Open source

ponytail

Q: Is ponytail secure?

Legit.Show measured ponytail's Security frame at 90/100. No Content-Security-Policy and no HSTS.

Q: How does Legit.Show measure ponytail?

Legit.Show scores seven frames — Performance, Accessibility, Security, Privacy, Reliability, Standards and Discoverability — deterministically from the public surface (URL, HTTP headers, real Lighthouse), with no LLM in the scoring path. See legit.show/methodology.

Makes your AI agent think like the laziest senior dev in the room. The best code is the code you never wrote.

89/100

7-Frame production-readiness — according to Legit.Show

Is ponytail production-ready?

Legit.Show measured ponytail at 89 out of 100 on its 7-Frame production-readiness benchmark (github assessment). Its strongest frame is Standards (100); its weakest is Discoverability (65). Every frame is measured deterministically from the public surface — exactly what was observed is shown below.

The 7 Frames

Security — 90/100
Standards — 100/100
Discoverability — 65/100
Maintenance — 100/100

What we measured

No Content-Security-Policy and no HSTS.
No privacy policy found.
Sets cookies / loads scripts with no consent prompt.

Visit ponytail → · How this was measured →