Introducing Webperf Cloud, open source website auditing

1 June 2026

Trust, but verify is old advice, but it has rarely mattered more than it does when you choose the tools you plug into your website. Every audit service, analytics script and monitoring platform you add gets a view of your site, and by extension of your visitors. Taking someone's word that it's all handled is not a strategy. Being able to check is.

Today we're introducing Webperf Cloud, the hosted home for Webperf's website quality testing. This post is a quick tour of what Cloud is and how you can verify the engine behind it for yourself, because it's open source.

What Webperf Cloud is

Webperf Cloud is continuous quality monitoring for your website! Accessibility, performance, privacy and findability, with results in plain language and a clear score you can hand straight to your team.

A few things are true of it by design:

• The evaluation engine is open source. The tests that grade your website live in webperf_core, publicly available on GitHub. You can read exactly what is measured and why.
• It's processed in Sweden, Finland and Germany, under EU jurisdiction. Your data stays in the EU. We don't sell it, share it with advertisers, or use it for purposes you didn't agree to.
• Check your consents and third parties. Every plan includes a cookie and third-party audit, a check for the trackers and non-consenting cookies your pages quietly load.
• There's no lock-in. No auto-renewal, and your historical data is always yours to export.

It comes in three sizes, Starter, Standard and Agency, so a single site owner and a multi-site agency can both find a fit. You can see the details on the plans page, and there's a 14-day free trial where you don't need to enter a card.

Verify the website auditing engine yourself

Most website auditing tools ask you to trust a number. A dashboard shows you a score, and you either believe it or you don't. There's no way to see how it was reached, or what the tool looked at on the way there.

Webperf Cloud rests on a different decision. The engine that grades your site is open source.

That engine is webperf_core, and it lives in the open on GitHub. Every test it runs is code you can read, from how accessibility is checked and performance is measured to how cookies and third-party trackers are detected. Nothing about the scoring is hidden behind our servers.

You don't have to be a developer to benefit from this. Anyone can inspect the method, question it, or check it against a page they already understand. A score you can trace back to public code is a score you can stand behind when someone asks.

What you get with a plan

Beyond the automated monitoring, a Webperf Cloud plan is built for people who want their site evaluated as an ongoing service rather than a one-off check:

• Private and pre-launch testing. Test a staging or UAT environment, or a page you haven't published yet.
• The API, webhooks and IndexNow are there for teams who want to wire Webperf into their own reporting, CMS or CI.
• Static-IP testing lets you allowlist our servers through a firewall or WAF, so we can reach a protected site.
• Baseline audits and competitor benchmarking give you the bigger picture, showing where you stand today and how you compare.

Plus more frequent tests, manual reruns, and support from real people. For anything specific about your setup, get in touch at order@webperf.cloud and we'll sort it out with you directly.

Why open source matters for GDPR, ePrivacy and NIS2

This is a compliance question as much as a product announcement.

If you operate in or serve the EU, several frameworks now expect you to know what your website does, not merely to hope:

• GDPR asks you to account for the personal data you process, including where it goes and who can see it. A tool you can't inspect makes that a hard question to answer with any confidence. Webperf Cloud also helps you audit your website with regard to GDPR and the third parties in use.
• The ePrivacy rules, the so-called "EU cookie law", require consent before you set non-essential cookies or fire third-party trackers. You can only prove that if you can see what your pages load. The cookie and third-party audit, included in any Webperf Cloud plan, exists for that reason.
• NIS2 raises the bar on cybersecurity and supply-chain risk for a wide range of organizations, which means scrutinising the vendors and tools you depend on. We trust our provider is no longer a complete answer; you're expected to be able to verify with an SBOM (Software Bill of Materials), for instance.

In each case, the responsible posture is the same. Do not just trust a supplier's assurances. Choose tools that let you check them instead. An open-source engine you can read, hosted under a jurisdiction you understand, with an audit that shows you your own trackers, is a tool built for exactly that kind of scrutiny. With the possibility to keep going yourself if needed.

If you want to go deeper on the thinking behind this, our piece on digital sovereignty covers why where your data lives and whether you can inspect your tools are practical, legal concerns rather than just philosophy.

You don't have to take any of this on faith, so try it for yourself:

• Read the evaluation engine, webperf_core, on GitHub.
• Or start a free 14-day trial without entering a card.

Trust the tool because you checked it.

Website quality monitoring for accessibility, performance, privacy and findability, on an open source engine, hosted in Sweden. See the plans or read about our approach.