Evidence: security probe returned HTTP 403. Cloudflare header(s): cf-ray, server, cf-cache-status. URL: https://cashneversleeps.com/.env
Review Cloudflare WAF, bot protection, rate-limit, and challenge rules for public marketing/content routes. Allow safe public scans and legitimate search or AI user-fetch crawlers to reach public pages while keeping admin, authenticated, preview, and private paths protected.
Speed Insights
Grade A
98% performance
https://cashneversleeps.com
LCP
1.0s
Largest paint
TBT
43ms
Blocking time
CLS
0.001
Layout shift
75
out of 100
91
out of 100
101/111 rule points
84
out of 100
64/76 rule points
61
out of 100
57/94 rule points
62
out of 100
68/110 rule points
Category point breakdown
Biggest score-losing checks
axe found 5 violation rule(s), including 1 serious or critical rule(s). Top rules: link-name (3), heading-order (1), landmark-one-main (1), landmark-unique (1), region (32).
Detected 5 H1 heading(s) and 142 meta-description characters.
Detected 1 of 5 common public security controls. Present: content-security-policy. Missing: strict-transport-security, x-content-type-options, frame protection (x-frame-options or content-security-policy frame-ancestors), referrer-policy.
Heading levels found: 1, 2, 1, 1, 1, 2, 3, 2, 3, 3, 3, 2, 3, 3, 2, 4, 1, 4, 4.
Improve AI search and crawler readiness
-2 rule ptsWhat failed
One or more AI discovery, user-fetch, indexability, snippet, synthetic reachability, or sitemap signals need attention.
Evidence
FreeScan.app reached the public page with HTTP 200. robots.txt blocks Claude-SearchBot, PerplexityBot from AI search or discovery for this page path. Synthetic or robots checks block Claude-User, MistralAI-User from user-requested fetches. GPTBot, ClaudeBot, Google-Extended, and 4 more are explicit training or data-use opt-outs and do not reduce the AEO score. AEO crawler readiness is 88%: discovery 45/45, index and snippet eligibility 25/25, synthetic reachability 13/20, sitemap freshness 5/10.
Priority
Priority 2: fix before sharing the page publicly.
Why it matters
AI search systems need crawlable, reachable, indexable, and quotable public content. Training and data-use choices remain neutral publisher preferences.
How to fix it
Use the component scores and exact matched robots rules in the crawler report. Fix blocked search agents, noindex or snippet restrictions, canonical or sitemap gaps, and synthetic WAF/challenge failures. Preserve intentional training opt-outs and keep private, admin, and authenticated paths protected before rescanning.
Agent Prompt
Fix rendered axe accessibility violations
-18 rule ptsWhat failed
The rendered page has accessibility rule violations detected by axe-core.
Evidence
axe found 5 violation rule(s), including 1 serious or critical rule(s). Top rules: link-name (3), heading-order (1), landmark-one-main (1), landmark-unique (1), region (32).
Priority
Priority 5: fix before sharing the page publicly.
Why it matters
axe checks the actual browser-rendered page, so these issues can affect people using keyboards, screen readers, or other assistive technology.
How to fix it
Fix the top axe rule IDs first, especially critical and serious violations around names, roles, labels, headings, contrast, landmarks, and keyboard-accessible controls.
Agent Prompt
Add common public security headers
-12 rule ptsWhat failed
Several basic browser protection headers were not visible.
Evidence
Detected 1 of 5 common public security controls. Present: content-security-policy. Missing: strict-transport-security, x-content-type-options, frame protection (x-frame-options or content-security-policy frame-ancestors), referrer-policy.
Priority
Priority 5: fix before sharing the page publicly.
Why it matters
These headers reduce avoidable browser-side risk and show a baseline of care before launch.
How to fix it
Add only the missing protections among Strict-Transport-Security, Content-Security-Policy, X-Content-Type-Options, frame protection, and Referrer-Policy. An existing CSP frame-ancestors directive already provides frame protection and must remain unchanged.
Agent Prompt
Clarify the hero promise
-13 rule ptsWhat failed
The hero area does not provide enough clear product context.
Evidence
Detected 5 H1 heading(s) and 142 meta-description characters.
Priority
Priority 6: fix during launch polish.
Why it matters
Visitors decide quickly whether the product is relevant; a vague hero weakens every acquisition channel.
How to fix it
Use one clear H1 plus supporting copy that names the audience, problem, and outcome.
Agent Prompt
Use one clear H1 and ordered headings
-8 rule ptsWhat failed
The page heading structure is either missing a single main heading or skips heading levels.
Evidence
Detected 5 H1 heading(s) and 19 total headings.
Priority
Priority 9: fix during launch polish.
Why it matters
Clear headings help visitors, search engines, and assistive technology understand the page quickly.
How to fix it
Keep one H1 for the main promise, then use H2 and H3 headings in order for sections below it.
Agent Prompt
SEO / AEO
Severity mix: 1 critical, 7 high, 3 medium, 1 low.
Crawler access
-2 rule ptsFreeScan.app reached the public page with HTTP 200. robots.txt blocks Claude-SearchBot, PerplexityBot from AI search or discovery for this page path. Synthetic or robots checks block Claude-User, MistralAI-User from user-requested fetches. GPTBot, ClaudeBot, Google-Extended, and 4 more are explicit training or data-use opt-outs and do not reduce the AEO score. AEO crawler readiness is 88%: discovery 45/45, index and snippet eligibility 25/25, synthetic reachability 13/20, sitemap freshness 5/10.
Heading structure
-8 rule ptsDetected 5 H1 heading(s) and 19 total headings.
Security
Severity mix: 2 critical, 3 high, 0 medium, 0 low.
Common security headers
-12 rule ptsDetected 1 of 5 common public security controls. Present: content-security-policy. Missing: strict-transport-security, x-content-type-options, frame protection (x-frame-options or content-security-policy frame-ancestors), referrer-policy.
Accessibility
Severity mix: 0 critical, 3 high, 5 medium, 0 low.
Rendered axe accessibility violations
-18 rule ptsaxe found 5 violation rule(s), including 1 serious or critical rule(s). Top rules: link-name (3), heading-order (1), landmark-one-main (1), landmark-unique (1), region (32).
Heading order
-11 rule ptsHeading levels found: 1, 2, 1, 1, 1, 2, 3, 2, 3, 3, 3, 2, 3, 3, 2, 4, 1, 4, 4.
Basic contrast
-8 rule pts50 of 100 rendered text color sample(s) missed WCAG contrast targets. Worst rendered ratio: 1.
Design
Severity mix: 0 critical, 3 high, 6 medium, 2 low.
Hero clarity signals
-13 rule ptsDetected 5 H1 heading(s) and 142 meta-description characters.
Trust signals
-10 rule ptsDetected 0 trust-signal keyword occurrence(s).
Rendered speed signals
-10 rule ptsDOMContentLoaded: 877ms. Load complete: 1045ms. First contentful paint: 812ms. Resources: 31. Scripts: 5. Images: 13. Third-party origins: 11. Transfer: not available.
Failed checks
These checks need attention.
Crawler access
12/14FreeScan.app reached the public page with HTTP 200. robots.txt blocks Claude-SearchBot, PerplexityBot from AI search or discovery for this page path. Synthetic or robots checks block Claude-User, MistralAI-User from user-requested fetches. GPTBot, ClaudeBot, Google-Extended, and 4 more are explicit training or data-use opt-outs and do not reduce the AEO score. AEO crawler readiness is 88%: discovery 45/45, index and snippet eligibility 25/25, synthetic reachability 13/20, sitemap freshness 5/10.
Failed: earned 12 of 14 points from partial coverage.
Priority: Priority 2: fix before sharing the page publicly.
Why it matters: AI search systems need crawlable, reachable, indexable, and quotable public content. Training and data-use choices remain neutral publisher preferences.
Fix: Use the component scores and exact matched robots rules in the crawler report. Fix blocked search agents, noindex or snippet restrictions, canonical or sitemap gaps, and synthetic WAF/challenge failures. Preserve intentional training opt-outs and keep private, admin, and authenticated paths protected before rescanning.
Agent Prompt
Heading structure
0/8Detected 5 H1 heading(s) and 19 total headings.
Failed: earned 0 of 8 points.
Priority: Priority 9: fix during launch polish.
Why it matters: Clear headings help visitors, search engines, and assistive technology understand the page quickly.
Fix: Keep one H1 for the main promise, then use H2 and H3 headings in order for sections below it.
Agent Prompt
Common security headers
6/18Detected 1 of 5 common public security controls. Present: content-security-policy. Missing: strict-transport-security, x-content-type-options, frame protection (x-frame-options or content-security-policy frame-ancestors), referrer-policy.
Failed: earned 6 of 18 points from partial coverage.
Priority: Priority 5: fix before sharing the page publicly.
Why it matters: These headers reduce avoidable browser-side risk and show a baseline of care before launch.
Fix: Add only the missing protections among Strict-Transport-Security, Content-Security-Policy, X-Content-Type-Options, frame protection, and Referrer-Policy. An existing CSP frame-ancestors directive already provides frame protection and must remain unchanged.
Agent Prompt
Heading order
0/11Heading levels found: 1, 2, 1, 1, 1, 2, 3, 2, 3, 3, 3, 2, 3, 3, 2, 4, 1, 4, 4.
Failed: earned 0 of 11 points.
Priority: Priority 13: fix during launch polish.
Why it matters: A clean heading outline helps visitors scan the page and helps assistive technology navigate it.
Fix: Use headings in order: one H1, then H2 for major sections, then H3 for subsections.
Agent Prompt
Basic contrast
0/850 of 100 rendered text color sample(s) missed WCAG contrast targets. Worst rendered ratio: 1.
Failed: earned 0 of 8 points.
Priority: Priority 20: lower-risk cleanup after urgent launch blockers.
Why it matters: Low contrast makes a launch page feel less polished and can exclude users with low vision.
Fix: Review key text, buttons, and links against a 4.5:1 contrast target for normal text.
Agent Prompt
Rendered axe accessibility violations
0/18axe found 5 violation rule(s), including 1 serious or critical rule(s). Top rules: link-name (3), heading-order (1), landmark-one-main (1), landmark-unique (1), region (32).
Failed: earned 0 of 18 points.
Priority: Priority 5: fix before sharing the page publicly.
Why it matters: axe checks the actual browser-rendered page, so these issues can affect people using keyboards, screen readers, or other assistive technology.
Fix: Fix the top axe rule IDs first, especially critical and serious violations around names, roles, labels, headings, contrast, landmarks, and keyboard-accessible controls.
Agent Prompt
Hero clarity signals
0/13Detected 5 H1 heading(s) and 142 meta-description characters.
Failed: earned 0 of 13 points.
Priority: Priority 6: fix during launch polish.
Why it matters: Visitors decide quickly whether the product is relevant; a vague hero weakens every acquisition channel.
Fix: Use one clear H1 plus supporting copy that names the audience, problem, and outcome.
Agent Prompt
Trust signals
0/10Detected 0 trust-signal keyword occurrence(s).
Failed: earned 0 of 10 points.
Priority: Priority 16: lower-risk cleanup after urgent launch blockers.
Why it matters: Trust signals reduce hesitation when strangers see the product for the first time.
Fix: Add honest proof such as customer quotes, usage stats, founder credibility, security notes, or relevant logos.
Agent Prompt
Rendered speed signals
0/10DOMContentLoaded: 877ms. Load complete: 1045ms. First contentful paint: 812ms. Resources: 31. Scripts: 5. Images: 13. Third-party origins: 11. Transfer: not available.
Failed: earned 0 of 10 points.
Priority: Priority 14: fix during launch polish.
Why it matters: Slow pages lose impatient visitors and make every SEO, social, and paid-traffic visit work harder.
Fix: Reduce render-blocking scripts/styles, compress and size images, defer non-critical JavaScript, reduce third-party tags, and keep above-the-fold content quick to paint.
Agent Prompt
Rendered layout ergonomics
0/9Horizontal overflow: 0px. Small tap targets: 24.
Failed: earned 0 of 9 points.
Priority: Priority 13: fix during launch polish.
Why it matters: Horizontal overflow and tiny tap targets make the page feel broken on real devices, especially for mobile visitors.
Fix: Remove elements wider than the viewport, add responsive constraints, and make important links, buttons, inputs, and controls at least 40px tall and wide where possible.
Agent Prompt
Page-level AEO readiness
Shared eligibility and content signals that affect every search and answer agent.
Index and citation eligibility
No general noindex directive was detected.
Snippet and answer controls
No general nosnippet or max-snippet:0 control was detected.
Canonical alignment
The canonical resolves to the scanned public URL.
Sitemap coverage and freshness
A sitemap index was found; this safe scan did not recursively fetch child sitemaps.
Structured data
Detected 1 JSON-LD block(s), 0 parse error(s), and types ContactPoint, ImageObject, Organization, SearchAction, WebPage, WebSite.
Public or paywalled content
No isAccessibleForFree structured-data value was detected.
Entity clarity
Detected 3 of 3 core identity signals across the title, description, and H1.
Answer-ready visible text
Detected 685 visible words and 17 audience, use-case, pricing, or integration signals.
Authorship and accountability
No author meta value or structured-data author was detected.
Published or updated date
Structured data reports dateModified 2026-07-30T19:46:33+00:00.
Supporting-source links
Detected 19 external source or reference link(s); link quality still requires editorial review.
Rendered content availability
Rendered audit completed with 212 visible text element(s).
Synthetic search-agent reachability
6 of 8 search/discovery User-Agent probes returned reachable content.
Optional LLM-readable summary
No llms.txt file was found; this is optional and does not reduce core AEO readiness.
OAI-SearchBotAI search
Robots: allowed by * allow: / · line 31
Probe: reachable · HTTP 200 · 100% parity
Controls: robots meta: follow, index, max-snippet:-1, max-video-preview:-1, max-image-preview:large
GPTBotModel training
Robots: blocked by gptbot disallow: / · line 55
Probe: not tested for this control
Controls: robots meta: follow, index, max-snippet:-1, max-video-preview:-1, max-image-preview:large
ChatGPT-UserUser-requested fetch
Robots: not applicable to user-requested fetches
Probe: not tested for this control
Controls: robots meta: follow, index, max-snippet:-1, max-video-preview:-1, max-image-preview:large
ClaudeBotModel training
Robots: blocked by claudebot disallow: / · line 46
Probe: not tested for this control
Controls: robots meta: follow, index, max-snippet:-1, max-video-preview:-1, max-image-preview:large
Claude-SearchBotAI search
Robots: allowed by * allow: / · line 31
Probe: blocked · HTTP 403
Controls: robots meta: follow, index, max-snippet:-1, max-video-preview:-1, max-image-preview:large
Claude-UserUser-requested fetch
Robots: allowed by * allow: / · line 31
Probe: blocked · HTTP 403
Controls: robots meta: follow, index, max-snippet:-1, max-video-preview:-1, max-image-preview:large
GooglebotSearch and discovery
Robots: allowed by * allow: / · line 31
Probe: reachable · HTTP 200 · 100% parity
Controls: robots meta: follow, index, max-snippet:-1, max-video-preview:-1, max-image-preview:large
Google-ExtendedData-use policy control
Robots: blocked by google-extended disallow: / · line 52
Probe: not tested for this control
Controls: robots meta: follow, index, max-snippet:-1, max-video-preview:-1, max-image-preview:large
BingbotSearch and discovery
Robots: allowed by * allow: / · line 31
Probe: reachable · HTTP 200 · 100% parity
Controls: robots meta: follow, index, max-snippet:-1, max-video-preview:-1, max-image-preview:large
PerplexityBotAI search
Robots: allowed by * allow: / · line 31
Probe: blocked · HTTP 403
Controls: robots meta: follow, index, max-snippet:-1, max-video-preview:-1, max-image-preview:large
Perplexity-UserUser-requested fetch
Robots: not applicable to user-requested fetches
Probe: not tested for this control
Controls: robots meta: follow, index, max-snippet:-1, max-video-preview:-1, max-image-preview:large
ApplebotSearch and discovery
Robots: allowed by * allow: / · line 31
Probe: reachable · HTTP 200 · 100% parity
Controls: robots meta: follow, index, max-snippet:-1, max-video-preview:-1, max-image-preview:large
Applebot-ExtendedData-use policy control
Robots: blocked by applebot-extended disallow: / · line 37
Probe: not tested for this control
Controls: robots meta: follow, index, max-snippet:-1, max-video-preview:-1, max-image-preview:large
MistralAI-IndexAI search
Robots: allowed by * allow: / · line 31
Probe: reachable · HTTP 200 · 100% parity
Controls: robots meta: follow, index, max-snippet:-1, max-video-preview:-1, max-image-preview:large
MistralAI-UserUser-requested fetch
Robots: allowed by * allow: / · line 31
Probe: blocked · HTTP 403
Controls: robots meta: follow, index, max-snippet:-1, max-video-preview:-1, max-image-preview:large
meta-externalagentModel training
Robots: blocked by meta-externalagent disallow: / · line 58
Probe: not tested for this control
Controls: robots meta: follow, index, max-snippet:-1, max-video-preview:-1, max-image-preview:large
meta-externalfetcherUser-requested fetch
Robots: allowed by * allow: / · line 31
Probe: reachable · HTTP 200 · 100% parity
Controls: robots meta: follow, index, max-snippet:-1, max-video-preview:-1, max-image-preview:large
AmazonbotModel training
Robots: blocked by amazonbot disallow: / · line 34
Probe: not tested for this control
Controls: robots meta: follow, index, max-snippet:-1, max-video-preview:-1, max-image-preview:large
Amzn-SearchBotAI search
Robots: allowed by * allow: / · line 31
Probe: reachable · HTTP 200 · 100% parity
Controls: robots meta: follow, index, max-snippet:-1, max-video-preview:-1, max-image-preview:large
Amzn-UserUser-requested fetch
Robots: allowed by * allow: / · line 31
Probe: reachable · HTTP 200 · 100% parity
Controls: robots meta: follow, index, max-snippet:-1, max-video-preview:-1, max-image-preview:large
CCBotModel training
Robots: blocked by ccbot disallow: / · line 43
Probe: not tested for this control
Controls: robots meta: follow, index, max-snippet:-1, max-video-preview:-1, max-image-preview:large
Ready combines robots policy, a bounded synthetic User-Agent fetch, indexability, and snippet eligibility. Synthetic probes do not prove vendor-origin traffic. Purple preference states are training or data-use choices and do not lower the AEO score.
Share preview
cashneversleeps.com website audit report
Close to ready: 75/100 overall, with prioritized fixes for SEO, security, accessibility, and design.
Public reports expose the scanned public URL, safe scores, sanitized public evidence, and fix guidance. They do not include credentials, cookies, hidden form values, or sensitive response bodies.
