PROBIE
Fix these issues
Report readyDispatch 90

We found 4 issueson wallhop.ioworth fixing.

Probie inspected wallhop.io the way a new customer would. 1 page, desktop and phone, 5 minutes. Oct 11, 2026.

1 page visited4 controls found2 clicked
wallhop.io's report cardOct 11, 2026

The home page response lacks three security headers.

0 serious4 minor
See the breakdown
Probie doesn't stop at the report.Sign up and turn these findings into tested pull requests.
Fix these issues →
Probie on site

Watch the inspection.

We navigate your site the way customers would. Idle time is skipped.

Inspect your own site
the scores · out of 100
100VisualNo verified visual problems in the scanned pages.
97AccessibilityThe footer credit line fails the color contrast minimum
100Buttons and linksNo verified problems with the controls and links checked.
97Under the hoodThe home page response lacks three security headers
90MobileThe Bookmarklet card on phones offers only a drag control
How the composite score works

The overall score is a weighted average: Visual 18.75%, Accessibility 25%, Buttons and links 31.25%, Under the hood 12.5%, and Mobile 12.5%. Unassessed categories are excluded and the remaining weights are normalized.

Product categories start at 100. Each distinct verified finding deducts 30 points for a serious issue, including a reproduced flow defect or material pricing contradiction, or 18 for critical, 12 for high, 7 for medium, and 3 for low stored detector severity. Scores stop at zero and round to whole numbers. All verified findings count, including those beyond the displayed list. The formula is fixed and versioned, so the same saved evidence always receives the same score.

the issues
Minorhome page

The home page response lacks three security headers

The response from https://wallhop.io/ is missing Strict-Transport-Security, Content-Security-Policy, and Cross-Origin-Resource-Policy.

wallhop.io
Captured during the scan: The home page response lacks three security headers
from the scan · / · desktopopen full capture ↗

Try it: Run curl -sI https://wallhop.io/ and check that Strict-Transport-Security, Content-Security-Policy and Cross-Origin-Resource-Policy do not appear.

Minorhome page

Hard-to-read text gets in the way of a customer's decision

The credit line at the bottom of the home page, "heavily modified and tuned from the open-source everywall/ladder (GPL-3.0)", is #727c8c on #f6f8fb at 12px. That gives a contrast ratio of 3.96:1, and the requirement for text this size is 4.5:1. The line is attribution only and plays no part in reading an article or donating.

wallhop.io
Captured during the scan: The footer credit line fails the color contrast minimum
from the scan · / · desktopopen full capture ↗

Try it: Scroll to the bottom of / and check the contrast of the gray credit line under "a wafflehacker.dev project" in a contrast checker.

Minorhome page · phone

The Bookmarklet card on phones offers only a drag control

On the phone layout of the home page, the Bookmarklet card says "Drag to your bookmarks bar:" and offers only a "wallhop it" drag button. Mobile browsers have no bookmarks bar to drag it to, and the card gives no copy-the-code steps and does not point phone visitors to another method.

wallhop.io
Captured during the scan: The Bookmarklet card on phones offers only a drag control
from the scan · / · mobileopen full capture ↗

Try it: Open wallhop.io on a phone, scroll to the Bookmarklet card, and try to add "wallhop it" as a bookmark.

Minorhome page · phone

WSJ, Bloomberg, Atlantic and Economist links return no article

Links from www.wsj.com return "401 from www.wsj.com", and links from The Atlantic, Bloomberg and The Economist return "403". All four land on the "They built a taller wall." page instead of the article, on both phone and desktop. The only way forward is "Open the archive copy →", which goes to archive.is/newest/. Both times it was opened, the request failed with net::ERR_TIMED_OUT, so a visitor at the try step did not get the article.

wallhop.io
Captured during the scan: WSJ, Bloomberg, Atlantic and Economist links return no article
from the scan · / · mobileopen full capture ↗

Try it: Open wallhop.io/https://www.theatlantic.com/magazine/archive/2008/07/is-google-making-us-stupid/306868/ and watch the 403 "taller wall" page load. Then tap "Open the archive copy" and see whether archive.is loads.

polish
Polish

The "Prefix any link" text sits awkwardly

The monospace eyebrow label in the 'Prefix any link' card breaks mid-token onto a second line, so this card's heading sits about 21px lower than the headings in the other three cards.

Polish

A rough edge in the layout

The Prefix any link card's monospace eyebrow label breaks mid-token onto a second line. This pushes the card's heading about 20px below the headings of the other three method cards.

from report to pull request

Probie fixes this for you.

Stop customers hitting the same friction. Connect your codebase and Probie reproduces these failures, tests the fix, and opens a pull request for your review.

Sign up and get this fixed
PRFix: The home page response lacks three security headers
probie/fix-1+12−4checks passing

Free inspection

What should Probie inspect next?

Enter a project URL. There is nothing to install.

Probie checks every issue twice, respects robots.txt, and backs off at bot challenges.

Send this report to an inbox.

Enter an address and we will email the report card link.