Skip to main content

Detectors Overview

Detectors are the scan engines that power Ariftly. Each detector is a focused, purpose-built module that analyzes a specific risk domain.

Available detectors

DetectorIdentifierWhat it scansBest for
Accessibility ScanaccessibilityWCAG, ARIA, keyboard navigation, color contrastWeb apps, compliance
Security ScansecurityVulnerabilities, secrets, misconfigurations, dependenciesAll applications
AI Readiness Scanai_readinessAI governance, data posture, model riskAI-powered products

Running a specific detector

Pass the detectors array in your scan request:

# Run only the accessibility detector
curl -X POST https://api.ariftly.io/v1/projects/{project_id}/scans \
-H "Authorization: Bearer $ARIFTLY_API_KEY" \
-d '{"detectors": ["accessibility"]}'

# Run all detectors
curl -X POST https://api.ariftly.io/v1/projects/{project_id}/scans \
-H "Authorization: Bearer $ARIFTLY_API_KEY" \
-d '{"detectors": ["accessibility", "security", "ai_readiness"]}'

Detector results schema

Every detector produces findings in the same normalized schema:

{
"detector": "accessibility",
"status": "completed",
"risk_score": 42,
"risk_level": "low",
"summary": {
"total": 8,
"critical": 0,
"high": 1,
"medium": 3,
"low": 4,
"info": 0
},
"findings": [
{
"id": "finding_001",
"severity": "high",
"rule_id": "wcag-1-4-3",
"title": "Insufficient color contrast",
"description": "...",
"location": { ... },
"remediation": "..."
}
]
}

Detector independence

Each detector:

  • Runs in its own isolated environment
  • Has no dependency on other detectors
  • Can succeed or fail independently
  • Produces its own risk score

If one detector fails (e.g., the target URL is unreachable for the accessibility scan), the other detectors continue running and the overall scan can still complete.

Upcoming detectors

The Ariftly roadmap includes additional detectors. As new detectors are added, they integrate seamlessly into existing projects and the API without breaking changes.

Stay updated at ariftly.io/roadmap.