PLATFORM
Every limit, and why it exists.
Limits published rather than discovered. Each one has a reason, and the reasons are more useful than the numbers.
| Limit | Value | Why |
|---|---|---|
| Pages per free scan | 10 | A crawl costs real money and the free tier is a diagnostic, not a product. The result always reports how many pages exist beyond the cap. |
| Scans per domain | 1 per 24 hours | A repeat request returns that day’s scan. This is the control that survives IP rotation, because a free scan attaches to a domain rather than a visitor. |
| Submissions per caller | 3 per hour | Deliberately not the main defence: VPNs defeat it and office NAT makes it punish real users. A cheap first hurdle. |
| Shared scorecard lifetime | 30 days | A share link is a snapshot, not a permanent free product. It never exposes findings, whoever opens it. |
| Email verification token | 24 hours | A verification link is a password-equivalent sitting in an inbox. |
| Competitor monitoring | 3 sites, 12 pages each | Per brand. It does not walk a competitor’s whole site. |
| Monitoring frequency | Every 168 hours | Once a week, one request at a time, robots.txt obeyed. |
What happens when you hit one
- Rate limited: a 429, returned by the limiter ahead of the application, so it does not use the standard response envelope. Parse defensively.
- Domain cooldown: not an error. You get the existing scan with a flag saying it was reused.
- Expired share link: treated as not found. Shared scorecards are not resurrected.
Paid plans
Full-site crawling and unlimited scans per domain are what the paid tiers buy. The per-caller rate limit and the politeness constraints on competitor monitoring are not negotiable at any tier: they exist to protect the sites being crawled, not to meter you.