Body text size
type:Smallest body text is 11px (base ~10px). below the ~16px readable floor.
FixKeep body copy ≥15-16px; reserve sub-13px for fine print only.
01
Homepage / Lander
▼ thinnest
2 tactics
$10500 +1 more
saas · Aug 15, 2026
nebusec.ai
60/100 Partial
Scores higher than 66% of 1,391 multi-step funnels we have measured. Among the 1,074 saas funnels in that group, higher than 58%.
How this was measured
Measured by Roentgen 1.25.1 on 2026-08-15. A capture is read once and its measurements freeze there, so the stamp says which ruleset read this one.
Coverage is detection coverage, not a verdict — it counts the conversion tactics we could prove are present, out of the 11 that apply to a saas funnel. Per device: desktop 60 · mobile 60.
Walk 45 links on the entry page, 42 walkable. 1 matched a funnel step; we captured 2 pages in all, this one included.
What we recorded
Progress
5 scans
this funnel’s coverage score across measured re-scans
measuredextracted directly from the live page. a fact, not an opinion
Unchanged across 5 scans
Same 5 conversion tactics detected since 2026-07-30.
- 5 tactics 2026-07-30
- 5 tactics 2026-08-02
- 5 tactics 2026-08-03
- 5 tactics 2026-08-05
- 5 tactics 2026-08-15
The funnel, frame by frame
2 steps walkedIn their own words
25 quotedthe entry page’s own title, headline, buttons and prices — quoted, never paraphrased
measuredextracted directly from the live page. a fact, not an opinion- Page title
Nebula Security · AI security research lab
- Meta description
Find more exploitable vulnerabilities over lunch without relying on Mythos.
- Headline
Attackers already have AI. Get VEGA now.
- Section headings
Recent publications.
IonStack part III: Rooting Android 17 with GhostLock
IonStack Part I: Unsound IonBanana Peel in Ion Compiler, Slipping Through Firefox's SpiderMonkey JIT
IonStack part II: GhostLock, a stack-UAF that has existed in ALL Linux distributions for 15 years
Longinus: 2 Boundaries in One Bug, Piercing Chrome’s Renderer and V8 Sandbox with a Single Vulnerability, CVE-2026-6307
How an Omitted Write Barrier in V8 Turns Into RCE in Chrome: CVE-2026-5865
From a Netfilter Bug to kernelCTF: Exploiting CVE-2026-23274 in the Linux Kernel and winning a $10500 Bounty
The vulnerability list.
- Buttons and links
Products
Research
Toggle theme
+ Your project ★
Linux Kernel 66
Chrome 8
Firefox 1
nginx 2
curl 1
Windows 1
+2 more, not shown- Prices on the page
$10500
$0
Sections
3 identified
structural bands identified on this funnel, cropped from its own capture
measuredextracted directly from the live page. a fact, not an opinion
What we found
5 tacticsconversion tactics we could prove are present, with the on-page text that evidences each
measuredextracted directly from the live page. a fact, not an opinionOffer clarity1 of 1
Makes the pricing ladder explicit
free, $0.00/mo
Action path3 of 4
Puts proof in the first viewport
+ Your project ★
Offers a free trial or free tier
Start free
Offers a demo or docs entry point
Book a demo
Trust & proof1 of 2
Shows customer logos or a trusted-by claim
backed by
Friction reduction1 of 2
Offers a free trial or free tier
also shown under Action path
What we didn’t find
6 of 11 applicableapplicable tactics we checked for and did not see on any step we reached
measuredextracted directly from the live page. a fact, not an opinionWhat we didn’t see6 of 11 applicable
FAQ / objection handling
1,302 of the 1,968 funnels we checked
Press / "as seen in"
508 of the 1,960 funnels we checked
Lead-capture form
342 of the 1,393 funnels we checked
Us-vs-them comparison
332 of the 1,968 funnels we checked
Usage / adoption proof
237 of the 1,539 funnels we checked
Scarcity / urgency copy
101 of the 1,960 funnels we checked
Absence is a measurement, not a recommendation: we do not know why a tactic is missing, whether it belongs here, or whether adding it would change anything. Where a walk stopped early, a tactic living deeper would also read as not detected.
How well it’s built
13 run · 6 flaggedcontrast, mobile, typography, accessibility, weight — each with what would fix it
measuredextracted directly from the live page. a fact, not an opinion6 of 13 measured checks need work
Text contrast (WCAG AA)
contrast:87% of measurable text passes WCAG AA. 4+ runs fail.
worst: “Select...” at 2.54:1 (14px, #9ca3b0 on #ffffff). needs 4.5:1
FixRaise text/background contrast to ≥4.5:1 (≥3:1 for large text), especially on CTAs and body copy.
Named controls
a11y:1 button/link has no accessible name (icon-only, no aria-label).
FixAdd aria-label to icon-only buttons and links.
Render-blocking resources
weight:8 stylesheets/scripts in <head> block first paint.
FixDefer non-critical JS (defer/async) and inline only critical CSS.
Oversized images
weight:8 images are shipped at more than 2x the width shown.
“742441a7-d4a5-4f2e-9efa-62013acffa2e.png” is 1500px wide, displayed at 280px
FixServe responsive sizes (srcset/sizes) matching the rendered width.
Tap-target size (mobile)
mobile:48 of 116 interactive targets are under 44×44px on mobile.
smallest: “(unnamed)” at 24×20px
FixGive tappable controls a ≥44×44px hit area. the touch minimum.
Worth knowing4
Skip link
No same-page “skip to content” link was found. Keyboard users tab through the whole nav on every page.
FixAdd a first-in-DOM <a href="#main"> that is visible on focus.
a11y:Label in name
1 control has an aria-label that does not contain its visible text, so voice-control users cannot activate it by saying what they see.
FixMake the accessible name start with the visible label text.
a11y:Page weight
At least 3.4 MB across 116 measurable resources. 7 cross-origin resources did not expose a size, so the real total is higher.
FixCompress and lazy-load below-the-fold media; drop unused third-party scripts.
weight:Landmark regions
No <footer> landmark. screen-reader users cannot jump between regions.
FixWrap the page in <header>, <main> and <footer> (or matching ARIA roles).
structure:Clear3
Brand kit
5 colour roles
palette by on-page usage · type rendered live
measuredextracted directly from the live page. a fact, not an opinionfull palette ordered by on-page usage %
primary#efeae0
accent#efeae0
bg#efeae0
surface#e5e0d5
text#5a5f69
See the roles applied
accent
Body copy in their text role, on a surface card.
the roles, doing their job
The quick brown fox76px
Jumps over the lazy dog48px
A subheading in their voice22px
Body copy set at their measured paragraph size. This is how their product reads to a first-time visitor. same family, same scale, same weight.
- List item one, at body scale
- List item two
- List item three
Type scale, weights & families
SIZE SCALE
10pxAa
11pxAa
12pxAa
13pxAa
14pxAa
15pxAa
16pxAa
17pxAa
21pxAa
22pxAa
48pxAa
76pxAa
WEIGHTS
Aa400
Aa500
Aa550
Aa600
Aa700
Aa800
FAMILIES
Geist · Geist Mono
rendered in their own type system · webfont not loaded. system fallback if uninstalled
Measured, found none
2 of 10 layerslayers we ran on this funnel that came back empty
measuredextracted directly from the live page. a fact, not an opinionElements — the atomic pieces — price anchors, ratings, guarantees — with their verbatim on-page text
Playbook match — which funnel play this page runs — measured, evidence-quoted
We ran these passes on the pages we captured and found nothing to show. That is a measurement of this funnel, not a recommendation — and it is a different statement from a layer we never ran, which does not appear here at all.
X-ray a funnel
