XFix reads publicly published pages only. It requests no credentials and retains no entity data. Traffic is encrypted over HTTPS.
For agencies and vendors

Platforms Code measurement for the firms that build Saudi government platforms

A UX or engineering team working with a government entity needs a number rather than an impression: where the platform stands against the Platforms Code today, and how far that is from where it must be. XFix measures that against 56 criteria, 39 of which issue a verdict today, and shows the observed value, the expected value and the selector each was found in. The measurement rules come from field work with government entities, not from reading the document. And the measurement is independent of you and of your client, which is what makes it citable.

Where measurement enters the project cycle

  • 1Before the pitchA scan of the entity’s current platform turns “we will improve your compliance” into a number you can put in a proposal, with the evidence behind it.
  • 2At the start of the workA baseline you and the client agree on before anything is rebuilt, so the improvement at the end is measured rather than asserted.
  • 3During deliveryRe-scan as pages ship. A violation typically recurs across dozens of pages, so catching it once early is worth more than finding it in review.
  • 4At handoverA third-party measurement the client’s committee reads differently from the implementer’s own assessment, however accurate that assessment is.

Reports under your brand

Measurement reports are issued under your agency’s identity: your logo, your colours, the beneficiary entity’s name, with one line stating that the measurement was carried out independently by XFix. That line is part of the report’s value rather than a cost on it — an implementer’s assessment of its own work is read with reserve however accurate it is, and what gives the number weight in front of a client committee is that a third party produced it.

Remediation outputs — the HTML files and the technical document — are delivered with no mark of ours at all, because they are implementation work inside your project.

You do not have to implement every finding yourself

Remediation is available to you as it is to entities. You buy it inside your own scope of work: we rebuild the scanned pages with every non-conforming finding resolved and deliver them as complete, responsive HTML under the entity’s identity, with a technical document explaining each change and the selector it applies to. You hand it to your client inside your project.

The point is that you sell the outcome without tying your team up for weeks correcting spacing and colour values — repetitive work that does not differentiate your offer from anyone else’s.

We do not contact your client and do not contract with them except through you. You hold the relationship in every case.

Request a remediation quote

What may be scanned, and when permission is needed

XFix does not scan on an entity’s behalf and does not represent it. Responsibility for having permission to scan a given platform rests with whoever submits the URL.

  • A publicly published pageTechnically scannable. Obtaining permission remains your responsibility.
  • An existing client’s platformMake the scan a line item in the agreed scope of work.
  • A platform you are competing forThe report must not be presented as an accredited assessment, and must not be attributed to the entity.
  • Behind a sign-in, or on an internal networkOutside the scope of automated scanning. A specialist-led assisted scan with your team is available for these.

Frequently asked questions

Can we present the report to our client as our own work?
The report is issued under your agency’s identity — logo, colours, the entity’s name — with one line stating that the measurement was carried out independently by XFix. That line is part of the report’s value rather than a cost on it: an implementer’s assessment of its own work is read with reserve however accurate it is, and what gives the number weight in front of a client committee is that a third party produced it.
Do you contact our client directly?
No. We do not contact your client and do not contract with them except through you. You hold the relationship in every case.
Do we have to implement every finding ourselves?
No. Remediation is available to you as it is to entities: we rebuild the scanned pages with each non-conforming finding resolved and hand them over as complete, responsive HTML under the entity’s identity, with a technical document explaining every change and its selector. You deliver it inside your own project.
Is the estimate the same as the Authority’s assessment?
No, and we never present it as one. The Authority assesses with a different methodology, and its assessment is the reference. What this is for is seeing and closing the gap before that assessment happens.
How many scans does an account include?
100 per month. Each scan of the same platform is a separate record with its own id and date, so a before-and-after is a comparison of two stored measurements rather than a claim.

The measurement itself is set out on the methodology page, and its limits on what is measured.

The limits of this tool

XFix is an independent commercial tool. It is not part of the Digital Government Authority, is not endorsed by it, and does not act on its behalf. What it produces is an indicative estimate expressed as a range. It is not the Platforms Code Application Certificate and not a declaration of conformity. The certificate is issued by the Authority alone, and the Authority’s assessment remains the reference.

Its usefulness is in showing the gap early and with evidence. It does not stand in for the body that decides.

Platforms Code compliance measurement for agencies and vendors | XFix