Roast My
Landing Page

The threat scanner now refuses internal and private addresses, and re-checks every redirect it follows — so a scanned site can no longer bounce the scan somewhere it should not go.

Shared report pages now load their screenshot from whichever domain you opened them on, instead of showing an empty frame.

A batch of URLs that were already roasted no longer eats into the shared daily capture budget — only real captures count.

A failed webhook now retries on the next check instead of losing the alert, entries no longer crowd each other out of the queue, and a watchlist only matches the exact page you are tracking. Email alerts stay off until email delivery is set up — the form now tells you that instead of quietly accepting an address.

One odd field in the AI response used to throw away an otherwise-complete roast. Every field is now checked and filled in, so you keep the scorecard.

A YouTube, Vimeo or Cloudflare Stream hero set to autoplay=1 without mute is now scored as autoplay with sound — previously every autoplaying embed was assumed to be muted, so the loudest pages got the gentlest feedback. Looping clips with no pause control now show up as an accessibility finding too.

Older roasts that only ever captured a "checking your browser" page are now hidden from the gallery, leaderboards, Wall of Shame, sitemap and share links — and they are never replayed from cache.

If the newest saved roast for a URL is missing part of its audit, we now serve the last complete one instead of showing a half-empty scorecard.

Cached API results no longer count against your daily quota, and a roast blocked by bot protection is refunded — you only pay for roasts we could actually run.

A bad or private URL now tells you exactly that, instead of being masked by a “service busy” message when the site is under load.

Track competitor pages and get alerted when their score moves. Add up to 25 URLs, and optionally pipe changes into Slack or Discord.

Some sites sit behind bot protection, so we only ever saw their "checking your browser" page — and scored that by mistake. Now we detect it and tell you plainly instead of inventing a score.

Share a roast link and the video breakdown now travels with it — the shared page shows the same autoplay, captions and embed findings you see in the app.

Video embed URLs can carry signed access tokens, so we no longer store or return them — only the signals we actually score.

Incomplete AI responses no longer break a roast — we fill the gaps instead of erroring, so you still get a usable scorecard.

Got a video hero? We now grade it — autoplay-with-sound, missing captions, no poster frame, and heavy third-party embeds all get called out, with a dedicated Video tab scoring conversion, performance, and accessibility.

Autoplay with sound gets blocked by browsers and drives people away. We flag it, plus missing playsinline that breaks mobile heroes.

Caption and subtitle tracks now count toward your accessibility score, folded in alongside the existing WCAG checks.

Browse recent roasts by industry — SaaS, e-commerce, fintech, and more — right from the homepage gallery.

If the vision model is briefly at capacity, we now retry automatically with backoff before falling back — so you get real scores more often.

Added integration tests across the roast, compare, and batch flows to catch regressions before they ship.

Download a professional PDF of your brand threat scan, including threat score, lookalikes, social imposters, security grade, and recommendations.

New Batch tab lets you analyze up to three URLs at once. Results now persist full SEO, performance, and heatmap data in the database.

Introduced a simple pricing page with Free, Pro, and Agency tiers. Contact us to join the early access list.

Compare now supports full-page screenshots, not just viewport captures — flip the Capture toggle in the Compare tab.

`/api/gallery` now supports `?page` with 24 items per page to match the SSR gallery.

Validation happens before burning quota; separate buckets for feedback, subscribe, and threat scans. Fewer false 429s.

Re-roast detection now uses server history (`/api/improvement/:urlHash`) for cross-device before/after and improvement badges.

Added GitHub Actions CI and initial URL safety tests to prevent regressions.

Brand-first hero, Syne + DM Sans typography, warm ink/ember palette, quieter surfaces — less glass, more presence.

Public API for developers. POST /api/v1/roast to analyze any landing page programmatically. GET /api/v1/usage to check your limits. 5 roasts/day per IP, 50/day globally. Open CORS, no API key required. Check the new API button in the nav bar.

Major security audit and 21 vulnerability fixes across two passes. SQL injection prevention, XSS sanitization on all dynamic content, CSRF protection, parameterized queries, SVG escaping, and rate limit race condition fix.

Removed unsafe-eval from Content Security Policy, added security headers to all server-rendered pages (roast share pages, gallery, 404), environment-aware CORS origins, and generic error responses to prevent information leaks.

Project source code is now version-controlled and pushed to GitLab. Proper README with project overview, tech stack, and deployment docs.

Moved hardcoded account/zone IDs to environment variables, configurable IP hash salt, 5MB screenshot size limits, atomic rate limiting to prevent race conditions, and safe error logging with URL redaction.

We're live on Product Hunt! Added the official Product Hunt badge to the homepage. Thank you for all the support and feedback from the community.

Watch landing pages get roasted in real-time. See what others are analyzing and discover new sites to compare against.

Compete for the top spot on our weekly leaderboard, or try not to end up on the Wall of Shame with the lowest-scoring pages.

Real-time visitor map showing roasts from around the world. See platform scale stats including worker requests, screenshots stored, and countries reached.

CTA scores drag down conversions the most (avg 3.7/10), followed by Hero sections (4.1/10). Design scores highest at 6.5/10 - pages look good but don't convert.

AI auto-detects your industry (SaaS, E-Commerce, Fintech, etc.) and compares your scores against industry averages. See how you stack up across all 5 categories, SEO, and performance.

Every score now shows a rubric-based breakdown: 5 criteria per category, each worth 0-2 points with AI-written reasons. Know exactly why you scored what you did.

Premium SVG share cards (1200x630) with your score arc gauge, all 5 category bars, embedded screenshot, and industry badge. Download as PNG or share directly to X, Reddit, and LinkedIn.

Browse roasts of famous sites like Stripe, Vercel, Apple, Google, and more. See how the biggest names score on our analysis.

SEO, Performance, and Accessibility tabs now show point-by-point deductions with visual progress bars, measured values, and specific fix suggestions for every check.

New 0-100 Attention Score in the Heatmap tab with 3-factor breakdown: above-fold focus, CTA visibility, and content spread analysis.

Fixed AI retry loop that could cause roasts to hang at 50%. Fixed score breakdown rendering when SEO data wasn't available.

8 WCAG checks including lang attribute, alt text, form labels, heading hierarchy, skip nav, link text, viewport meta, and button labels. Full score breakdown with fix suggestions.

Public leaderboard of the worst-scoring landing pages. Don't end up here.

Real-time public feed of every page getting roasted, with scores and country flags.

Share a link that auto-starts a head-to-head comparison. Settle the debate on which page is better.

Re-roast the same page and see your score change with a badge showing improvement or regression.

Visual side-by-side screenshot comparison when re-roasting. Drag to compare before and after.

Concurrent roasts of the same URL now share a single browser session, saving cost and time.

Fixed placeholder text ("Win 1, Win 2...") in Quick Wins. AI now generates real, actionable suggestions every time.