Home / Check catalog / 6. Schema, Local, Trust, Deep Audit / 6.53 Technology Stack, Code Quality, Security & Infrastructure Health

6.53 Technology Stack, Code Quality, Security & Infrastructure Health

200 checks in Schema, Local, Trust, Deep Audit. Automated Its subsection has a live automated checker in the engine.

Frontend Framework Quality

ID	Check	Passes when	Weight	Runs
6.53.01	Detect frontend framework used (React/Vue/Svelte/Next/Nuxt/etc.)	Identified	Heavy	Deterministic
6.53.02	Validate framework version modern & supported	Supported	Heavy	Deterministic
6.53.03	Validate project uses stable file structure	Stable	Heavy	Deterministic
6.53.04	Detect framework hydration issues	None	Heavy	Deterministic
6.53.05	Validate routing system predictable	Predictable	Heavy	Deterministic
6.53.06	Validate framework-specific best practices used	Used	Medium	Deterministic
6.53.07	Detect deprecated APIs in framework	None	Medium	Deterministic
6.53.08	Validate componentization consistent	Consistent	Medium	Deterministic
6.53.09	Validate proper use of state management pattern	Correct	Medium	Deterministic
6.53.10	Validate environment-specific builds correct	Correct	Medium	Deterministic

Bundling, Build System & Delivery Pipeline

ID	Check	Passes when	Weight	Runs
6.53.11	Detect bundler (Webpack, Vite, Parcel, esbuild)	Identified	Heavy	Deterministic
6.53.12	Validate bundler configuration optimized	Optimized	Heavy	Deterministic
6.53.13	Validate production build minified	Minified	Heavy	Deterministic
6.53.14	Validate code splitting applied correctly	Correct	Heavy	Deterministic
6.53.15	Detect misconfigured sourcemaps	None	Medium	Deterministic
6.53.16	Validate tree-shaking enabled & effective	Effective	Medium	Deterministic
6.53.17	Validate asset hashing for cache busting	Present	Medium	Deterministic
6.53.18	Validate production build free from debug code	Clean	Medium	Deterministic
6.53.19	Validate environment variables resolved correctly	Correct	Medium	Deterministic
6.53.20	Detect duplicate module entries	None	Medium	Deterministic

Code Quality, Linting & Maintainability

ID	Check	Passes when	Weight	Runs
6.53.21	Validate linting rules exist (ESLint/TSLint/etc.)	Present	Heavy	Deterministic
6.53.22	Validate linting errors minimal	Minimal	Heavy	Deterministic
6.53.23	Validate coding standards consistent	Consistent	Heavy	Deterministic
6.53.24	Detect code smells (long functions, duplicated logic)	None	Heavy	Deterministic
6.53.25	Validate naming conventions coherent	Coherent	Medium	Deterministic
6.53.26	Validate comments/documentation present where needed	Present	Medium	Deterministic
6.53.27	Validate TS types accurate & strict mode enabled	Accurate	Medium	Deterministic
6.53.28	Validate minimal unused variables/imports	Minimal	Medium	Deterministic
6.53.29	Validate modular file structure	Modular	Medium	Deterministic
6.53.30	Detect anti-patterns (prop drilling, global pollution, etc.)	None	Medium	Deterministic

Frontend Security & Reliability

ID	Check	Passes when	Weight	Runs
6.53.31	Validate CSP configured correctly	Correct	Heavy	Deterministic
6.53.32	Validate CORS rules correct	Correct	Heavy	Deterministic
6.53.33	Validate no inline JS executed unsafely	Safe	Heavy	Deterministic
6.53.34	Validate no client-side secrets exposed	None	Heavy	Deterministic
6.53.35	Detect outdated libraries with known vulnerabilities	None	Medium	Deterministic
6.53.36	Validate DOM sanitization for dynamic content	Sanitized	Medium	Deterministic
6.53.37	Validate secure error boundaries	Secure	Medium	Deterministic
6.53.38	Validate no use of dangerous eval/Function constructs	None	Medium	Deterministic
6.53.39	Validate secure cookie usage from frontend	Secure	Medium	Deterministic
6.53.40	Detect insecure storage (localStorage for sensitive data)	None	Medium	Deterministic

Frontend Testing & Reliability Validation

ID	Check	Passes when	Weight	Runs
6.53.41	Validate component tests present	Present	Heavy	Deterministic
6.53.42	Validate E2E tests exist for critical flows	Present	Heavy	Deterministic
6.53.43	Validate snapshots up‑to‑date	Updated	Heavy	Deterministic
6.53.44	Validate test coverage acceptable (>70%)	≥70%	Heavy	Deterministic
6.53.45	Detect flaky tests	None	Medium	Deterministic
6.53.46	Validate automated tests run in CI	Running	Medium	Deterministic
6.53.47	Validate integration tests cover API usage	Covered	Medium	Deterministic
6.53.48	Validate dev/test environments match production behavior	Matching	Medium	Deterministic
6.53.49	Detect missing mock/stub layers	None	Medium	Deterministic
6.53.50	Validate testing libraries modern & supported	Supported	Medium	Deterministic

Backend Architecture Quality

ID	Check	Passes when	Weight	Runs
6.53.51	Detect backend language/framework (Node, PHP, Python, Go, etc.)	Identified	Heavy	Deterministic
6.53.52	Validate backend framework version supported	Supported	Heavy	Deterministic
6.53.53	Validate layered architecture (controllers/services/models)	Layered	Heavy	Deterministic
6.53.54	Validate clean separation of concerns	Clean	Heavy	Deterministic
6.53.55	Validate backend coding style consistent	Consistent	Medium	Deterministic
6.53.56	Detect anti‑patterns (fat controllers, spaghetti logic)	None	Medium	Deterministic
6.53.57	Validate business logic not duplicated	Minimal	Medium	Deterministic
6.53.58	Validate standardized error handling	Standardized	Medium	Deterministic
6.53.59	Validate predictable directory structure	Predictable	Medium	Deterministic
6.53.60	Detect hardcoded config values	None	Medium	Deterministic

Backend Performance & Resource Efficiency

ID	Check	Passes when	Weight	Runs
6.53.61	Validate minimal CPU load under standard traffic	Minimal	Heavy	Deterministic
6.53.62	Validate backend caching implemented where appropriate	Implemented	Heavy	Deterministic
6.53.63	Validate database queries optimized	Optimized	Heavy	Deterministic
6.53.64	Validate backend response times stable	Stable	Heavy	Deterministic
6.53.65	Detect N+1 query issues	None	Medium	Deterministic
6.53.66	Validate pagination used for large collections	Present	Medium	Deterministic
6.53.67	Validate batch operations used effectively	Effective	Medium	Deterministic
6.53.68	Detect excessive synchronous blocking logic	None	Medium	Deterministic
6.53.69	Validate async processing where applicable	Applied	Medium	Deterministic
6.53.70	Validate logging does not degrade performance	Balanced	Medium	Deterministic

Security, Authentication & Backend Protections

ID	Check	Passes when	Weight	Runs
6.53.71	Validate strong password hashing (bcrypt/argon2)	Strong	Critical	Deterministic
6.53.72	Validate JWT/session tokens secured	Secure	Heavy	Deterministic
6.53.73	Validate auth flows secure & rate‑limited	Secure	Heavy	Deterministic
6.53.74	Validate RBAC/permissions implemented	Implemented	Heavy	Deterministic
6.53.75	Validate password reset flows secure	Secure	Medium	Deterministic
6.53.76	Detect brute force protection missing	None	Medium	Deterministic
6.53.77	Validate no plaintext sensitive data stored	None	Medium	Deterministic
6.53.78	Validate CSRF protection active	Active	Medium	Deterministic
6.53.79	Validate backend does not reveal stack traces publicly	Hidden	Medium	Deterministic
6.53.80	Detect insecure redirect logic	None	Medium	Deterministic

API Design, Consistency & Reliability

ID	Check	Passes when	Weight	Runs
6.53.81	Validate API schema consistent (REST/GraphQL)	Consistent	Heavy	Deterministic
6.53.82	Validate naming conventions consistent across endpoints	Consistent	Heavy	Deterministic
6.53.83	Validate input validation strict	Strict	Heavy	Deterministic
6.53.84	Validate output schema predictable	Predictable	Heavy	Deterministic
6.53.85	Validate API rate limits configured	Configured	Medium	Deterministic
6.53.86	Detect inconsistent HTTP status codes	None	Medium	Deterministic
6.53.87	Validate API documentation correct	Accurate	Medium	Deterministic
6.53.88	Validate API error messages structured	Structured	Medium	Deterministic
6.53.89	Validate no excessive API chaining	Minimal	Medium	Deterministic
6.53.90	Detect unstable endpoints	None	Medium	Deterministic

API Performance & Connectivity

ID	Check	Passes when	Weight	Runs
6.53.91	Validate API response times ≤ 300ms baseline	≤300ms	Heavy	Deterministic
6.53.92	Validate API latency consistent across regions	Consistent	Heavy	Deterministic
6.53.93	Validate API caching in place where appropriate	Cached	Heavy	Deterministic
6.53.94	Validate minimal cold-start delays for serverless functions	Minimal	Heavy	Deterministic
6.53.95	Detect repeated API timeouts	None	Medium	Deterministic
6.53.96	Validate API retries configured properly	Configured	Medium	Deterministic
6.53.97	Validate no excessive API waterfalls	None	Medium	Deterministic
6.53.98	Validate secure API transport (HTTPS/TLS) enforced	Enforced	Medium	Deterministic
6.53.99	Validate structured logs for API calls	Structured	Medium	Deterministic
6.53.100	Detect API-level resource throttling	None	Medium	Deterministic

Database Quality & Design

ID	Check	Passes when	Weight	Runs
6.53.101	Detect database engine (MySQL/Postgres/Mongo/etc.)	Identified	Heavy	Deterministic
6.53.102	Validate schema normalized appropriately	Normalized	Heavy	Deterministic
6.53.103	Validate table structure consistent	Consistent	Heavy	Deterministic
6.53.104	Validate indexing strategy correct	Correct	Heavy	Deterministic
6.53.105	Detect missing primary/foreign keys	None	Medium	Deterministic
6.53.106	Validate column types optimal	Optimal	Medium	Deterministic
6.53.107	Detect redundant columns	None	Medium	Deterministic
6.53.108	Validate naming conventions consistent	Consistent	Medium	Deterministic
6.53.109	Validate schema documentation present	Present	Medium	Deterministic
6.53.110	Detect unbounded text/blob columns where not needed	None	Medium	Deterministic

Query Quality, Performance & Optimization

ID	Check	Passes when	Weight	Runs
6.53.111	Validate queries use indexes properly	Indexed	Heavy	Deterministic
6.53.112	Detect slow queries	None	Heavy	Deterministic
6.53.113	Validate prepared statements used	Used	Heavy	Deterministic
6.53.114	Validate joins optimized	Optimized	Heavy	Deterministic
6.53.115	Detect SELECT * usage	None	Medium	Deterministic
6.53.116	Validate query caching effective	Effective	Medium	Deterministic
6.53.117	Detect duplicate queries executed in loops	None	Medium	Deterministic
6.53.118	Validate pagination efficiency	Efficient	Medium	Deterministic
6.53.119	Detect table scans on large datasets	None	Medium	Deterministic
6.53.120	Validate connection pooling configured	Configured	Medium	Deterministic

Storage Scalability & Health

ID	Check	Passes when	Weight	Runs
6.53.121	Validate storage type appropriate (SSD/object storage/etc.)	Appropriate	Heavy	Deterministic
6.53.122	Validate backups automated	Automated	Heavy	Deterministic
6.53.123	Validate backup retention policy adequate	Adequate	Heavy	Deterministic
6.53.124	Detect missing storage redundancy	None	Medium	Deterministic
6.53.125	Validate space utilization normal	Normal	Medium	Deterministic
6.53.126	Detect rapid storage growth anomalies	None	Medium	Deterministic
6.53.127	Validate log retention policy correct	Correct	Medium	Deterministic
6.53.128	Validate automated log rotation	Automatic	Medium	Deterministic
6.53.129	Detect orphaned large files	None	Medium	Deterministic
6.53.130	Validate cold storage usage appropriate	Appropriate	Medium	Deterministic

Data Safety, Encryption & Access Control

ID	Check	Passes when	Weight	Runs
6.53.131	Validate at-rest encryption active	Active	Critical	Deterministic
6.53.132	Validate in-transit encryption active	Active	Heavy	Deterministic
6.53.133	Validate database access logs active	Active	Heavy	Deterministic
6.53.134	Validate DB user permissions scoped minimally	Minimal	Heavy	Deterministic
6.53.135	Validate secret rotation enabled	Enabled	Medium	Deterministic
6.53.136	Detect credentials stored in code repository	None	Medium	Deterministic
6.53.137	Validate cross-region replication where needed	Enabled	Medium	Deterministic
6.53.138	Validate authorization tokens scoped correctly	Scoped	Medium	Deterministic
6.53.139	Detect lingering old DB users	None	Medium	Deterministic
6.53.140	Validate audit trails complete	Complete	Medium	Deterministic

Data Consistency, Integrity & Resilience

ID	Check	Passes when	Weight	Runs
6.53.141	Validate ACID compliance for relational systems	Compliant	Heavy	Deterministic
6.53.142	Validate schema migrations consistent	Consistent	Heavy	Deterministic
6.53.143	Validate rollback strategy exists	Exists	Heavy	Deterministic
6.53.144	Validate zero-downtime migrations	Supported	Medium	Deterministic
6.53.145	Validate conflict resolution logic for distributed DBs	Correct	Medium	Deterministic
6.53.146	Validate cross-service data sync accuracy	Accurate	Medium	Deterministic
6.53.147	Detect drift between environments (dev/stage/prod)	None	Medium	Deterministic
6.53.148	Validate database failover procedures tested	Tested	Medium	Deterministic
6.53.149	Validate referential integrity constraints correct	Correct	Medium	Deterministic
6.53.150	Detect phantom reads or race conditions	None	Medium	Deterministic

Server Infrastructure, Environment & Uptime

ID	Check	Passes when	Weight	Runs
6.53.151	Validate server type identified (shared/VPS/dedicated/serverless)	Identified	Heavy	Deterministic
6.53.152	Validate uptime ≥ 99.9%	≥99.9%	Heavy	Deterministic
6.53.153	Validate server monitoring tools active	Active	Heavy	Deterministic
6.53.154	Validate autoscaling configured (if applicable)	Configured	Heavy	Deterministic
6.53.155	Validate server location matches target audience	Matched	Medium	Deterministic
6.53.156	Detect noisy‑neighbor resource conflicts	None	Medium	Deterministic
6.53.157	Validate CPU/RAM boundaries adequate	Adequate	Medium	Deterministic
6.53.158	Validate consistent disk I/O performance	Consistent	Medium	Deterministic
6.53.159	Detect OS-level throttling	None	Medium	Deterministic
6.53.160	Validate system logs free of critical runtime events	Clean	Medium	Deterministic

Load Balancers, Containers & Orchestration

ID	Check	Passes when	Weight	Runs
6.53.161	Validate load balancer configured correctly	Correct	Heavy	Deterministic
6.53.162	Validate load distribution even	Even	Heavy	Deterministic
6.53.163	Validate SSL termination at load balancer correct	Correct	Heavy	Deterministic
6.53.164	Validate autoscaling triggers tested	Tested	Medium	Deterministic
6.53.165	Detect load balancer misrouting	None	Medium	Deterministic
6.53.166	Validate containerization used properly (Docker/K8s)	Proper	Medium	Deterministic
6.53.167	Validate containers small & efficient	Efficient	Medium	Deterministic
6.53.168	Detect container restarts due to crashes	None	Medium	Deterministic
6.53.169	Validate orchestration health checks configured	Configured	Medium	Deterministic
6.53.170	Validate cluster nodes consistent & healthy	Healthy	Medium	Deterministic

Deployment Pipeline, Ci/Cd & Versioning

ID	Check	Passes when	Weight	Runs
6.53.171	Validate CI/CD pipeline exists	Exists	Heavy	Deterministic
6.53.172	Validate automated build + deploy steps	Automated	Heavy	Deterministic
6.53.173	Validate rollback workflow exists	Exists	Heavy	Deterministic
6.53.174	Validate deployments atomic	Atomic	Medium	Deterministic
6.53.175	Validate environment parity (dev/staging/prod)	Parity	Medium	Deterministic
6.53.176	Detect manual deployment anti-patterns	None	Medium	Deterministic
6.53.177	Validate version tag naming consistent	Consistent	Medium	Deterministic
6.53.178	Validate deployment logs accessible & complete	Complete	Medium	Deterministic
6.53.179	Detect broken pipelines	None	Medium	Deterministic
6.53.180	Validate secrets injected securely via CI/CD	Secure	Medium	Deterministic

Reliability, Failover & Disaster Recovery

ID	Check	Passes when	Weight	Runs
6.53.181	Validate multi-zone redundancy (cloud)	Enabled	Heavy	Deterministic
6.53.182	Validate failover tests performed	Performed	Heavy	Deterministic
6.53.183	Validate DNS failover policies correct	Correct	Heavy	Deterministic
6.53.184	Detect single points of failure	None	Medium	Deterministic
6.53.185	Validate rate-limit + DDoS protection active	Active	Medium	Deterministic
6.53.186	Validate automated recovery scripts functional	Functional	Medium	Deterministic
6.53.187	Detect missing disaster recovery documentation	None	Medium	Deterministic
6.53.188	Validate log shipping/replication correct	Correct	Medium	Deterministic
6.53.189	Validate cross-region failover latency acceptable	Acceptable	Medium	Deterministic
6.53.190	Detect inconsistent alarm thresholds	None	Medium	Deterministic

Final Technology Stack & Infrastructure Scoring

ID	Check	Passes when	Weight	Runs
6.53.191	Validate all critical infrastructure stable	Stable	Critical	Deterministic
6.53.192	Validate no severe vulnerabilities (CVEs high)	None	Critical	Deterministic
6.53.193	Validate all environments synchronized	Synced	Heavy	Deterministic
6.53.194	Validate deployment system reliable	Reliable	Heavy	Deterministic
6.53.195	Validate all subsystems monitored	Monitored	Medium	Deterministic
6.53.196	Validate performance + security telemetry active	Active	Medium	Deterministic
6.53.197	Validate incident response checklist documented	Documented	Medium	Deterministic
6.53.198	Validate infra cost/performance ratio healthy	Healthy	Medium	Deterministic
6.53.199	Detect outdated OS/kernel versions	None	Medium	Deterministic
6.53.200	Compute Final Infrastructure Score	Finalized	Critical	Deterministic

← 6.52 Performance, Speed, Core Web Vitals & Rendering Quality6.54 Brand Trust, Entity Authority, E-E-A-T, Local SEO Credibility & AI-Recognition Signals →

Run these checks on your site

A Deep Audit scores every check here that applies to your page, then an AI pass of up to 150 checks. Included on Pro and Ultra, or $9 for one audit.

See plans

Machine-readable: catalog totals and the full catalog as JSON (IDs, section, weight, status).