1. About Octopus Scanner
Is Octopus Scanner stable?
Yes. Octopus Scanner is built for reliable, everyday use. It is still in active development, because the web never stops changing and the scanner may still meet a framework or content structure it hasn't seen before.
Is Octopus Scanner feature complete?
Largely, yes. All core features are implemented, and the app is now in long-term maintenance, kept current through component updates and in step with the latest axe-core rules.
Can I use Octopus Scanner for commercial client audits?
Yes. You can use it to audit websites for clients, commercial projects and internal company applications, with no licensing fees or restrictions. See the Terms and Conditions for the full terms of use.
Is Octopus Scanner open source?
Not at present. Keeping the source closed protects some of the techniques the scanner relies on and lets the project be maintained at a sustainable pace. If the project is ever discontinued, the intention is to release it as open source.
2. Privacy and security
Does Octopus Scanner collect my data?
No. Scanning, analysis and reporting all take place on your own device, and there is no tracking, remote data collection or telemetry. If you turn on the optional Local LLM Review, page details go only to the LLM server you run on your own computer or local network. See Data, Privacy & Security for full details.
Is Octopus Scanner secure?
It is designed to be, with security built in throughout, but no software can remove every risk. Scan only websites you trust, keep the app and your operating system up to date, and consider a virtual machine for higher-risk work. See Security for the measures in place.
Is this the same Octopus Scanner as the 2020 malware?
No. "Octopus Scanner" was also the name given by security researchers in 2020 to malware that spread through open-source code projects. That malware has no connection to this app, its developer or this website, and only shares the name. This Octopus Scanner is a website accessibility checker. Download it only from OctopusScanner.com, and check the file's SHA-256 hash against the one on the download page, as the Security Warnings Guide explains.
Why does my computer warn me when I open Octopus Scanner?
Octopus Scanner isn't signed with a verified developer certificate, so Microsoft Defender SmartScreen on Windows and Gatekeeper on macOS warn that its publisher hasn't been verified. The Security Warnings Guide explains why, how to verify the file and how to open it.
3. Reports
Does a report with no issues mean my site is accessible?
No. A clean report means the automated rules found nothing, not that the site is accessible or compliant. See Scope of Automated Testing for what a scan can and can't establish, and Accessibility Law: EU and UK for what the European Accessibility Act and UK law ask for.
Can I share a report with someone who doesn't have Octopus Scanner?
Yes. A report is a single HTML file that opens in any browser, offline, except on very large scans, which keep their screenshots in a folder beside it. Report Anatomy explains how to save a read-only copy to share.
Can I see a report before installing?
Yes. Download the Sample Report, made from a real scan of a demo online shop, and open it in your browser.
Why are some pages missing from my report?
The scanner skips some pages it finds, for example because robots.txt disallows them, they match an exclusion pattern, they aren't HTML pages or Smart Crawl treats them as near-duplicates. Every skipped page is listed in the report's Skipped Pages section with its reason. With Parallel Processing, pages beyond Max Crawl Depth are left out without being listed. Messages and Skipped Pages explains each reason and how to include the page.
What's in the CSV and JSON files?
The CSV lists one issue instance per row, ready for sorting and filtering in a spreadsheet, and every HTML report comes with one. The JSON file holds the scan results in a structured form for other tools. Report File Formats describes the columns, fields and file names.
What should I do after a scan?
Fix Critical and Serious issues first, review any Needs Review items, then check by hand what automation can't. After Your Scan walks through each step.
4. Updates and downloads
How does Octopus Scanner stay up to date?
Every month, inside the app, through updates to the components it runs on:
- npm dependencies and the Node.js runtime: offered once they have been public for 14 days, by default. Dependency updates are also checked for known malware.
- The axe-core engine: offered as soon as a new version is released, so new accessibility rules reach you straight away.
Every update is verified before it is installed, and you can revert at any time. A new version of Octopus Scanner itself is only released to fix a security issue or bug, or add a feature, when the monthly updates can't. How Octopus Scanner stays up to date explains the details, and the Release Notes list what has changed.
Where can I download Octopus Scanner?
Only from the Download page on this website, which publishes a SHA-256 hash beside each file so you can confirm the download is genuine. Older release notes remain on the legacy itch.io devlog.
What do I need to run it?
Windows 11 (64-bit), or a Mac with Apple silicon running macOS 14 (Sonoma) or later, with Google Chrome installed. 16 GB of RAM is recommended but not required. The Install Guide lists the full requirements for each platform.
5. Getting help
Something isn't working. Where do I start?
The Troubleshooting Guide covers common problems and where to find the logs. If that doesn't help, use Report Bug in the scanning interface to send a pre-filled email.
6. The project
Can Octopus Scanner use AI?
Only if you choose to. Local LLM Review is an optional feature, off by default, that asks a model you run on your own computer or local network for a second opinion on findings and for suggestions axe-core can't make. Cloud AI providers aren't accepted, and its suggestions aren't confirmed issues. See Local LLM Review.
Was an LLM used to develop Octopus Scanner?
Yes, as an aid. LLMs have helped with writing and reviewing code and documentation, proofreading, checking facts and as a sounding board for privacy, security and programming decisions. Recent versions have also been checked for bugs with my own local LLM. As the developer, I'm dyslexic and find these tools valuable. Every change is reviewed and tested by me before it is released.
The app itself uses no AI unless you turn on the optional Local LLM Review, which works only with a model you run on your own computer or local network.
Does Octopus Scanner include advertising, sponsorship or paid content?
No. I created Octopus Scanner to support my own work and others in the accessibility field, and I don't accept resellers, advertising, paid content or marketing arrangements. It will remain ad-free, sponsor-free and free to use, indefinitely. If you would like to support Octopus Scanner, feel free to get in touch.
Do you accept feature requests?
Yes, and they are always welcome. I can't guarantee every request will make it in, or that I'll agree it's a good fit, but I read and consider each one. Email your idea to support@octopusscanner.com.
Get in touch at support@octopusscanner.com. Bug reports and feature requests are always welcome.
Was this page helpful? Email your feedback about Common Questions.