocking assets, and third-party script impact analysis.

🌐

Multi-Page Crawling

Configurable multi-page scan with custom URL lists, recursive crawling, auth-gated page support, and per-page finding aggregation.

🤖

AI-Enriched Findings

Every finding is enriched with AI-generated root cause analysis, remediation steps, severity justification, and code-level fix suggestions.

🔗

Broken Link Detection

Validates all internal links, image sources, stylesheet paths, and script references — catching 404s before they impact production users.

How It Works

Scan Your Site in 4 Steps

ConsoleSentinel is designed to integrate into any CI/CD pipeline or run standalone — no infrastructure required.

Configure Scan Target

Create a JSON scan config pointing at your site URL (localhost, staging, or production). Define which pages to scan, auth credentials if needed, and severity thresholds.

Headless Browser Launch

ConsoleSentinel launches a headless Chromium instance, navigates each page, and intercepts network traffic, console output, and performance timings.

Multi-Vector Analysis

Simultaneously evaluates security headers, accessibility, runtime errors, CSP policies, Core Web Vitals, broken links, and meta tag completeness.

AI-Enriched Report

Results are aggregated into a structured report — grouped by severity, enriched with AI diagnostic context, and formatted for both human review and tooling integration.

Quick Start

Up and Running in Under 2 Minutes

ConsoleSentinel is an npm-based tool — install it, point it at your site, and get results.

# Install ConsoleSentinel
npm install — from the ConsoleSentinel project directory

# Create a scan config (JSON)
{
  "baseUrl": "https://your-site.com",
  "pages": ["/", "/about", "/contact"],
  "checks": ["security", "accessibility", "performance"]
}

# Run a scan
npm run scan -- --scan-config ./config/scan.your-site.json

# View structured findings report in terminal