The latest articles on DEV Community by Jelena Stricak (@jelenastricak). https://dev.to/jelenastricak https://media2.dev.to/dynamic/image/width=90,height=90,fit=cover,gravity=auto,format=auto/https:%2F%2Fdev-to-uploads.s3.us-east-2.amazonaws.com%2Fuploads%2Fuser%2Fprofile_image%2F3344121%2Fd96bc22a-98a0-486e-8ae0-96105cbf7662.png https://dev.to/jelenastricak en Jelena Stricak Thu, 23 Jul 2026 00:13:47 +0000 https://dev.to/jelenastricak/talonauditcom-p4b https://dev.to/jelenastricak/talonauditcom-p4b <p>I built Talon Audit: a privacy-first approach to website exposure and remediation</p> <p>Most website audit tools answer one narrow question.</p> <p>A performance tool asks whether the page is fast.<br> A security tool asks whether a protection is missing.<br> An accessibility tool asks whether the interface meets specific standards.<br> A conversion tool asks whether users are completing key actions.</p> <p>Visitors do not experience those categories separately.</p> <p>They experience one website.</p> <p>That observation led me to build Talon Audit, a privacy-first website analysis platform that connects technical exposure, reliability, usability, and conversion risk in one workflow.</p> <p>The four-domain model</p> <p>Talon analyses websites across four connected domains:</p> <p>Exposure</p> <p>Public security and privacy signals, including browser protections, TLS, cookies, third-party scripts, mixed content, and visible configuration risks.</p> <p>Integrity</p> <p>Broken resources, failed routes, script errors, redirects, forms, and reliability regressions.</p> <p>Experience</p> <p>Accessibility, mobile usability, visual clarity, speed, and interaction friction.</p> <p>Conversion</p> <p>Messaging, trust signals, pricing paths, calls to action, and barriers that stop users from moving forward.</p> <p>From detection to action</p> <p>The product follows a five-stage workflow:</p> <p>Detect → Explain → Fix → Verify → Monitor</p> <p>Every finding includes:</p> <p>evidence<br> severity<br> confidence<br> impact<br> remediation guidance<br> verification method</p> <p>The goal is not to produce the longest possible report. It is to help teams decide what matters and what to do next.</p> <p>Passive by design</p> <p>Talon performs passive, low-impact analysis only.</p> <p>It does not exploit systems, bypass authentication, or claim to replace authorised penetration testing. Users must confirm they own the website or are authorised to test it.</p> <p>Customer reports are private, and the public demo uses a fictional environment rather than exposing real domains.</p> <p>AI-native, not AI-directed</p> <p>I built Talon through a terminal-first workflow using Codex 5.5 and Claude Fable.</p> <p>AI accelerated implementation, debugging, interface iteration, code review, and remediation-language refinement.</p> <p>The core product decisions remained human:</p> <p>defining the four-domain model<br> setting honest security boundaries<br> designing the scoring and prioritisation system<br> protecting customer data<br> controlling the product positioning<br> deciding what Talon should not claim</p> <p>The result is a live SaaS product focused on turning public website signals into prioritized, verifiable action.</p> <p>Live product: talonaudit.com</p> ai saas terminal claude