What does XFix actually measure?

It reads the applied values from a platform's public pages — colour, spacing, typography, component properties, page structure — and compares them with the Platforms Code's approved values. 48 of the 56 criteria are classified by the benchmark as machine-measurable.

Why is the result a range and not a score?

Because the measurement is partly heuristic, and a single number would present a partial measurement as a settled verdict. The band width is derived from the confidence of the individual findings. A range also cannot be screenshotted and passed off as a compliance seal.

Is XFix affiliated with the Digital Government Authority?

No. XFix is an independent commercial tool. It is not part of the Authority, not endorsed by it, and does not act on its behalf. It does not issue the Platforms Code Application Certificate; only the Authority does.

How many pages does a scan cover?

A scan covers up to 8 pages, captured at three viewport widths and chosen to cover the page types the Code’s templates govern. A full-platform crawl is possible under an extended scope, but a sample is enough to surface the repeating patterns: one violation typically recurs across dozens of pages.

Does the scanner interact with the platform?

No. It parses and obeys robots.txt, requests roughly one page per second, reads public pages only, never enters authenticated areas, and never submits a form. The egress IP is static, documented, and recorded in every scan's manifest.

Can an agency scan a client’s platform?

Yes. XFix never acts on behalf of the entity and does not represent it, so responsibility for having permission to scan a given platform rests with whoever submits the URL.

Independent · indicative estimate

Measure your platform against the Platforms Code before the official assessment

XFix scans your platform’s published pages and measures them against 48 of the 56 criteria of the Platforms Code, Saudi Arabia’s unified design system, then issues an evidence-backed estimate as a range — with the observed value, the expected value and the location of every finding. All 56 criteria are shown, including the ones automation cannot reach.

A result in 1 to 3 minutesup to 8 pages, at 3 screen sizesShareable, printable report · a scan needs an account

The measurement rules come from field work on Platforms Code compliance with government entities, not from reading the document alone.

What a scan measures

The Platforms Code is a measurable specification, not a style guide. Its 56 criteria resolve into 127 checkpoints, and the checkpoint is the operative unit: a criterion reaches full application only when every one of its checkpoints passes, and partial application the moment one does not.

48 of 56criteria the benchmark classifies as machine-measurable
39 criteriathe engine implements a rule for today
3 criterialanguage criteria a model judges, at capped confidence
5 criterianeed human judgement and are never scored automatically
65 + 33 checkpoints65 measured from the page; 33 need interaction, which crawl ethics forbid

The full index of all 56 criteria · What the Platforms Code is

How a scan works

Scope check first. Is the platform permanent, externally facing and public? If not, the scan stops — no score, no percentage. A number attached to a platform the Code does not govern is worse than no answer.
Crawl. Up to 8 pages, chosen to cover the page types the Code’s templates govern, captured at three viewport widths.
Measure. Applied colour, spacing, typography and component properties are read from the rendered page and compared with the Code’s values.
Report. Every finding carries a status, a confidence, its evidence and a remediation link. The band width of the final range comes from those confidences.

One finding is one (property, value) pair with a usage count, never one per element. Measured on a real university platform, 42 off-scale spacing values appeared across 581 usages: per element that reads as 581 catastrophic violations; per declaration it is 42 CSS rules to fix — a morning’s work, and actionable.

Crawl conduct

These are government platforms, and the crawl is written accordingly. robots.txt is parsed and obeyed. Requests are serialised at roughly one per second. Only public pages are read, authenticated areas are never entered, and no form is ever submitted. The egress IP is static, documented, and recorded in every scan’s manifest, so an entity that sees the traffic can identify it.

The scanner’s address, for allowlisting: 169.58.195.139/32

For agencies and vendors

An agency delivering to a Saudi government entity needs a number rather than an impression: where the platform stands against the Code today, and how far that is from where it must be. The measurement is independent of both the agency and its client, which is what makes it citable at all.

One distinction is worth understanding before reading a report. A component that matches the library visually while carrying none of the library’s markers has been rebuilt by hand — which means future library updates will never reach it. That is a different finding from “it looks wrong”, and it caps a criterion at partial application.

An account is limited to 100 scans per month.

Frequently asked questions

What does XFix actually measure?: It reads the applied values from a platform's public pages — colour, spacing, typography, component properties, page structure — and compares them with the Platforms Code's approved values. 48 of the 56 criteria are classified by the benchmark as machine-measurable.
Why is the result a range and not a score?: Because the measurement is partly heuristic, and a single number would present a partial measurement as a settled verdict. The band width is derived from the confidence of the individual findings. A range also cannot be screenshotted and passed off as a compliance seal.
Is XFix affiliated with the Digital Government Authority?: No. XFix is an independent commercial tool. It is not part of the Authority, not endorsed by it, and does not act on its behalf. It does not issue the Platforms Code Application Certificate; only the Authority does.
How many pages does a scan cover?: A scan covers up to 8 pages, captured at three viewport widths and chosen to cover the page types the Code’s templates govern. A full-platform crawl is possible under an extended scope, but a sample is enough to surface the repeating patterns: one violation typically recurs across dozens of pages.
Does the scanner interact with the platform?: No. It parses and obeys robots.txt, requests roughly one page per second, reads public pages only, never enters authenticated areas, and never submits a form. The egress IP is static, documented, and recorded in every scan's manifest.
Can an agency scan a client’s platform?: Yes. XFix never acts on behalf of the entity and does not represent it, so responsibility for having permission to scan a given platform rests with whoever submits the URL.

Questions about the Platforms Code itself, rather than about this tool, are answered on the Platforms Code guide.

The limits of this tool

XFix is an independent commercial tool. It is not part of the Digital Government Authority, is not endorsed by it, and does not act on its behalf. What it produces is an indicative estimate expressed as a range. It is not the Platforms Code Application Certificate and not a declaration of conformity. The certificate is issued by the Authority alone, and the Authority’s assessment remains the reference.