# Crow Tech Website Analyser Beta
Crow Tech QA Intelligence
Report: Crow Tech Deep Website Audit Report
URL: https://www.berkshirehathaway.com/
Final URL: https://www.berkshirehathaway.com/
Mode: Deep audit
Analysis completed: 2026-07-09T15:15:31.494Z
Artifacts expire: Recorded with terminal artifact completion (7 days after terminal artifact completion).
## Cover metrics
- Status/content checks: 42 checked (phase-local; not a whole-site total)
- Browser renders: 1 rendered (prioritized public-page sample; not a whole-site denominator)
- Internal links checked: 17 / 17 known extracted (all known extracted destinations were checked; no site-wide link total is claimed)
- Grouped findings: 2
## Executive summary
The analyser 0 same-origin sitemap URL candidate(s) were observed in fetched sitemap files and 0 were admitted. 0 sitemap URL(s) admitted from fetched sitemap evidence were checked for liveness/status, rendered 1 page(s), 17 of 17 same-origin link destination(s) extracted from fetched HTML pages were checked; no whole-site link total is claimed, checked 1 public asset reference(s), document checks: fetched 1, valid 1, invalid 0, inconclusive 0, 22 attempted; 0 confirmed exposure signal(s); 0 no exposure signal; 22 inconclusive operational probe(s), and produced 2 grouped finding(s).
Verdict: Usable, with fixes recommended. The site is reachable, but the report includes concrete improvements for security, reliability, copy, or developer hygiene.
Client findings are deterministic. AI-generated summaries, priorities, business observations, and actions are intentionally excluded until evidence mapping is independently validated.
## Ranked deterministic findings
These are the client-facing decisions for the bounded evidence retained in this run. Operational limits and raw inventories are in the appendix.
### D-001. [MEDIUM] Missing strict-transport-security header
Category: Deterministic QA
Status: Observed in this run
Affected scope: Affected retained URL: https://www.berkshirehathaway.com/
Evidence: https://www.berkshirehathaway.com/ did not send strict-transport-security.
Examples:
| Target | Status | Evidence |
| --- | --- | --- |
| [https://www.berkshirehathaway.com/](https://www.berkshirehathaway.com/) | Observed | See finding evidence. |
Recommended action:
- Add the header at the edge/web server after validating compatibility.
Acceptance / retest: Retest the deterministic check after the recommended change and confirm the retained evidence no longer reproduces.
### D-002. [MEDIUM] Site sample lacks contact basics
Category: Deterministic QA
Status: Observed in this run
Affected scope: Affected retained URL: https://www.berkshirehathaway.com/
Evidence: No mailto/tel link, contact route, or visible contact/email/phone signal was found across 1 crawled HTML page(s).
Examples:
| Target | Status | Evidence |
| --- | --- | --- |
| [https://www.berkshirehathaway.com/](https://www.berkshirehathaway.com/) | Observed | See finding evidence. |
Recommended action:
- Expose a clear contact route or direct public contact detail so users can reach the operator.
Acceptance / retest: Retest the deterministic check after the recommended change and confirm the retained evidence no longer reproduces.
## Methodology: 5-Pass Loop
1. Discovery pass: robots.txt, standard sitemap paths, sitemap indexes, and bounded sitemap URL categorisation.
2. Breadth status pass: public sitemap/core URLs checked for status, final URL, and content type.
3. Browser render pass: prioritized public pages rendered with console, runtime, network, and screenshot evidence.
4. Content verification pass: internal anchors, public assets, and PDF/DOCX links validated with source page and link text.
5. Targeted report pass: repeated failures grouped into client-ready findings with impact and fixes.
## What this run found
No prior baseline was supplied, so every grouped finding is marked as observed in this run.
## Appendix: Coverage and evidence detail
### Coverage and sampling
This is a bounded public website QA run. It does not log in, submit forms, crawl private URLs, port scan, or fuzz paths. Caps: 3000 sitemap discovery URLs, 3000 sitemap status checks, 64 rendered pages, 3000 links, 3000 assets, 3000 documents, 30 fixed exposure checks. Liveness coverage: 0 sitemap URL(s) admitted from fetched sitemap evidence were checked for liveness/status. Link coverage: 17 of 17 same-origin link destination(s) extracted from fetched HTML pages were checked; no whole-site link total is claimed.
Document delivery: 1 attempted; 1 transport-fetched; 1 semantically valid; 0 invalid; 0 inconclusive.
Fixed exposure probes: 22 attempted; 0 confirmed exposure signal(s); 0 no exposure signal; 22 inconclusive operational probe(s).
Browser runtime budget usage was not captured because no browser context completed.
Copy checks use a bounded sample of successful, untruncated fetched HTML pages; this historical bundle did not retain the exact copy-selection count.
1 priority-ranked browser render(s) were attempted from 1 successful, untruncated fetched HTML page(s); browser selection is not a whole-site claim.
Interaction coverage is a small representative safe probe sample, not workflow testing: across 1 rendered page(s), detected 0, eligible 0, attempted 0, succeeded 0, failed 0, and not run 0; reasons: no_detected_controls:1. Forms, selections, navigation links, and destructive actions were not exercised.
1 screenshot(s) were retained as internal evidence. User-run reports reference screenshot metadata only; screenshot bytes are non-downloadable unless an authorized design explicitly exposes them.
### Coverage ledger
Counts are phase-local. A known set is only the named retained/admitted set; it is not a claim that the whole site was discovered.
- sitemap_discovery: discovered 2; admitted 2; eligible 2; attempted 2; succeeded 0; failed 2; skipped 0; truncated 0; cap not hit. Scope: 2 sitemap file records retained in the historical evidence. Provenance: standard_sitemap_path. Reasons: fetch_failed:2 (Historical sitemap fetches failed.).
- sitemap_url_admission: discovered 0; admitted 0; eligible 0; attempted 0; succeeded 0; failed 0; skipped 0; truncated 0; cap not hit. Scope: 0 sitemap URL candidates recorded in the historical fetched sitemap evidence. Provenance: sitemap_urlset. Reasons: none.
- sitemap_status: discovered 0; admitted 0; eligible 0; attempted 0; succeeded 0; failed 0; skipped 0; truncated 0; cap not hit. Scope: 0 sitemap URLs admitted from historical fetched sitemap evidence. Provenance: sitemap_status_queue. Reasons: none.
- page_fetch: discovered 1; admitted 1; eligible 1; attempted 1; succeeded 1; failed 0; skipped 0; truncated 0; cap not hit. Scope: 1 page fetch records retained in the historical evidence. Provenance: initial_homepage. Reasons: none.
- same_origin_link_fallback: discovered 0; admitted 0; eligible 0; attempted 0; succeeded 0; failed 0; skipped 0; truncated 0; cap not hit. Scope: Historical P0 artifacts did not retain a homepage-link fallback candidate set; no whole-site denominator is known. Provenance: initial_homepage, robots_txt. Reasons: sitemap_absent:1, robots_unavailable:1 (Historical robots.txt was not a readable policy.).
- internal_link_checks: discovered 17; admitted 17; eligible 17; attempted 17; succeeded 17; failed 0; skipped 0; truncated 0; cap not hit. Scope: 17 same-origin link destinations retained from the historical fetched homepage. Provenance: same_origin_anchor. Reasons: none.
- asset_checks: discovered 1; admitted 1; eligible 1; attempted 1; succeeded 1; failed 0; skipped 0; truncated 0; cap not hit. Scope: 1 public asset references retained in the historical evidence. Provenance: public_asset_reference. Reasons: none.
- document_checks: attempted 1; transport-fetched 1; semantically valid 1; invalid 0; inconclusive 0; skipped 0; truncated 0; cap not hit. Scope: 1 PDF/DOCX references retained in the historical evidence. Reasons: none.
- exposure_checks: discovered 22; admitted 22; eligible 22; attempted 22; succeeded 0; failed 0; skipped 22; truncated 0; cap not hit. Scope: 22 fixed exposure targets retained in the historical evidence. Provenance: fixed_exposure_list. Reasons: transport_inconclusive:22 (Historical fixed exposure probe responses do not prove absence of exposure.).
- browser_render: discovered 1; admitted 1; eligible 1; attempted 1; succeeded 1; failed 0; skipped 0; truncated 0; cap not hit. Scope: 1 browser render records retained in the historical evidence. Provenance: browser_render_queue. Reasons: none.
- browser_interactions: discovered 0; admitted 0; eligible 0; attempted 0; succeeded 0; failed 0; skipped 0; truncated 0; cap not hit. Scope: Historical P0 artifacts did not retain reconstructible interaction-control coverage; no whole-site denominator is known. Provenance: browser_interaction_detection. Reasons: none.
### Run resource accounting
Whole-run resource accounting was not retained in this historical evidence bundle.
- Historical evidence did not retain phase resource accounting.
### Document semantic validation
| Transport | Semantic outcome | Expected | Magic | Content type | Source | Target |
| --- | --- | --- | --- | --- | --- | --- |
| 200 | valid | pdf | pdf | application/pdf | [https://www.berkshirehathaway.com/](https://www.berkshirehathaway.com/) | [https://www.berkshirehathaway.com/webfraud.pdf](https://www.berkshirehathaway.com/webfraud.pdf) |
### Operational / inconclusive evidence
These bounded observations are analyser limits, transport uncertainty, or policy controls. They are not client site findings.
#### Operational evidence 1
Classification: Inconclusive operational evidence — not a client site finding
Type: Fixed exposure probe inconclusive
URL: https://www.berkshirehathaway.com/.env
Provenance: fixed_exposure_list
Detail: Historical fixed exposure probe returned HTTP 403; absence of exposure was not inferred.
#### Operational evidence 2
Classification: Inconclusive operational evidence — not a client site finding
Type: Fixed exposure probe inconclusive
URL: https://www.berkshirehathaway.com/.env.local
Provenance: fixed_exposure_list
Detail: Historical fixed exposure probe returned HTTP 404; absence of exposure was not inferred.
#### Operational evidence 3
Classification: Inconclusive operational evidence — not a client site finding
Type: Fixed exposure probe inconclusive
URL: https://www.berkshirehathaway.com/.env.production
Provenance: fixed_exposure_list
Detail: Historical fixed exposure probe returned HTTP 404; absence of exposure was not inferred.
#### Operational evidence 4
Classification: Inconclusive operational evidence — not a client site finding
Type: Fixed exposure probe inconclusive
URL: https://www.berkshirehathaway.com/.git/HEAD
Provenance: fixed_exposure_list
Detail: Historical fixed exposure probe returned HTTP 403; absence of exposure was not inferred.
#### Operational evidence 5
Classification: Inconclusive operational evidence — not a client site finding
Type: Fixed exposure probe inconclusive
URL: https://www.berkshirehathaway.com/.git/config
Provenance: fixed_exposure_list
Detail: Historical fixed exposure probe returned HTTP 403; absence of exposure was not inferred.
#### Operational evidence 6
Classification: Inconclusive operational evidence — not a client site finding
Type: Fixed exposure probe inconclusive
URL: https://www.berkshirehathaway.com/.git/index
Provenance: fixed_exposure_list
Detail: Historical fixed exposure probe returned HTTP 403; absence of exposure was not inferred.
#### Operational evidence 7
Classification: Inconclusive operational evidence — not a client site finding
Type: Fixed exposure probe inconclusive
URL: https://www.berkshirehathaway.com/main.js.map
Provenance: fixed_exposure_list
Detail: Historical fixed exposure probe returned HTTP 404; absence of exposure was not inferred.
#### Operational evidence 8
Classification: Inconclusive operational evidence — not a client site finding
Type: Fixed exposure probe inconclusive
URL: https://www.berkshirehathaway.com/app.js.map
Provenance: fixed_exposure_list
Detail: Historical fixed exposure probe returned HTTP 404; absence of exposure was not inferred.
#### Operational evidence 9
Classification: Inconclusive operational evidence — not a client site finding
Type: Fixed exposure probe inconclusive
URL: https://www.berkshirehathaway.com/bundle.js.map
Provenance: fixed_exposure_list
Detail: Historical fixed exposure probe returned HTTP 404; absence of exposure was not inferred.
#### Operational evidence 10
Classification: Inconclusive operational evidence — not a client site finding
Type: Fixed exposure probe inconclusive
URL: https://www.berkshirehathaway.com/static/js/main.js.map
Provenance: fixed_exposure_list
Detail: Historical fixed exposure probe returned HTTP 404; absence of exposure was not inferred.
#### Operational evidence 11
Classification: Inconclusive operational evidence — not a client site finding
Type: Fixed exposure probe inconclusive
URL: https://www.berkshirehathaway.com/assets/app.js.map
Provenance: fixed_exposure_list
Detail: Historical fixed exposure probe returned HTTP 404; absence of exposure was not inferred.
#### Operational evidence 12
Classification: Inconclusive operational evidence — not a client site finding
Type: Fixed exposure probe inconclusive
URL: https://www.berkshirehathaway.com/backup.zip
Provenance: fixed_exposure_list
Detail: Historical fixed exposure probe returned HTTP 404; absence of exposure was not inferred.
#### Operational evidence 13
Classification: Inconclusive operational evidence — not a client site finding
Type: Fixed exposure probe inconclusive
URL: https://www.berkshirehathaway.com/backup.tar.gz
Provenance: fixed_exposure_list
Detail: Historical fixed exposure probe returned HTTP 404; absence of exposure was not inferred.
#### Operational evidence 14
Classification: Inconclusive operational evidence — not a client site finding
Type: Fixed exposure probe inconclusive
URL: https://www.berkshirehathaway.com/site.zip
Provenance: fixed_exposure_list
Detail: Historical fixed exposure probe returned HTTP 404; absence of exposure was not inferred.
#### Operational evidence 15
Classification: Inconclusive operational evidence — not a client site finding
Type: Fixed exposure probe inconclusive
URL: https://www.berkshirehathaway.com/www.zip
Provenance: fixed_exposure_list
Detail: Historical fixed exposure probe returned HTTP 404; absence of exposure was not inferred.
#### Operational evidence 16
Classification: Inconclusive operational evidence — not a client site finding
Type: Fixed exposure probe inconclusive
URL: https://www.berkshirehathaway.com/database.sql
Provenance: fixed_exposure_list
Detail: Historical fixed exposure probe returned HTTP 404; absence of exposure was not inferred.
#### Operational evidence 17
Classification: Inconclusive operational evidence — not a client site finding
Type: Fixed exposure probe inconclusive
URL: https://www.berkshirehathaway.com/db.sql
Provenance: fixed_exposure_list
Detail: Historical fixed exposure probe returned HTTP 404; absence of exposure was not inferred.
#### Operational evidence 18
Classification: Inconclusive operational evidence — not a client site finding
Type: Fixed exposure probe inconclusive
URL: https://www.berkshirehathaway.com/dump.sql
Provenance: fixed_exposure_list
Detail: Historical fixed exposure probe returned HTTP 404; absence of exposure was not inferred.
#### Operational evidence 19
Classification: Inconclusive operational evidence — not a client site finding
Type: Fixed exposure probe inconclusive
URL: https://www.berkshirehathaway.com/config.php.bak
Provenance: fixed_exposure_list
Detail: Historical fixed exposure probe returned HTTP 403; absence of exposure was not inferred.
#### Operational evidence 20
Classification: Inconclusive operational evidence — not a client site finding
Type: Fixed exposure probe inconclusive
URL: https://www.berkshirehathaway.com/wp-config.php.bak
Provenance: fixed_exposure_list
Detail: Historical fixed exposure probe returned HTTP 403; absence of exposure was not inferred.
### Developer evidence table
No failed link, asset, or browser request rows were captured within the bounded run.
### Browser render checks
- 200 https://www.berkshirehathaway.com/ - console 1, runtime 0, failed requests 1, blocked requests 1 (analyser-policy; see operational evidence), interactions detected 0; eligible 0; attempted 0; succeeded 0; failed 0; not run 0; reasons no_detected_controls:1, screenshot screenshot-page-01.png; bounded analyser/transport constraints are operational evidence, not client site findings
### Fixed exposure checks
No fixed-list exposure checks produced high-confidence public file evidence.
### Security headers observed
- strict-transport-security: missing
- content-security-policy: upgrade-insecure-requests;
- x-frame-options: SAMEORIGIN
- referrer-policy: missing
- permissions-policy: missing
### Pages fetched
- 200 https://www.berkshirehathaway.com/ - BERKSHIRE HATHAWAY INC.