# Tityra public access

The website, Markdown resources and GET /api/site.json require no account or credentials. No OAuth or agent registration service is provided. Public discovery resources are read-only and allow no audit execution or payment.

## Website audit request form

Use the website audit links to open the request form with JavaScript, submit your request through [Tityra](https://app.tityra.com/), or [email info@tityra.com](mailto:info@tityra.com) with your chosen package, website URL and proposed scope. The website form submits JSON to POST /api/audit-requests. This endpoint accepts only AX Audit requests, not general enquiries or unrestricted agent submissions. It requires an allowed Origin, a version-4 UUID submissionId and a valid Cloudflare Turnstile token for the same hostname and action `audit`. There is no bearer token or API key for callers, and this endpoint does not allow arbitrary cross-origin submissions.

Audit requests require type `mx-audit`, a company, a website URL and scope, an audit package and your relationship to the website. The authorisation declaration is required, is unchecked by default and does not itself establish authority. General enquiries can be sent by [email](mailto:info@tityra.com).

<!-- tityra-content:agreement:start -->
The website form requires the boolean `termsAccepted` to be `true`. The agreement checkbox is unchecked by default; missing or false values are rejected. Its statement is:

> I agree to the Terms and Conditions and acknowledge the Privacy Policy.

[Terms and Conditions](https://tityra.com/terms) (version 2026-10-25) · [Privacy Policy](https://tityra.com/privacy).

The submit button is “Request audit”.
<!-- tityra-content:agreement:end -->

Submit your audit request through the website form, [Tityra](https://app.tityra.com/), or [email info@tityra.com](mailto:info@tityra.com). Request progress, report review and report access are managed in Tityra. Do not automate or bypass verification. See [API documentation](/api-docs.md) and [OpenAPI](/openapi.json).

After submitting the website form, you receive a confirmation email with a **Track your request** button. Use the link to create a password or sign in. Creating an account is optional; your request continues if you choose not to.

Arrange access to private audit materials with our team before the audit. Do not submit passwords or sensitive personal information. Contact [info@tityra.com](mailto:info@tityra.com), and see the [privacy notice](/privacy) and [cookie information](/cookies).