1(self.webpackChunk_N_E=self.webpackChunk_N_E||[]).push([[5522],{27541:(e,t,s)=>{"use strict";var i=s(43041);s.o(i,"usePathname")&&s.d(t,{usePathname:function(){return i.usePathname}}),s.o(i,"useRouter")&&s.d(t,{useRouter:function(){return i.useRouter}}),s.o(i,"useSearchParams")&&s.d(t,{useSearchParams:function(){return i.useSearchParams}})},76540:(e,t,s)=>{"use strict";s.d(t,{HomepageFindingsOverview:()=>u});var i=s(54568),a=s(32536),n=s(7620);let r=JSON.parse('{"SQ":{"id":"d96df06d-3e94-4896-8346-1a026d68e5af","domainHostname":"ergoveritas.com","status":"completed","scanType":"full","scanFrom":"california","createdAt":"2026-09-28T15:36:36.691Z","startedAt":"2026-09-28T15:36:36.691Z","completedAt":"2026-09-28T15:36:44.010Z","durationMs":null,"pagesRequested":5,"pagesScanned":1},"CE":{"status":"responsive","observation":{"status":"complete","delivery":{"httpHeaderRetained":true,"mainNavigatorReadbackRetained":true,"fullContextVerified":true}},"activityComparison":{"status":"measured","durationMs":250,"activity":{"advertisingMarketing":{"baselineRequests":1,"gpcRequests":0,"baselineServices":1,"gpcServices":0},"analyticsReplay":{"baselineRequests":5,"gpcRequests":5,"baselineServices":5,"gpcServices":5}}}},"XJ":{"status":"confirmed_observation","execution":{"policyVersion":"choice_path_execution.v1","status":"succeeded_with_confirmation","clickCompleted":true,"observationCompleted":true,"consentConfirmed":true},"observationCount":2,"verdict":"eligible_nonessential_activity_observed_after_confirmed_refusal"},"PU":{"verificationStatus":"verified","controls":[],"notices":[{"kind":"privacy_policy","url":"https://ergoveritas.com/test2-privacy-policy.html","coverage":"partial","passages":[{"topic":"sale_sharing"},{"topic":"collection_purposes"},{"topic":"retention"},{"topic":"privacy_rights"},{"topic":"opt_out_methods"}]}]},"Qj":{"unifiedFindings":[{"unifiedFindingId":"cookie_policy_present","title":"Cookie settings or policy surface present","severity":"medium"},{"unifiedFindingId":"privacy_policy_present","title":"Privacy policy surface present","severity":"medium"},{"unifiedFindingId":"consent_gated_tracking_claim_conflict","title":"Consent-gated tracking claim conflict","severity":"high"},{"unifiedFindingId":"post_refusal_non_essential_activity","title":"Non-essential activity continued after refusal","severity":"high"},{"unifiedFindingId":"preconsent_tracking","title":"Third-party tracking observed before recorded consent","severity":"high"},{"unifiedFindingId":"session_replay_observed","title":"Session replay observed","severity":"high"},{"unifiedFindingId":"gpc_response","title":"GPC response","severity":"low"}]},"i8":{"dataCollectionSurfaces":{"assessmentStatus":"not_observed","summary":{"totalForms":0,"totalFields":0,"candidateForms":0,"candidateFields":0,"omittedForms":0,"omittedFields":0}}}}');var o=s(51983);let l=function(){let e=arguments.length>0&&void 0!==arguments[0]?arguments[0]:"";return"".concat(o.U1,"?reviewFocus=ccpa_cpra").concat(e)},c=(e,t,s,i)=>({name:e,width:t,height:s,alt:i}),d=[{id:"overview",label:"Overview",category:"Your report",title:"Know where to look first.",description:"Start with the page score, priority issues and a snapshot of the technologies your website uses. Open each finding to inspect its supporting evidence.",highlights:["Prioritized findings and evidence ratings","Consent, policy and resource summaries"],result:"This scan: 4 priority issues, 8 services and 10 cookie/storage items.",image:c("overview",449,439,"Fresh test2 report: score 42, four priority issues, OneTrust and the consent, policy and transport signal snapshot."),json:{scan:r.SQ,projection:r.Qj},href:l(),linkLabel:"Explore the report"},{id:"consent",label:"Consent paths",category:"Visitor choice",title:"Look beyond the cookie banner.",description:"Identify the CMP and visible Accept, Reject and Options controls. Separate after-click observations show what happened along eligible Accept and Reject paths.",highlights:["First-layer control visibility","Click execution and consent confirmation shown separately"],result:"This scan: activity remained after a confirmed Reject, including a Google request and a storage write.",image:c("consent",624,541,"Test2 consent panel with OneTrust, observed Accept and Reject controls, and separate after-action results."),json:{postRefusalObservation:r.XJ},href:l("#consent-review-evidence"),linkLabel:"Inspect consent evidence"},{id:"storage",label:"Cookies & storage",category:"Browser activity",title:"See what is storedâand when.",description:"Review cookies, local storage and session storage alongside their purpose, classification and first-seen timing. Follow a resource to its retained JSON evidence.",highlights:["Essential, non-essential and review classifications","Cookie names, domains and service attribution"],result:"This scan: _ga_TEST2 and _gat_TEST2 were classified as non-essential analytics cookies.",image:c("cookies",1170,465,"Expanded Google Analytics service with two non-essential cookie rows and a retained request."),href:l("#report-resource-inventory"),linkLabel:"Explore stored resources"},{id:"services",label:"Services & requests",category:"Browser activity",title:"Connect requests to the services behind them.",description:"Explore advertising, analytics and session-replay services, their requests and embedded resources. Review first- or third-party relationships, policy mentions and available destination evidence.",highlights:["Vendor, product, purpose and request details","Session replay and fingerprinting review signals"],result:"This scan: Google Analytics, Meta, Clarity, Hotjar, FullStory and Mixpanel activity was retained.",image:c("inventory",1170,614,"Actual service inventory with purpose, policy disclosure, timing, domains and site relationships."),href:l("#report-resource-inventory"),linkLabel:"Inspect services and requests"},{id:"timing",label:"Timeline",category:"Browser activity",title:"Put consent and tracking in order.",description:"A shared timeline places the consent surface, requests, storage and tracking signals in the observed page visit. Scan location and capture scope give the sequence context.",highlights:["First-seen activity relative to scan start","Consent-surface timing and observation end"],result:"This scan: the first third-party request appeared 1.88 seconds before the consent surface.",image:c("timeline",1170,165,"Test2 timeline showing a third-party request at 0.67 seconds and the consent banner at 2.55 seconds."),href:l(),linkLabel:"Follow the timeline"},{id:"gpc",label:"GPC",category:"California privacy",title:"See what changes with GPC.",description:"Verify delivery of Global Privacy Control, then compare classified activity with a separate passive baseline. The report distinguishes a completed observation from a measurable response.",highlights:["Page-request and browser signal evidence","Matched baseline-versus-GPC request counts"],result:"This scan: advertising fell from 1 request to 0; analytics/replay stayed at 5 in the matched 250 ms window.",image:c("gpc",532,517,"GPC report: response observed, advertising requests reduced from one to zero, analytics and replay stayed at five."),json:{gpcResponse:r.CE},href:l("#gpc-evidence"),linkLabel:"Inspect the GPC comparison"},{id:"california",label:"CCPA / CPRA",category:"California privacy",title:"Bring privacy choices and notices into view.",description:"Review Do Not Sell/Share, privacy-choice and cookie-sett
1ings evidence alongside retained notice passages on sale/sharing, purposes, retention, rights and opt-out methods.",highlights:["Evidence-backed choice links when verified","Notice passages linked to their source policy"],result:"This scan: 5 notice topics retained. Choice-link visibility was not verified; opt-out functionality was not tested.",image:c("california",532,430,"Retained California notice passages from the test2 privacy policy, including sale/sharing and collection purposes."),json:{privacyAuditEvidence:r.PU},href:l("#california-privacy-evidence"),linkLabel:"Review California evidence"},{id:"policy",label:"Policies",category:"Disclosures",title:"Follow disclosures back to their source.",description:"Locate privacy and cookie policies, then review retained disclosure evidence for purposes, legal basis, retention, recipients, transfers and rights. Compare directly comparable policy promises with runtime facts where supported.",highlights:["Source-linked policy and transparency checks","Observed evidence separated from unconfirmed coverage"],result:"This scan: the privacy-policy surface was observed; several disclosure checks remain unconfirmed.",image:c("policy",624,543,"Policy and transparency checklist showing the observed privacy-policy surface and unconfirmed disclosure checks."),href:l(),linkLabel:"Review disclosure evidence"},{id:"transport",label:"Transport",category:"Page safeguards",title:"Check how the page communicates.",description:"Review HTTPS delivery, certificate validation, HTTP redirects, mixed content and observed form transport alongside the privacy findings.",highlights:["Retained TLS and certificate observations","Individual results for five transport checks"],result:"This scan: 4 positive transport checks. Form transport was limited because no form was observed.",image:c("transport",532,492,"Transport checklist with four positive checks and a limited form-transport result."),href:l(),linkLabel:"Inspect transport checks"},{id:"collection",label:"Forms & embeds",category:"Page safeguards",title:"Understand the pageâs collection surfaces.",description:"Inspect forms and field structure, checkbox settings and masked form captures when available. Resource inventories also expose embedded frames and hidden outbound links for review.",highlights:["Read-only form inspectionâno submissions","Field details and capture coverage"],result:"This scan: no forms, embedded frames or hidden links were observed. The JSON retains the completed form-inventory result.",image:c("collection",690,204,"Actual resource summary showing zero forms, hidden links and embedded frames, alongside eight requests and ten cookie or storage items."),json:{appendix:r.i8},href:"/methodology",linkLabel:"Explore collection coverage"},{id:"exports",label:"Share & monitor",category:"Team workflows",title:"Take the evidence into your workflow.",description:"Share a report or export JSON, PDF and tracking CSV for your review. Plan-dependent full-site scans and monitoring extend the workflow to more pages and repeat checks.",highlights:["Shareable reports and structured exports","Full-site coverage and recurring monitoring options"],result:"This example covers one starting page. Its export keeps the scan identity, location and completion time.",code:{label:"Actual report export \xb7 selected fields",content:JSON.stringify({scan:r.SQ},null,2)},href:l(),linkLabel:"Open report and exports"},{id:"mcp",label:"MCP",category:"Developer interfaces",title:"Give your AI tools website evidence.",description:"Connect an MCP-compatible assistant to CertScore. Create or reuse an eligible scan, follow its status, then retrieve findings and paginated report evidence.",highlights:["Light MCP for public scanning","Authenticated tools for workspace access"],result:"Example workflow for test2.html. Tool access and scan allowances depend on the connection.",code:{label:"MCP \xb7 example tool workflow",content:'certscore_scan_site\n{\n "url": "https://ergoveritas.com/test2.html"\n}\n\n// While the returned scan is active\ncertscore_get_scan_status\n{ "scanId": "<returned scanId>" }\n\n// Once completed\ncertscore_get_scan_bundle\n{\n "scanId": "<returned scanId>",\n "detail": "findings",\n "maxBytes": 8000\n}'},href:"/developers/mcp",linkLabel:"Explore MCP setup"},{id:"api",label:"API & SDK",category:"Developer interfaces",title:"Build the report into your application.",description:"Use the REST API or Type
1Script SDK to create scans, poll status and retrieve findings and evidence. Keep scan identity and coverage with the results you display.",highlights:["Structured scan and evidence contracts","Documented endpoints and TypeScript SDK"],result:"Switch to JSON for selected fields from this scanâs real export. The request below is an API usage example.",code:{label:"REST API \xb7 example scan request",content:'POST https://certscore.ai/api/v2/scans\nContent-Type: application/json\n\n{\n "url": "https://ergoveritas.com/test2.html",\n "freshness": "latest",\n "scanFrom": "california"\n}\n\nGET /api/v2/scans/<scanId>/status\nGET /api/v2/scans/<scanId>/findings\nGET /api/v2/scans/<scanId>/report-evidence'},json:{scan:{id:r.SQ.id,status:r.SQ.status},gpcResponse:r.CE},href:"/developers/quickstart",linkLabel:"Explore API and SDK"}],p="focus-visible:outline focus-visible:outline-2 focus-visible:outline-offset-4 focus-visible:outline-sky-700";function u(){var e,t,s;let[r,l]=(0,n.useState)(0),[c,u]=(0,n.useState)(!1),h=(0,n.useRef)(null),m=d[r],g=e=>{l((e+d.length)%d.length),u(!1)},f=c?"Actual report export \xb7 selected fields":null!=(s=null==(e=m.code)?void 0:e.label)?s:"Actual scan report \xb7 click to enlarge";return(0,i.jsxs)("section",{id:"findings-overview","aria-labelledby":"showcase-heading",className:"scroll-mt-24 bg-white px-5 pt-4 sm:px-8",children:[(0,i.jsxs)("div",{className:"mx-auto max-w-7xl",children:[(0,i.jsxs)("div",{className:"flex flex-col justify-between gap-5 sm:flex-row sm:items-start",children:[(0,i.jsxs)("div",{children:[(0,i.jsx)("p",{className:"text-xs font-semibold uppercase tracking-[0.18em] text-sky-700",children:"Findings overview"}),(0,i.jsx)("h2",{id:"showcase-heading",className:"mt-3 text-3xl font-semibold tracking-tight text-slate-950 sm:text-4xl lg:text-5xl",children:"See whatâs inside a scan."})]}),(0,i.jsxs)("a",{href:o.U1,className:"inline-flex min-h-11 shrink-0 items-center gap-2 font-semibold text-sky-700 hover:underline ".concat(p),children:["Open sample report ",(0,i.jsx)("span",{"aria-hidden":"true",children:"â"})]})]}),(0,i.jsxs)("div",{id:"showcase-slide",role:"region","aria-roledescription":"carousel","aria-label":"CertScore feature tour",onKeyDown:e=>{var t;(null==(t=h.current)?void 0:t.open)||e.target.closest("pre")||"ArrowLeft"!==e.key&&"ArrowRight"!==e.key||(e.preventDefault(),g(r+("ArrowRight"===e.key?1:-1)))},className:"mt-5 overflow-hidden rounded-3xl border border-slate-200 bg-white shadow-[0_20px_70px_-35px_rgba(15,23,42,0.25)]",children:[(0,i.jsxs)("div",{role:"group","aria-label":"Carousel navigation",className:"flex h-16 items-center gap-4 border-b border-slate-200 px-4 sm:px-6",children:[(0,i.jsxs)("div",{className:"flex shrink-0 gap-2",children:[(0,i.jsx)("button",{type:"button",onClick:()=>g(r-1),"aria-label":"Previous feature","aria-controls":"showcase-content",className:"h-11 w-11 rounded-full border border-slate-200 text-xl text-slate-700 hover:border-sky-400 hover:bg-sky-50 ".concat(p),children:"â"}),(0,i.jsx)("button",{type:"button",onClick:()=>g(r+1),"aria-label":"Next feature","aria-controls":"showcase-content",className:"h-11 w-11 rounded-full border border-slate-200 text-xl text-slate-700 hover:border-sky-400 hover:bg-sky-50 ".concat(p),children:"â"})]}),(0,i.jsxs)("p",{className:"ml-auto flex min-w-0 items-center gap-3 text-right text-sm font-medium text-slate-700",children:[(0,i.jsx)("span",{className:"truncate",children:m.label}),(0,i.jsxs)("span",{className:"shrink-0 whitespace-nowrap text-xs tabular-nums text-slate-500",children:[String(r+1).padStart(2,"0")," / ",d.length]})]})]}),(0,i.jsxs)("div",{id:"showcase-content",className:"grid lg:grid-cols-[1fr_1.45fr]",children:[(0,i.jsxs)("div",{className:"flex min-w-0 flex-col p-6 sm:p-8",children:[(0,i.jsxs)("div",{"aria-live":"polite","aria-atomic":"true",children:[(0,i.jsx)("p",{className:"text-xs font-semibold uppercase tracking-[0.16em] text-sky-700",children:m.category}),(0,i.jsx)("h3",{className:"mt-3 text-2xl font-semibold leading-tight tracking-tight text-slate-950 sm:text-3xl",children:m.title}),(0,i.jsx)("p",{className:"mt-4 text-base leading-7 text-slate-600",children:m.description}),(0,i.jsx)("ul",{className:"mt-5 space-y-2 text-sm leading-6 text-slate-700",children:m.highlights.map(e=>(0,i.jsxs)("li",{className:"flex gap-3",children:[(0,i.jsx)("span",{"aria-hidden":"true",className:"text-sky-600",children:"â"}),e]},e))}),(0,i.jsx)("p",{className:"mt-6 border-l-2 border-sky-400 pl-4 text-sm leading-6 text-slate-600",children:m.result})]}),(0,i.jsxs)("a",{href:m.href,className:"mt-6 inline-flex min-h-11 items-center gap-2 self
1-start text-sm font-semibold text-sky-700 hover:underline ".concat(p),children:[m.linkLabel," ",(0,i.jsx)("span",{"aria-hidden":"true",children:"â"})]})]}),(0,i.jsxs)("div",{className:"min-w-0 border-t border-slate-200 bg-slate-50 lg:border-l lg:border-t-0",children:[(0,i.jsxs)("div",{className:"flex min-h-16 flex-wrap items-center justify-between gap-2 border-b border-slate-200 px-4 py-3 sm:px-6",children:[(0,i.jsx)("p",{className:"text-xs font-medium text-slate-500",children:f}),void 0!==m.json&&(0,i.jsxs)("div",{role:"group","aria-label":"Preview format",className:"flex rounded-lg border border-slate-200 bg-white p-0.5 text-xs",children:[(0,i.jsx)("button",{type:"button","aria-pressed":!c,onClick:()=>u(!1),className:"min-h-8 rounded-md px-3 ".concat(p," ").concat(c?"text-slate-600":"bg-slate-900 text-white"),children:m.code?"Request":"Report"}),(0,i.jsx)("button",{type:"button","aria-pressed":c,onClick:()=>u(!0),className:"min-h-8 rounded-md px-3 ".concat(p," ").concat(c?"bg-slate-900 text-white":"text-slate-600"),children:"JSON"})]})]}),(0,i.jsx)("div",{className:"flex h-[320px] items-center justify-center p-4 sm:h-[470px] sm:p-6",children:c||m.code?(0,i.jsx)("pre",{tabIndex:0,"aria-label":f,className:"h-full w-full overflow-auto rounded-xl bg-slate-950 p-5 text-xs leading-6 text-sky-100 sm:text-sm ".concat(p),children:(0,i.jsx)("code",{children:c?JSON.stringify(m.json,null,2):null==(t=m.code)?void 0:t.content})}):m.image?(0,i.jsxs)("button",{type:"button",onClick:()=>{var e;return null==(e=h.current)?void 0:e.showModal()},"aria-label":"Enlarge ".concat(m.label," report screenshot"),className:"group relative flex h-full w-full items-center justify-center rounded-xl ".concat(p),children:[(0,i.jsx)(a.default,{src:"/showcase/test2/".concat(m.image.name,".webp"),alt:m.image.alt,width:m.image.width,height:m.image.height,unoptimized:!0,className:"max-h-full w-auto max-w-full rounded-lg border border-slate-200 bg-white object-contain shadow-sm"},m.image.name),(0,i.jsx)("span",{className:"absolute bottom-2 right-2 rounded-full border border-slate-200 bg-white px-3 py-2 text-xs font-semibold text-slate-700 shadow-sm group-hover:border-sky-400",children:"Enlarge â"})]}):null})]})]})]}),(0,i.jsx)("p",{className:"mt-4 text-xs leading-5 text-slate-500",children:"Screenshots and report JSON are from one completed test scan. Interface examples are labeled. Findings describe retained observations, not a determination of compliance."})]}),(0,i.jsxs)("dialog",{ref:h,"aria-labelledby":"showcase-image-title",className:"m-auto max-h-[94vh] w-[calc(100%-2rem)] max-w-6xl overflow-auto rounded-2xl border border-slate-200 bg-white p-4 shadow-2xl backdrop:bg-slate-950/70 sm:p-6",children:[(0,i.jsxs)("div",{className:"mb-4 flex items-center justify-between gap-4",children:[(0,i.jsxs)("h3",{id:"showcase-image-title",className:"font-semibold text-slate-900",children:[m.label," \xb7 actual test2 report"]}),(0,i.jsx)("button",{type:"button",autoFocus:!0,onClick:()=>{var e;return null==(e=h.current)?void 0:e.close()},"aria-label":"Close enlarged screenshot",className:"min-h-11 rounded-lg border border-slate-200 px-4 text-sm font-medium ".concat(p),children:"Close \xd7"})]}),m.image&&(0,i.jsx)(a.default,{src:"/showcase/test2/".concat(m.image.name,".webp"),alt:m.image.alt,width:m.image.width,height:m.image.height,unoptimized:!0,className:"mx-auto h-auto max-h-[75vh] w-auto max-w-full object-contain"}),(0,i.jsx)("p",{className:"mt-4 text-xs text-slate-500",children:"28 Sep 2026 \xb7 California \xb7 Scan d96df06d-3e94-4896-8346-1a026d68e5af"})]})]})}},81221:(e,t,s)=>{Promise.resolve().then(s.bind(s,88003)),Promise.resolve().then(s.bind(s,11499)),Promise.resolve().then(s.bind(s,9386)),Promise.resolve().then(s.bind(s,76540)),Promise.resolve().then(s.t.bind(s,82097,23)),Promise.resolve().then(s.bind(s,34063)),Promise.resolve().then(s.t.bind(s,19664,23)),Promise.resolve().then(s.t.bind(s,10489,23))},82097:e=>{e.exports={visual:"scanner-solution-animation_visual__DBSiW",waterfallBar:"scanner-solution-animation_waterfallBar__wR6gr",growWaterfallBar:"scanner-solution-animation_growWaterfallBar__s_XYs",waterfallBadge:"scanner-solution-animation_waterfallBadge__Ja6Ye",revealWaterfallBadge:"scanner-solution-animation_revealWaterfallBadge__JJlnq",delay1:"scanner-solution-animation_delay1__5f7zj",delay2:"scanner-solution-animation_delay2__zp2pA",delay3:"scanner-solution-animation_delay3___lVBV",delay4:"scanner-solution-animation_delay4__w7hco",delay5:"scanner-solution-animation_delay5__Dg9Dz",delay6:"scanner-solution-animation_delay6__yM9y0",delay7:"scanner-solution-animation_delay7__jC5bZ",radarSweep:"scanner-solution-animation_radarSweep__xf5Wy",rotateRadarSweep:"scanner-solution-animation_rotateRadarSweep__hZkOK",privacySurface:"scanner-solution-animation_privacySurface__NocGZ",glowPrivacySurface:"scanner-solution-animation_glowPrivacySurface__tiIee",cookieSurface:"scanner-solution-animation_cookieSurface__c8SJ6",glowCookieSurface:"scanner-solution-animation_glowCookieSurface__qbWZ9",termsSurface:"scanner-solution-animation_termsSurface__crEZu",glowTermsSurface:"scanner-solution-animation_glowTermsSurface__D9T15",sonarPing:"scanner-solution-animation_sonarPing__2ulT_",ping1:"scanner-solution-animation_ping1__xkMPE",ping1b:"scanner-solution-animation_ping1b__e22Uf",ping2:"scanner-solution-animation_ping2__OexvS",ping2b:"scanner-solution-animation_ping2b__2P87r",ping3:"scanner-solution-animation_ping3__9Tz1n",ping3b:"scanner-solution-animation_ping3b__ONbAG"}}},e=>{e.O(0,[4292,9664,9289,489,4737,1499,8003,1149,5271,6478,9386,587,18,7358],()=>e(e.s=81221)),_N_E=e.O()}]);
Line numbers count LF bytes from the start of the resource, as the search results do. Vendor segments are library code the classifier recognised; they are stored but not indexed. Bytes are shown as Latin1 characters, one per byte.