The A100 Challenge: making the internet safer, one perfect website at a time

Why a challenge?

Most security tools sell fear: a report with a hundred red flags and a subscription to keep watching them. That doesn't make your website safer, it only makes you anxious.

We believe in the opposite: reward craftsmanship. A perfect 100 on a DevOpsNL audit means every security check, every accessibility requirement, every performance benchmark and every privacy rule was passed. That's not luck. That's a web designer who knows their craft.

So we flip the risk around: instead of "your website has probably been broken", we say "we bet you can do it".

How the A100 Challenge works

You buy the Deepest audit: €19.99 for 5 credits. Each credit is one full audit of up to 50 pages, including port scans, form testing and infrastructure checks.

You walk through your site, fix what the report finds, and scan again. Every credit is another chance. Score an exact 100 within those 5 credits (your very first scan counts too) and we refund your €19.99. In full, no strings attached.

And your site joins the Hall of Fame: a public list of websites that achieved the perfect score. Only if you want to; the refund is yours either way.

• Buy the Deepest audit: €19.99, 5 credits
• Each credit = one full audit (up to 50 pages)
• Score an exact 100 within your 5 credits = full refund
• Optional: a listing on the public Hall of Fame

What has to pass?

A 100 is not a grade curve you can game. The audit tests your site across eight categories, from functional to security, and every single check must pass:

Security: no leaked API keys, no vulnerable libraries, no open redirects, no subdomain takeover risks. Email security (SPF, DKIM, DMARC) configured correctly. No unnecessary open ports on your server.

Accessibility: WCAG guidelines, keyboard navigation, contrast, semantic HTML. Performance: load times and Core Web Vitals. Privacy: cookie consent that meets GDPR. And functional: buttons that work, forms that submit, links that go somewhere.

In short: everything a visitor expects from you, and everything an attacker sees in you.

The 777 jackpot: the fastest craftsmanship of the year

Everyone who reaches the perfect 100 gets their money back. But there is one extra prize: whoever is fastest at the end of the calendar year, from the very first scan to the perfect 100, wins an additional €777 on top of the refund.

Why €777? Three sevens is the jackpot on a slot machine: the symbol of the biggest win the machine knows. Except this is no gamble. Every minute you shave off is a minute you earned yourself: by building sharper, fixing faster and testing better than the rest.

The clock starts at your first audit and stops at your perfect 100. Score a 100 on your very first scan? Your time is nearly impossible to beat.

• Fastest from first scan to perfect 100 this calendar year wins €777
• The current standings are on the Hall of Fame page
• Paid out after the year ends, on top of your regular refund

Who is on the Hall of Fame today?

The list is young and might be missing your name. See the current standings, including the jackpot leader, on the Hall of Fame page.

Frequently asked questions

What if my first scan already scores 100?

Then you get your money back immediately. There is no rule requiring a lower score first: a perfect first scan counts fully.

What if I run out of credits without a 100?

You still have a complete security report with concrete findings and evidence for every issue. Credits don't expire; you can buy new ones and continue where you left off.

How do I get my refund?

As soon as you score 100, we register it automatically. The refund is processed manually and usually reaches your account within a few days.

Do I have to be on the Hall of Fame?

No. The listing is entirely optional and requires your explicit consent. You get the refund either way.

Can I see the criteria?

Yes. Every check in your report cites the standard it is based on, such as OWASP, WCAG or Core Web Vitals, with evidence and a help link per finding.