Analysis rules catalog
The current ruleset (version 2026.09.0) has 29 rules. Each analysis keeps the ruleset version it used.
| Identifier | Platform | Severity | Title |
|---|---|---|---|
| AND-TWA-001 | android | INFO | TWA mode recommended |
| AND-WEB-001 | android | WARNING | Web content without app added value |
| AUTH-DEL-001 | stores | WARNING | Account creation detected |
| AUTH-OAUTH-001 | all | ERROR | OAuth flow detected |
| CAP-CAM-001 | all | INFO | Camera detected |
| CAP-LOC-001 | all | INFO | Geolocation detected |
| CAP-PUSH-001 | all | INFO | Web Push detected |
| DOM-VER-001 | all | BLOCKER | Primary domain not verified |
| IOS-ICON-001 | ios | WARNING | No 1024 px icon |
| IOS-SW-001 | ios | WARNING | Service worker: App-Bound Domains required in REMOTE |
| IOS-WEB-001 | ios | WARNING | App appears primarily web-based |
| PAY-DIG-001 | stores | WARNING | Payment detected |
| PWA-FRAME-001 | security | WARNING | Third-party iframes |
| PWA-HTTPS-001 | pwa | BLOCKER | Site not served over HTTPS |
| PWA-ICON-001 | pwa | ERROR | No icon of 512 px or larger |
| PWA-ICON-002 | pwa | WARNING | No maskable icon |
| PWA-MAN-001 | pwa | BLOCKER | Manifest missing |
| PWA-MAN-002 | pwa | ERROR | Invalid manifest JSON |
| PWA-MAN-003 | pwa | ERROR | Missing name or short_name |
| PWA-MAN-004 | pwa | ERROR | start_url outside scope or on another origin |
| PWA-MAN-005 | pwa | WARNING | Display mode is not standalone/fullscreen |
| PWA-OFF-001 | pwa | WARNING | start_url unavailable offline |
| PWA-SW-001 | pwa | WARNING | No service worker |
| PWA-VP-001 | pwa | WARNING | Viewport missing or incorrect |
| SEC-3P-001 | security | INFO | Third-party scripts |
| SEC-CSP-001 | security | WARNING | Content-Security-Policy missing |
| SEC-CSP-002 | security | WARNING | CSP with unsafe-inline/unsafe-eval |
| SEC-HDR-001 | security | INFO | Missing security headers |
| SEC-MIX-001 | security | ERROR | Mixed content |
Page generated from the platform (ruleset version 2026.09.0, checked on 2026-09-24).