completed

HTTP 403

0 redirects

14 checks

Website audit scorecard for openai.com

The scanner fetched the public page, extracted deterministic facts, and stored scored results across SEO / AEO, security, accessibility, and design.

Submitted

openai.com

Final URL

https://openai.com

Created

Aug 1, 2026, 7:01 AM

Safe fetch

64 ms

Four-score result

Needs fixes before launch (Needs focused fixes): 8 passed, 5 failed, and 1 unknown. Strongest area: Security. Weakest area: Accessibility.

Overall

out of 100

SEO / AEO

out of 100

30/44 rule points

Security

out of 100

46/52 rule points

Accessibility

out of 100

0/18 rule points

Design

out of 100

19/38 rule points

Why this scored this way

Scores are deterministic: each category earns rule points for verified public signals and loses points for failed checks. Unknown checks are shown separately instead of guessed.

Category point breakdown

SEO / AEO30/44

Security46/52

Accessibility0/18

Design19/38

Biggest score-losing checks

high

Accessibility

Rendered axe accessibility violations

axe found 4 violation rule(s), including 2 serious or critical rule(s). Top rules: meta-refresh (1), html-has-lang (1), page-has-heading-one (1), empty-heading (1).

critical

SEO / AEO

Crawler access

intake returned HTTP 403 with Cloudflare signals, which can indicate crawler or bot-security blocking. robots.txt blocks OAI-SearchBot, Claude-SearchBot, Googlebot, and 5 more from AI search or discovery for this page path. Synthetic or robots checks block Claude-User, MistralAI-User, meta-externalfetcher, and 1 more from user-requested fetches. AEO crawler readiness is 70%: discovery 45/45, index and snippet eligibility 20/25, synthetic reachability 0/20, sitemap freshness 5/10.

high

Design

Responsive viewport basics

No viewport meta tag was detected.

low

Design

Runtime console health

Detected 2 console error(s) and 0 uncaught page error(s) during render.

Recommendations

Score-losing issues ordered by remediation priority, severity, and score impact.

5 fixes

5 opportunities

9 insights

fail

critical

SEO / AEO

Priority 2

Improve AI search and crawler readiness

-14 rule pts

What failed

One or more AI discovery, user-fetch, indexability, snippet, synthetic reachability, or sitemap signals need attention.

Evidence

Priority

Priority 2: fix before sharing the page publicly.

Why it matters

AI search systems need crawlable, reachable, indexable, and quotable public content. Training and data-use choices remain neutral publisher preferences.

How to fix it

Use the component scores and exact matched robots rules in the crawler report. Fix blocked search agents, noindex or snippet restrictions, canonical or sitemap gaps, and synthetic WAF/challenge failures. Preserve intentional training opt-outs and keep private, admin, and authenticated paths protected before rescanning.

Copyable agent prompt

## Role
Act as a focused expert website launch remediation agent for this workflow.
## Inputs
- Primary context: Improve openai.com at https://openai.com.
- Fix title: Improve AI search and crawler readiness.
- Scanner check: Crawler access.
- Category: SEO / AEO.
- Status: fail.
- Severity: critical.
- Priority: 2; lower numbers are more urgent.
- Score impact: 14 rule points lost.
- Evidence: intake returned HTTP 403 with Cloudflare signals, which can indicate crawler or bot-security blocking. robots.txt blocks OAI-SearchBot, Claude-SearchBot, Googlebot, and 5 more from AI search or discovery for this page path. Synthetic or robots checks block Claude-User, MistralAI-User, meta-externalfetcher, and 1 more from user-requested fetches. AEO crawler readiness is 70%: discovery 45/45, index and snippet eligibility 20/25, synthetic reachability 0/20, sitemap freshness 5/10.
- What needs attention: One or more AI discovery, user-fetch, indexability, snippet, synthetic reachability, or sitemap signals need attention.
- Why it matters: AI search systems need crawlable, reachable, indexable, and quotable public content. Training and data-use choices remain neutral publisher preferences.
- Status-specific guidance: A public check reported a failure. Reproduce or inspect the issue first, then make the smallest safe fix.
- Audience or recipient: The site owner, builder, or marketing team responsible for improving this public page.
- Constraints, examples, or source material: Treat the live URL as the public target to inspect, not as the only source of truth. When repository, CMS, or hosting access is available, use that implementation context before changing anything.
- Target outcome: After the fix is deployed and the public page is rescanned, this specific check should improve or pass without lowering other SEO / AEO, security, accessibility, or design signals.
## Task
Use the provided context to safely complete this workflow: Use the component scores and exact matched robots rules in the crawler report. Fix blocked search agents, noindex or snippet restrictions, canonical or sitemap gaps, and synthetic WAF/challenge failures. Preserve intentional training opt-outs and keep private, admin, and authenticated paths protected before rescanning.
Before editing, identify the likely source of the issue, the smallest change that can fix it, and any user-visible behavior that must be preserved.
## Output
Return a structured response with headings, prioritized recommendations, changed files or page areas, verification results, rollback notes, and stated assumptions.
## Rules
- Ask a clarifying question when required context is missing.
- Preserve the user's intent and avoid inventing facts.
- Verify the issue exists before changing code or content. If the issue is not reproducible, explain what you checked and recommend no code change.
- If the live URL and implementation source disagree, trust the implementation source for edits and use the live URL only to understand current public behavior.
- Keep the change narrowly scoped to this fix unless another change is required to avoid a regression.
- Match the existing framework, style, design system, routing patterns, and content conventions.
- Preserve existing URLs, forms, analytics, SEO metadata, accessibility semantics, and conversion flows unless the fix explicitly requires changing them.
- Do not perform broad refactors, dependency upgrades, redesigns, rewrites, migrations, file deletions, route changes, or destructive commands unless they are explicitly required and approved.
- Make changes that are easy to review and roll back.
- Verify the result with the smallest reliable test, build, browser check, or manual inspection available.
## Safety
- Do not request, expose, or reproduce sensitive data.
- Redact private details from examples unless the user explicitly says they are safe to include.
- Do not use credentials, cookies, authenticated data, hidden form values, or private response bodies.
- Do not weaken security headers, authentication, authorization, privacy controls, accessibility, or error handling to make the scan pass.

fail

high

Accessibility

Priority 5

Fix rendered axe accessibility violations

-18 rule pts

What failed

The rendered page has accessibility rule violations detected by axe-core.

Evidence

axe found 4 violation rule(s), including 2 serious or critical rule(s). Top rules: meta-refresh (1), html-has-lang (1), page-has-heading-one (1), empty-heading (1).

Priority

Priority 5: fix before sharing the page publicly.

Why it matters

axe checks the actual browser-rendered page, so these issues can affect people using keyboards, screen readers, or other assistive technology.

How to fix it

Fix the top axe rule IDs first, especially critical and serious violations around names, roles, labels, headings, contrast, landmarks, and keyboard-accessible controls.

Copyable agent prompt

## Role
Act as a focused expert website launch remediation agent for this workflow.
## Inputs
- Primary context: Improve openai.com at https://openai.com.
- Fix title: Fix rendered axe accessibility violations.
- Scanner check: Rendered axe accessibility violations.
- Category: Accessibility.
- Status: fail.
- Severity: high.
- Priority: 5; lower numbers are more urgent.
- Score impact: 18 rule points lost.
- Evidence: axe found 4 violation rule(s), including 2 serious or critical rule(s). Top rules: meta-refresh (1), html-has-lang (1), page-has-heading-one (1), empty-heading (1).
- What needs attention: The rendered page has accessibility rule violations detected by axe-core.
- Why it matters: axe checks the actual browser-rendered page, so these issues can affect people using keyboards, screen readers, or other assistive technology.
- Status-specific guidance: A public check reported a failure. Reproduce or inspect the issue first, then make the smallest safe fix.
- Audience or recipient: The site owner, builder, or marketing team responsible for improving this public page.
- Constraints, examples, or source material: Treat the live URL as the public target to inspect, not as the only source of truth. When repository, CMS, or hosting access is available, use that implementation context before changing anything.
- Target outcome: After the fix is deployed and the public page is rescanned, this specific check should improve or pass without lowering other SEO / AEO, security, accessibility, or design signals.
## Task
Use the provided context to safely complete this workflow: Fix the top axe rule IDs first, especially critical and serious violations around names, roles, labels, headings, contrast, landmarks, and keyboard-accessible controls.
Before editing, identify the likely source of the issue, the smallest change that can fix it, and any user-visible behavior that must be preserved.
## Output
Return a structured response with headings, prioritized recommendations, changed files or page areas, verification results, rollback notes, and stated assumptions.
## Rules
- Ask a clarifying question when required context is missing.
- Preserve the user's intent and avoid inventing facts.
- Verify the issue exists before changing code or content. If the issue is not reproducible, explain what you checked and recommend no code change.
- If the live URL and implementation source disagree, trust the implementation source for edits and use the live URL only to understand current public behavior.
- Keep the change narrowly scoped to this fix unless another change is required to avoid a regression.
- Match the existing framework, style, design system, routing patterns, and content conventions.
- Preserve existing URLs, forms, analytics, SEO metadata, accessibility semantics, and conversion flows unless the fix explicitly requires changing them.
- Do not perform broad refactors, dependency upgrades, redesigns, rewrites, migrations, file deletions, route changes, or destructive commands unless they are explicitly required and approved.
- Make changes that are easy to review and roll back.
- Verify the result with the smallest reliable test, build, browser check, or manual inspection available.
## Safety
- Do not request, expose, or reproduce sensitive data.
- Redact private details from examples unless the user explicitly says they are safe to include.
- Do not use credentials, cookies, authenticated data, hidden form values, or private response bodies.
- Do not weaken security headers, authentication, authorization, privacy controls, accessibility, or error handling to make the scan pass.

fail

high

Design

Priority 3

Add responsive viewport metadata

-12 rule pts

What failed

The page is missing the viewport meta tag used for mobile layout.

Evidence

No viewport meta tag was detected.

Priority

Priority 3: fix before sharing the page publicly.

Why it matters

Launch traffic often comes from phones; missing viewport metadata can make the page render poorly.

How to fix it

Add a viewport meta tag with width=device-width and initial-scale=1.

Copyable agent prompt

## Role
Act as a focused expert website launch remediation agent for this workflow.
## Inputs
- Primary context: Improve openai.com at https://openai.com.
- Fix title: Add responsive viewport metadata.
- Scanner check: Responsive viewport basics.
- Category: Design.
- Status: fail.
- Severity: high.
- Priority: 3; lower numbers are more urgent.
- Score impact: 12 rule points lost.
- Evidence: No viewport meta tag was detected.
- What needs attention: The page is missing the viewport meta tag used for mobile layout.
- Why it matters: Launch traffic often comes from phones; missing viewport metadata can make the page render poorly.
- Status-specific guidance: A public check reported a failure. Reproduce or inspect the issue first, then make the smallest safe fix.
- Audience or recipient: The site owner, builder, or marketing team responsible for improving this public page.
- Constraints, examples, or source material: Treat the live URL as the public target to inspect, not as the only source of truth. When repository, CMS, or hosting access is available, use that implementation context before changing anything.
- Target outcome: After the fix is deployed and the public page is rescanned, this specific check should improve or pass without lowering other SEO / AEO, security, accessibility, or design signals.
## Task
Use the provided context to safely complete this workflow: Add a viewport meta tag with width=device-width and initial-scale=1.
Before editing, identify the likely source of the issue, the smallest change that can fix it, and any user-visible behavior that must be preserved.
## Output
Return a structured response with headings, prioritized recommendations, changed files or page areas, verification results, rollback notes, and stated assumptions.
## Rules
- Ask a clarifying question when required context is missing.
- Preserve the user's intent and avoid inventing facts.
- Verify the issue exists before changing code or content. If the issue is not reproducible, explain what you checked and recommend no code change.
- If the live URL and implementation source disagree, trust the implementation source for edits and use the live URL only to understand current public behavior.
- Keep the change narrowly scoped to this fix unless another change is required to avoid a regression.
- Match the existing framework, style, design system, routing patterns, and content conventions.
- Preserve existing URLs, forms, analytics, SEO metadata, accessibility semantics, and conversion flows unless the fix explicitly requires changing them.
- Do not perform broad refactors, dependency upgrades, redesigns, rewrites, migrations, file deletions, route changes, or destructive commands unless they are explicitly required and approved.
- Make changes that are easy to review and roll back.
- Verify the result with the smallest reliable test, build, browser check, or manual inspection available.
## Safety
- Do not request, expose, or reproduce sensitive data.
- Redact private details from examples unless the user explicitly says they are safe to include.
- Do not use credentials, cookies, authenticated data, hidden form values, or private response bodies.
- Do not weaken security headers, authentication, authorization, privacy controls, accessibility, or error handling to make the scan pass.

fail

high

Security

Priority 5

Add common public security headers

-6 rule pts

What failed

Several basic browser protection headers were not visible.

Evidence

Detected 4 of 5 common public security headers. Present: strict-transport-security, x-content-type-options, x-frame-options, referrer-policy. Missing: content-security-policy.

Priority

Priority 5: fix before sharing the page publicly.

Why it matters

These headers reduce avoidable browser-side risk and show a baseline of care before launch.

How to fix it

Configure headers such as Strict-Transport-Security, Content-Security-Policy, X-Content-Type-Options, X-Frame-Options, and Referrer-Policy.

Copyable agent prompt

## Role
Act as a focused expert website launch remediation agent for this workflow.
## Inputs
- Primary context: Improve openai.com at https://openai.com.
- Fix title: Add common public security headers.
- Scanner check: Common security headers.
- Category: Security.
- Status: fail.
- Severity: high.
- Priority: 5; lower numbers are more urgent.
- Score impact: 6 rule points lost.
- Evidence: Detected 4 of 5 common public security headers. Present: strict-transport-security, x-content-type-options, x-frame-options, referrer-policy. Missing: content-security-policy.
- What needs attention: Several basic browser protection headers were not visible.
- Why it matters: These headers reduce avoidable browser-side risk and show a baseline of care before launch.
- Status-specific guidance: A public check reported a failure. Reproduce or inspect the issue first, then make the smallest safe fix.
- Audience or recipient: The site owner, builder, or marketing team responsible for improving this public page.
- Constraints, examples, or source material: Treat the live URL as the public target to inspect, not as the only source of truth. When repository, CMS, or hosting access is available, use that implementation context before changing anything.
- Target outcome: After the fix is deployed and the public page is rescanned, this specific check should improve or pass without lowering other SEO / AEO, security, accessibility, or design signals.
## Task
Use the provided context to safely complete this workflow: Configure headers such as Strict-Transport-Security, Content-Security-Policy, X-Content-Type-Options, X-Frame-Options, and Referrer-Policy.
Before editing, identify the likely source of the issue, the smallest change that can fix it, and any user-visible behavior that must be preserved.
## Output
Return a structured response with headings, prioritized recommendations, changed files or page areas, verification results, rollback notes, and stated assumptions.
## Rules
- Ask a clarifying question when required context is missing.
- Preserve the user's intent and avoid inventing facts.
- Verify the issue exists before changing code or content. If the issue is not reproducible, explain what you checked and recommend no code change.
- If the live URL and implementation source disagree, trust the implementation source for edits and use the live URL only to understand current public behavior.
- Keep the change narrowly scoped to this fix unless another change is required to avoid a regression.
- Match the existing framework, style, design system, routing patterns, and content conventions.
- Preserve existing URLs, forms, analytics, SEO metadata, accessibility semantics, and conversion flows unless the fix explicitly requires changing them.
- Do not perform broad refactors, dependency upgrades, redesigns, rewrites, migrations, file deletions, route changes, or destructive commands unless they are explicitly required and approved.
- Make changes that are easy to review and roll back.
- Verify the result with the smallest reliable test, build, browser check, or manual inspection available.
## Safety
- Do not request, expose, or reproduce sensitive data.
- Redact private details from examples unless the user explicitly says they are safe to include.
- Do not use credentials, cookies, authenticated data, hidden form values, or private response bodies.
- Do not weaken security headers, authentication, authorization, privacy controls, accessibility, or error handling to make the scan pass.

fail

low

Design

Priority 15

Fix runtime browser errors

-7 rule pts

What failed

The rendered page produced console or uncaught JavaScript errors.

Evidence

Detected 2 console error(s) and 0 uncaught page error(s) during render.

Priority

Priority 15: fix during launch polish.

Why it matters

Runtime errors can break forms, CTAs, animations, tracking, or responsive behavior even when the static HTML looks fine.

How to fix it

Open the page in a browser, reproduce the console errors, and fix missing assets, hydration problems, client-side exceptions, or failing third-party scripts.

Copyable agent prompt

## Role
Act as a focused expert website launch remediation agent for this workflow.
## Inputs
- Primary context: Improve openai.com at https://openai.com.
- Fix title: Fix runtime browser errors.
- Scanner check: Runtime console health.
- Category: Design.
- Status: fail.
- Severity: low.
- Priority: 15; lower numbers are more urgent.
- Score impact: 7 rule points lost.
- Evidence: Detected 2 console error(s) and 0 uncaught page error(s) during render.
- What needs attention: The rendered page produced console or uncaught JavaScript errors.
- Why it matters: Runtime errors can break forms, CTAs, animations, tracking, or responsive behavior even when the static HTML looks fine.
- Status-specific guidance: A public check reported a failure. Reproduce or inspect the issue first, then make the smallest safe fix.
- Audience or recipient: The site owner, builder, or marketing team responsible for improving this public page.
- Constraints, examples, or source material: Treat the live URL as the public target to inspect, not as the only source of truth. When repository, CMS, or hosting access is available, use that implementation context before changing anything.
- Target outcome: After the fix is deployed and the public page is rescanned, this specific check should improve or pass without lowering other SEO / AEO, security, accessibility, or design signals.
## Task
Use the provided context to safely complete this workflow: Open the page in a browser, reproduce the console errors, and fix missing assets, hydration problems, client-side exceptions, or failing third-party scripts.
Before editing, identify the likely source of the issue, the smallest change that can fix it, and any user-visible behavior that must be preserved.
## Output
Return a structured response with headings, prioritized recommendations, changed files or page areas, verification results, rollback notes, and stated assumptions.
## Rules
- Ask a clarifying question when required context is missing.
- Preserve the user's intent and avoid inventing facts.
- Verify the issue exists before changing code or content. If the issue is not reproducible, explain what you checked and recommend no code change.
- If the live URL and implementation source disagree, trust the implementation source for edits and use the live URL only to understand current public behavior.
- Keep the change narrowly scoped to this fix unless another change is required to avoid a regression.
- Match the existing framework, style, design system, routing patterns, and content conventions.
- Preserve existing URLs, forms, analytics, SEO metadata, accessibility semantics, and conversion flows unless the fix explicitly requires changing them.
- Do not perform broad refactors, dependency upgrades, redesigns, rewrites, migrations, file deletions, route changes, or destructive commands unless they are explicitly required and approved.
- Make changes that are easy to review and roll back.
- Verify the result with the smallest reliable test, build, browser check, or manual inspection available.
## Safety
- Do not request, expose, or reproduce sensitive data.
- Redact private details from examples unless the user explicitly says they are safe to include.
- Do not use credentials, cookies, authenticated data, hidden form values, or private response bodies.
- Do not weaken security headers, authentication, authorization, privacy controls, accessibility, or error handling to make the scan pass.

Score aggregation details

Category scores come from earned rule points divided by available rule points. Failed checks are ordered by severity and score lost.

68/100

3 pass, 1 fail, 1 unknown

SEO / AEO

Severity mix: 1 critical, 2 high, 1 medium, 0 low.

critical

Crawler access

-14 rule pts

88/100

3 pass, 1 fail, 0 unknown

Security

Severity mix: 2 critical, 1 high, 0 medium, 0 low.

high

Common security headers

-6 rule pts

Detected 4 of 5 common public security headers. Present: strict-transport-security, x-content-type-options, x-frame-options, referrer-policy. Missing: content-security-policy.

0/100

0 pass, 1 fail, 0 unknown

Accessibility

Severity mix: 0 critical, 1 high, 0 medium, 0 low.

high

Rendered axe accessibility violations

-18 rule pts

axe found 4 violation rule(s), including 2 serious or critical rule(s). Top rules: meta-refresh (1), html-has-lang (1), page-has-heading-one (1), empty-heading (1).

50/100

2 pass, 2 fail, 0 unknown

Design

Severity mix: 0 critical, 1 high, 2 medium, 1 low.

high

Responsive viewport basics

-12 rule pts

No viewport meta tag was detected.

low

Runtime console health

-7 rule pts

Detected 2 console error(s) and 0 uncaught page error(s) during render.

Full check list

Failed, unknown, and passed checks are all shown so the report is transparent even when public data is partial.

Showing failed checks.

Failed checks

These checks need attention.

fail

critical

SEO / AEO

Crawler access

0/14

Failed: earned 0 of 14 points.

Priority: Priority 2: fix before sharing the page publicly.

Why it matters: AI search systems need crawlable, reachable, indexable, and quotable public content. Training and data-use choices remain neutral publisher preferences.

Fix: Use the component scores and exact matched robots rules in the crawler report. Fix blocked search agents, noindex or snippet restrictions, canonical or sitemap gaps, and synthetic WAF/challenge failures. Preserve intentional training opt-outs and keep private, admin, and authenticated paths protected before rescanning.

Copyable agent prompt

## Role
Act as a focused expert website launch remediation agent for this workflow.
## Inputs
- Primary context: Improve openai.com at https://openai.com.
- Fix title: Improve AI search and crawler readiness.
- Scanner check: Crawler access.
- Category: SEO / AEO.
- Status: fail.
- Severity: critical.
- Priority: 2; lower numbers are more urgent.
- Score impact: 14 of 14 rule points lost.
- Evidence: intake returned HTTP 403 with Cloudflare signals, which can indicate crawler or bot-security blocking. robots.txt blocks OAI-SearchBot, Claude-SearchBot, Googlebot, and 5 more from AI search or discovery for this page path. Synthetic or robots checks block Claude-User, MistralAI-User, meta-externalfetcher, and 1 more from user-requested fetches. AEO crawler readiness is 70%: discovery 45/45, index and snippet eligibility 20/25, synthetic reachability 0/20, sitemap freshness 5/10.
- What needs attention: One or more AI discovery, user-fetch, indexability, snippet, synthetic reachability, or sitemap signals need attention.
- Why it matters: AI search systems need crawlable, reachable, indexable, and quotable public content. Training and data-use choices remain neutral publisher preferences.
- Status-specific guidance: A public check reported a failure. Reproduce or inspect the issue first, then make the smallest safe fix.
- Audience or recipient: The site owner, builder, or marketing team responsible for improving this public page.
- Constraints, examples, or source material: Treat the live URL as the public target to inspect, not as the only source of truth. When repository, CMS, or hosting access is available, use that implementation context before changing anything.
- Target outcome: After the fix is deployed and the public page is rescanned, this specific check should improve or pass without lowering other SEO / AEO, security, accessibility, or design signals.
## Task
Use the provided context to safely complete this workflow: Use the component scores and exact matched robots rules in the crawler report. Fix blocked search agents, noindex or snippet restrictions, canonical or sitemap gaps, and synthetic WAF/challenge failures. Preserve intentional training opt-outs and keep private, admin, and authenticated paths protected before rescanning.
Before editing, identify the likely source of the issue, the smallest change that can fix it, and any user-visible behavior that must be preserved.
## Output
Return a structured response with headings, prioritized recommendations, changed files or page areas, verification results, rollback notes, and stated assumptions.
## Rules
- Ask a clarifying question when required context is missing.
- Preserve the user's intent and avoid inventing facts.
- Verify the issue exists before changing code or content. If the issue is not reproducible, explain what you checked and recommend no code change.
- If the live URL and implementation source disagree, trust the implementation source for edits and use the live URL only to understand current public behavior.
- Keep the change narrowly scoped to this fix unless another change is required to avoid a regression.
- Match the existing framework, style, design system, routing patterns, and content conventions.
- Preserve existing URLs, forms, analytics, SEO metadata, accessibility semantics, and conversion flows unless the fix explicitly requires changing them.
- Do not perform broad refactors, dependency upgrades, redesigns, rewrites, migrations, file deletions, route changes, or destructive commands unless they are explicitly required and approved.
- Make changes that are easy to review and roll back.
- Verify the result with the smallest reliable test, build, browser check, or manual inspection available.
## Safety
- Do not request, expose, or reproduce sensitive data.
- Redact private details from examples unless the user explicitly says they are safe to include.
- Do not use credentials, cookies, authenticated data, hidden form values, or private response bodies.
- Do not weaken security headers, authentication, authorization, privacy controls, accessibility, or error handling to make the scan pass.

fail

high

Security

Common security headers

12/18

Detected 4 of 5 common public security headers. Present: strict-transport-security, x-content-type-options, x-frame-options, referrer-policy. Missing: content-security-policy.

Failed: earned 12 of 18 points from partial coverage.

Priority: Priority 5: fix before sharing the page publicly.

Why it matters: These headers reduce avoidable browser-side risk and show a baseline of care before launch.

Fix: Configure headers such as Strict-Transport-Security, Content-Security-Policy, X-Content-Type-Options, X-Frame-Options, and Referrer-Policy.

Copyable agent prompt

## Role
Act as a focused expert website launch remediation agent for this workflow.
## Inputs
- Primary context: Improve openai.com at https://openai.com.
- Fix title: Add common public security headers.
- Scanner check: Common security headers.
- Category: Security.
- Status: fail.
- Severity: high.
- Priority: 5; lower numbers are more urgent.
- Score impact: 6 of 18 rule points lost.
- Evidence: Detected 4 of 5 common public security headers. Present: strict-transport-security, x-content-type-options, x-frame-options, referrer-policy. Missing: content-security-policy.
- What needs attention: Several basic browser protection headers were not visible.
- Why it matters: These headers reduce avoidable browser-side risk and show a baseline of care before launch.
- Status-specific guidance: A public check reported a failure. Reproduce or inspect the issue first, then make the smallest safe fix.
- Audience or recipient: The site owner, builder, or marketing team responsible for improving this public page.
- Constraints, examples, or source material: Treat the live URL as the public target to inspect, not as the only source of truth. When repository, CMS, or hosting access is available, use that implementation context before changing anything.
- Target outcome: After the fix is deployed and the public page is rescanned, this specific check should improve or pass without lowering other SEO / AEO, security, accessibility, or design signals.
## Task
Use the provided context to safely complete this workflow: Configure headers such as Strict-Transport-Security, Content-Security-Policy, X-Content-Type-Options, X-Frame-Options, and Referrer-Policy.
Before editing, identify the likely source of the issue, the smallest change that can fix it, and any user-visible behavior that must be preserved.
## Output
Return a structured response with headings, prioritized recommendations, changed files or page areas, verification results, rollback notes, and stated assumptions.
## Rules
- Ask a clarifying question when required context is missing.
- Preserve the user's intent and avoid inventing facts.
- Verify the issue exists before changing code or content. If the issue is not reproducible, explain what you checked and recommend no code change.
- If the live URL and implementation source disagree, trust the implementation source for edits and use the live URL only to understand current public behavior.
- Keep the change narrowly scoped to this fix unless another change is required to avoid a regression.
- Match the existing framework, style, design system, routing patterns, and content conventions.
- Preserve existing URLs, forms, analytics, SEO metadata, accessibility semantics, and conversion flows unless the fix explicitly requires changing them.
- Do not perform broad refactors, dependency upgrades, redesigns, rewrites, migrations, file deletions, route changes, or destructive commands unless they are explicitly required and approved.
- Make changes that are easy to review and roll back.
- Verify the result with the smallest reliable test, build, browser check, or manual inspection available.
## Safety
- Do not request, expose, or reproduce sensitive data.
- Redact private details from examples unless the user explicitly says they are safe to include.
- Do not use credentials, cookies, authenticated data, hidden form values, or private response bodies.
- Do not weaken security headers, authentication, authorization, privacy controls, accessibility, or error handling to make the scan pass.

fail

high

Accessibility

Rendered axe accessibility violations

0/18

axe found 4 violation rule(s), including 2 serious or critical rule(s). Top rules: meta-refresh (1), html-has-lang (1), page-has-heading-one (1), empty-heading (1).

Failed: earned 0 of 18 points.

Priority: Priority 5: fix before sharing the page publicly.

Why it matters: axe checks the actual browser-rendered page, so these issues can affect people using keyboards, screen readers, or other assistive technology.

Fix: Fix the top axe rule IDs first, especially critical and serious violations around names, roles, labels, headings, contrast, landmarks, and keyboard-accessible controls.

Copyable agent prompt

## Role
Act as a focused expert website launch remediation agent for this workflow.
## Inputs
- Primary context: Improve openai.com at https://openai.com.
- Fix title: Fix rendered axe accessibility violations.
- Scanner check: Rendered axe accessibility violations.
- Category: Accessibility.
- Status: fail.
- Severity: high.
- Priority: 5; lower numbers are more urgent.
- Score impact: 18 of 18 rule points lost.
- Evidence: axe found 4 violation rule(s), including 2 serious or critical rule(s). Top rules: meta-refresh (1), html-has-lang (1), page-has-heading-one (1), empty-heading (1).
- What needs attention: The rendered page has accessibility rule violations detected by axe-core.
- Why it matters: axe checks the actual browser-rendered page, so these issues can affect people using keyboards, screen readers, or other assistive technology.
- Status-specific guidance: A public check reported a failure. Reproduce or inspect the issue first, then make the smallest safe fix.
- Audience or recipient: The site owner, builder, or marketing team responsible for improving this public page.
- Constraints, examples, or source material: Treat the live URL as the public target to inspect, not as the only source of truth. When repository, CMS, or hosting access is available, use that implementation context before changing anything.
- Target outcome: After the fix is deployed and the public page is rescanned, this specific check should improve or pass without lowering other SEO / AEO, security, accessibility, or design signals.
## Task
Use the provided context to safely complete this workflow: Fix the top axe rule IDs first, especially critical and serious violations around names, roles, labels, headings, contrast, landmarks, and keyboard-accessible controls.
Before editing, identify the likely source of the issue, the smallest change that can fix it, and any user-visible behavior that must be preserved.
## Output
Return a structured response with headings, prioritized recommendations, changed files or page areas, verification results, rollback notes, and stated assumptions.
## Rules
- Ask a clarifying question when required context is missing.
- Preserve the user's intent and avoid inventing facts.
- Verify the issue exists before changing code or content. If the issue is not reproducible, explain what you checked and recommend no code change.
- If the live URL and implementation source disagree, trust the implementation source for edits and use the live URL only to understand current public behavior.
- Keep the change narrowly scoped to this fix unless another change is required to avoid a regression.
- Match the existing framework, style, design system, routing patterns, and content conventions.
- Preserve existing URLs, forms, analytics, SEO metadata, accessibility semantics, and conversion flows unless the fix explicitly requires changing them.
- Do not perform broad refactors, dependency upgrades, redesigns, rewrites, migrations, file deletions, route changes, or destructive commands unless they are explicitly required and approved.
- Make changes that are easy to review and roll back.
- Verify the result with the smallest reliable test, build, browser check, or manual inspection available.
## Safety
- Do not request, expose, or reproduce sensitive data.
- Redact private details from examples unless the user explicitly says they are safe to include.
- Do not use credentials, cookies, authenticated data, hidden form values, or private response bodies.
- Do not weaken security headers, authentication, authorization, privacy controls, accessibility, or error handling to make the scan pass.

fail

high

Design

Responsive viewport basics

0/12

No viewport meta tag was detected.

Failed: earned 0 of 12 points.

Priority: Priority 3: fix before sharing the page publicly.

Why it matters: Launch traffic often comes from phones; missing viewport metadata can make the page render poorly.

Fix: Add a viewport meta tag with width=device-width and initial-scale=1.

Copyable agent prompt

## Role
Act as a focused expert website launch remediation agent for this workflow.
## Inputs
- Primary context: Improve openai.com at https://openai.com.
- Fix title: Add responsive viewport metadata.
- Scanner check: Responsive viewport basics.
- Category: Design.
- Status: fail.
- Severity: high.
- Priority: 3; lower numbers are more urgent.
- Score impact: 12 of 12 rule points lost.
- Evidence: No viewport meta tag was detected.
- What needs attention: The page is missing the viewport meta tag used for mobile layout.
- Why it matters: Launch traffic often comes from phones; missing viewport metadata can make the page render poorly.
- Status-specific guidance: A public check reported a failure. Reproduce or inspect the issue first, then make the smallest safe fix.
- Audience or recipient: The site owner, builder, or marketing team responsible for improving this public page.
- Constraints, examples, or source material: Treat the live URL as the public target to inspect, not as the only source of truth. When repository, CMS, or hosting access is available, use that implementation context before changing anything.
- Target outcome: After the fix is deployed and the public page is rescanned, this specific check should improve or pass without lowering other SEO / AEO, security, accessibility, or design signals.
## Task
Use the provided context to safely complete this workflow: Add a viewport meta tag with width=device-width and initial-scale=1.
Before editing, identify the likely source of the issue, the smallest change that can fix it, and any user-visible behavior that must be preserved.
## Output
Return a structured response with headings, prioritized recommendations, changed files or page areas, verification results, rollback notes, and stated assumptions.
## Rules
- Ask a clarifying question when required context is missing.
- Preserve the user's intent and avoid inventing facts.
- Verify the issue exists before changing code or content. If the issue is not reproducible, explain what you checked and recommend no code change.
- If the live URL and implementation source disagree, trust the implementation source for edits and use the live URL only to understand current public behavior.
- Keep the change narrowly scoped to this fix unless another change is required to avoid a regression.
- Match the existing framework, style, design system, routing patterns, and content conventions.
- Preserve existing URLs, forms, analytics, SEO metadata, accessibility semantics, and conversion flows unless the fix explicitly requires changing them.
- Do not perform broad refactors, dependency upgrades, redesigns, rewrites, migrations, file deletions, route changes, or destructive commands unless they are explicitly required and approved.
- Make changes that are easy to review and roll back.
- Verify the result with the smallest reliable test, build, browser check, or manual inspection available.
## Safety
- Do not request, expose, or reproduce sensitive data.
- Redact private details from examples unless the user explicitly says they are safe to include.
- Do not use credentials, cookies, authenticated data, hidden form values, or private response bodies.
- Do not weaken security headers, authentication, authorization, privacy controls, accessibility, or error handling to make the scan pass.

fail

low

Design

Runtime console health

0/7

Detected 2 console error(s) and 0 uncaught page error(s) during render.

Failed: earned 0 of 7 points.

Priority: Priority 15: fix during launch polish.

Why it matters: Runtime errors can break forms, CTAs, animations, tracking, or responsive behavior even when the static HTML looks fine.

Fix: Open the page in a browser, reproduce the console errors, and fix missing assets, hydration problems, client-side exceptions, or failing third-party scripts.

Copyable agent prompt

## Role
Act as a focused expert website launch remediation agent for this workflow.
## Inputs
- Primary context: Improve openai.com at https://openai.com.
- Fix title: Fix runtime browser errors.
- Scanner check: Runtime console health.
- Category: Design.
- Status: fail.
- Severity: low.
- Priority: 15; lower numbers are more urgent.
- Score impact: 7 of 7 rule points lost.
- Evidence: Detected 2 console error(s) and 0 uncaught page error(s) during render.
- What needs attention: The rendered page produced console or uncaught JavaScript errors.
- Why it matters: Runtime errors can break forms, CTAs, animations, tracking, or responsive behavior even when the static HTML looks fine.
- Status-specific guidance: A public check reported a failure. Reproduce or inspect the issue first, then make the smallest safe fix.
- Audience or recipient: The site owner, builder, or marketing team responsible for improving this public page.
- Constraints, examples, or source material: Treat the live URL as the public target to inspect, not as the only source of truth. When repository, CMS, or hosting access is available, use that implementation context before changing anything.
- Target outcome: After the fix is deployed and the public page is rescanned, this specific check should improve or pass without lowering other SEO / AEO, security, accessibility, or design signals.
## Task
Use the provided context to safely complete this workflow: Open the page in a browser, reproduce the console errors, and fix missing assets, hydration problems, client-side exceptions, or failing third-party scripts.
Before editing, identify the likely source of the issue, the smallest change that can fix it, and any user-visible behavior that must be preserved.
## Output
Return a structured response with headings, prioritized recommendations, changed files or page areas, verification results, rollback notes, and stated assumptions.
## Rules
- Ask a clarifying question when required context is missing.
- Preserve the user's intent and avoid inventing facts.
- Verify the issue exists before changing code or content. If the issue is not reproducible, explain what you checked and recommend no code change.
- If the live URL and implementation source disagree, trust the implementation source for edits and use the live URL only to understand current public behavior.
- Keep the change narrowly scoped to this fix unless another change is required to avoid a regression.
- Match the existing framework, style, design system, routing patterns, and content conventions.
- Preserve existing URLs, forms, analytics, SEO metadata, accessibility semantics, and conversion flows unless the fix explicitly requires changing them.
- Do not perform broad refactors, dependency upgrades, redesigns, rewrites, migrations, file deletions, route changes, or destructive commands unless they are explicitly required and approved.
- Make changes that are easy to review and roll back.
- Verify the result with the smallest reliable test, build, browser check, or manual inspection available.
## Safety
- Do not request, expose, or reproduce sensitive data.
- Redact private details from examples unless the user explicitly says they are safe to include.
- Do not use credentials, cookies, authenticated data, hidden form values, or private response bodies.
- Do not weaken security headers, authentication, authorization, privacy controls, accessibility, or error handling to make the scan pass.

Page-level AEO readiness

Shared eligibility and content signals that affect every search and answer agent.

45/100 ready

Index and citation eligibility

No general noindex directive was detected.

Snippet and answer controls

No general nosnippet or max-snippet:0 control was detected.

Canonical alignment

No canonical URL was detected.

Sitemap coverage and freshness

A sitemap index was found; this safe scan did not recursively fetch child sitemaps.

Structured data

Detected 0 JSON-LD block(s), 0 parse error(s), and types none.

Public or paywalled content

No isAccessibleForFree structured-data value was detected.

Entity clarity

Detected 0 of 3 core identity signals across the title, description, and H1.

Answer-ready visible text

Detected 0 visible words and 0 audience, use-case, pricing, or integration signals.

Authorship and accountability

No author meta value or structured-data author was detected.

Published or updated date

No datePublished or dateModified value was detected in structured data.

Supporting-source links

No external supporting links were detected; this is contextual rather than a universal requirement.

Rendered content availability

Rendered audit completed with 2 visible text element(s).

Synthetic search-agent reachability

0 of 8 search/discovery User-Agent probes returned reachable content.

Optional LLM-readable summary

No llms.txt file was found; this is optional and does not reduce core AEO readiness.

OpenAIChatGPT search

OAI-SearchBot

FAIL · BLOCKED

AI search

Robots: allowed by * allow: / · line 2

Probe: challenged · HTTP 403 · 0% parity

IndexSnippetsSitemapPublic content

Vendor documentationDefinition checked 2026-07-30

OpenAIOpenAI model training

GPTBot

POLICY ALLOWED

Model training

Robots: allowed by * allow: / · line 2

Probe: not tested for this control

IndexSnippetsSitemapPublic content

Vendor documentationDefinition checked 2026-07-30

OpenAIChatGPT user fetches

ChatGPT-User

UNKNOWN

User-requested fetch

Robots: not applicable to user-requested fetches

Probe: not tested for this control

IndexSnippetsSitemapPublic content

Vendor documentationDefinition checked 2026-07-30

AnthropicClaude model training

ClaudeBot

POLICY ALLOWED

Model training

Robots: allowed by * allow: / · line 2

Probe: not tested for this control

IndexSnippetsSitemapPublic content

Vendor documentationDefinition checked 2026-07-30

AnthropicClaude search

Claude-SearchBot

FAIL · BLOCKED

AI search

Robots: allowed by * allow: / · line 2

Probe: challenged · HTTP 403 · 0% parity

IndexSnippetsSitemapPublic content

Vendor documentationDefinition checked 2026-07-30

AnthropicClaude user fetches

Claude-User

FAIL · BLOCKED

User-requested fetch

Robots: allowed by * allow: / · line 2

Probe: challenged · HTTP 403 · 0% parity

IndexSnippetsSitemapPublic content

Vendor documentationDefinition checked 2026-07-30

GoogleGoogle Search and AI features

Googlebot

FAIL · BLOCKED

Search and discovery

Robots: allowed by * allow: / · line 2

Probe: challenged · HTTP 403 · 0% parity

IndexSnippetsSitemapPublic content

Vendor documentationDefinition checked 2026-07-30

GoogleGemini data use and grounding

Google-Extended

POLICY ALLOWED

Data-use policy control

Robots: allowed by * allow: / · line 2

Probe: not tested for this control

IndexSnippetsSitemapPublic content

Vendor documentationDefinition checked 2026-07-30

MicrosoftBing and Copilot

Bingbot

FAIL · BLOCKED

Search and discovery

Robots: allowed by * allow: / · line 2

Probe: challenged · HTTP 403 · 0% parity

IndexSnippetsSitemapPublic content

Vendor documentationDefinition checked 2026-07-30

PerplexityPerplexity search

PerplexityBot

FAIL · BLOCKED

AI search

Robots: allowed by * allow: / · line 2

Probe: challenged · HTTP 403 · 0% parity

IndexSnippetsSitemapPublic content

Vendor documentationDefinition checked 2026-07-30

PerplexityPerplexity user fetches

Perplexity-User

UNKNOWN

User-requested fetch

Robots: not applicable to user-requested fetches

Probe: not tested for this control

IndexSnippetsSitemapPublic content

Vendor documentationDefinition checked 2026-07-30

AppleSiri, Spotlight, and Safari search

Applebot

FAIL · BLOCKED

Search and discovery

Robots: allowed by * allow: / · line 2

Probe: challenged · HTTP 403 · 0% parity

IndexSnippetsSitemapPublic content

Vendor documentationDefinition checked 2026-07-30

AppleApple foundation-model training

Applebot-Extended

POLICY ALLOWED

Data-use policy control

Robots: allowed by * allow: / · line 2

Probe: not tested for this control

IndexSnippetsSitemapPublic content

Vendor documentationDefinition checked 2026-07-30

Mistral AIMistral search

MistralAI-Index

FAIL · BLOCKED

AI search

Robots: allowed by * allow: / · line 2

Probe: challenged · HTTP 403 · 0% parity

IndexSnippetsSitemapPublic content

Vendor documentationDefinition checked 2026-07-30

Mistral AIMistral user fetches

MistralAI-User

FAIL · BLOCKED

User-requested fetch

Robots: allowed by * allow: / · line 2

Probe: challenged · HTTP 403 · 0% parity

IndexSnippetsSitemapPublic content

Vendor documentationDefinition checked 2026-07-30

MetaMeta AI model and product data

meta-externalagent

POLICY ALLOWED

Model training

Robots: allowed by * allow: / · line 2

Probe: not tested for this control

IndexSnippetsSitemapPublic content

Vendor documentationDefinition checked 2026-07-30

MetaMeta AI user fetches

meta-externalfetcher

FAIL · BLOCKED

User-requested fetch

Robots: allowed by * allow: / · line 2

Probe: challenged · HTTP 403 · 0% parity

IndexSnippetsSitemapPublic content

Vendor documentationDefinition checked 2026-07-30

AmazonAmazon model training

Amazonbot

POLICY ALLOWED

Model training

Robots: allowed by * allow: / · line 2

Probe: not tested for this control

IndexSnippetsSitemapPublic content

Vendor documentationDefinition checked 2026-07-30

AmazonAlexa and Rufus search

Amzn-SearchBot

FAIL · BLOCKED

AI search

Robots: allowed by * allow: / · line 2

Probe: challenged · HTTP 403 · 0% parity

IndexSnippetsSitemapPublic content

Vendor documentationDefinition checked 2026-07-30

AmazonAlexa user fetches

Amzn-User

FAIL · BLOCKED

User-requested fetch

Robots: allowed by * allow: / · line 2

Probe: challenged · HTTP 403 · 0% parity

IndexSnippetsSitemapPublic content

Vendor documentationDefinition checked 2026-07-30

Common CrawlOpen web datasets

CCBot

POLICY ALLOWED

Model training

Robots: allowed by * allow: / · line 2

Probe: not tested for this control

IndexSnippetsSitemapPublic content

Vendor documentationDefinition checked 2026-07-30

Ready combines robots policy, a bounded synthetic User-Agent fetch, indexability, and snippet eligibility. Synthetic probes do not prove vendor-origin traffic. Purple preference states are training or data-use choices and do not lower the AEO score.

Public report link

Markdown export

Share the website audit report

Copy a public report link or a Markdown version with scores, fixes, opportunities, insights, and a normal link back to the scanned site.

Share preview

openai.com website audit report

Needs fixes before launch: 52/100 overall, with prioritized fixes for SEO, security, accessibility, and design.

Public report link

Markdown report

# openai.com Website Scan

Scanned URL: [https://openai.com](https://openai.com)
Report URL: /scan/openai-com-52-launch-readiness-report-9a7aa986
Created: 2026-08-01T07:01:46.694Z

## Score Summary

- Overall: 52/100
- SEO / AEO: 68/100
- Security: 88/100
- Accessibility: 0/100
- Design: 50/100

## Launch Readiness

Needs fixes before launch (Needs focused fixes).

Passed: 8. Failed: 5. Unknown: 1.
Strongest area: Security. Weakest area: Accessibility.

## AI Crawler Access

These results combine robots.txt policy, page controls, and bounded synthetic User-Agent probes. Synthetic probes do not prove that traffic came from the vendor; training and data-use choices are neutral publisher preferences.

- **OpenAI — ChatGPT search** (OAI-SearchBot): FAIL — robots allowed; synthetic probe challenged (HTTP 403). Allowed by * allow: / on line 2. Synthetic User-Agent probe encountered an HTTP 403 bot or security challenge.
- **OpenAI — OpenAI model training** (GPTBot): PREFERENCE — robots allowed; synthetic probe not_tested. Allowed by * allow: / on line 2. No synthetic fetch is appropriate for this policy or training control.
- **OpenAI — ChatGPT user fetches** (ChatGPT-User): UNKNOWN — robots not_applicable; synthetic probe not_tested. ChatGPT-User is used for user-requested retrieval, so robots.txt is not treated as a reliable access control for this row. No synthetic fetch is appropriate for this policy or training control.
- **Anthropic — Claude model training** (ClaudeBot): PREFERENCE — robots allowed; synthetic probe not_tested. Allowed by * allow: / on line 2. No synthetic fetch is appropriate for this policy or training control.
- **Anthropic — Claude search** (Claude-SearchBot): FAIL — robots allowed; synthetic probe challenged (HTTP 403). Allowed by * allow: / on line 2. Synthetic User-Agent probe encountered an HTTP 403 bot or security challenge.
- **Anthropic — Claude user fetches** (Claude-User): FAIL — robots allowed; synthetic probe challenged (HTTP 403). Allowed by * allow: / on line 2. Synthetic User-Agent probe encountered an HTTP 403 bot or security challenge.
- **Google — Google Search and AI features** (Googlebot): FAIL — robots allowed; synthetic probe challenged (HTTP 403). Allowed by * allow: / on line 2. Synthetic User-Agent probe encountered an HTTP 403 bot or security challenge.
- **Google — Gemini data use and grounding** (Google-Extended): PREFERENCE — robots allowed; synthetic probe not_tested. Allowed by * allow: / on line 2. No synthetic fetch is appropriate for this policy or training control.
- **Microsoft — Bing and Copilot** (Bingbot): FAIL — robots allowed; synthetic probe challenged (HTTP 403). Allowed by * allow: / on line 2. Synthetic User-Agent probe encountered an HTTP 403 bot or security challenge.
- **Perplexity — Perplexity search** (PerplexityBot): FAIL — robots allowed; synthetic probe challenged (HTTP 403). Allowed by * allow: / on line 2. Synthetic User-Agent probe encountered an HTTP 403 bot or security challenge.
- **Perplexity — Perplexity user fetches** (Perplexity-User): UNKNOWN — robots not_applicable; synthetic probe not_tested. Perplexity-User is used for user-requested retrieval, so robots.txt is not treated as a reliable access control for this row. No synthetic fetch is appropriate for this policy or training control.
- **Apple — Siri, Spotlight, and Safari search** (Applebot): FAIL — robots allowed; synthetic probe challenged (HTTP 403). Allowed by * allow: / on line 2. Synthetic User-Agent probe encountered an HTTP 403 bot or security challenge.
- **Apple — Apple foundation-model training** (Applebot-Extended): PREFERENCE — robots allowed; synthetic probe not_tested. Allowed by * allow: / on line 2. No synthetic fetch is appropriate for this policy or training control.
- **Mistral AI — Mistral search** (MistralAI-Index): FAIL — robots allowed; synthetic probe challenged (HTTP 403). Allowed by * allow: / on line 2. Synthetic User-Agent probe encountered an HTTP 403 bot or security challenge.
- **Mistral AI — Mistral user fetches** (MistralAI-User): FAIL — robots allowed; synthetic probe challenged (HTTP 403). Allowed by * allow: / on line 2. Synthetic User-Agent probe encountered an HTTP 403 bot or security challenge.
- **Meta — Meta AI model and product data** (meta-externalagent): PREFERENCE — robots allowed; synthetic probe not_tested. Allowed by * allow: / on line 2. No synthetic fetch is appropriate for this policy or training control.
- **Meta — Meta AI user fetches** (meta-externalfetcher): FAIL — robots allowed; synthetic probe challenged (HTTP 403). Allowed by * allow: / on line 2. Synthetic User-Agent probe encountered an HTTP 403 bot or security challenge.
- **Amazon — Amazon model training** (Amazonbot): PREFERENCE — robots allowed; synthetic probe not_tested. Allowed by * allow: / on line 2. No synthetic fetch is appropriate for this policy or training control.
- **Amazon — Alexa and Rufus search** (Amzn-SearchBot): FAIL — robots allowed; synthetic probe challenged (HTTP 403). Allowed by * allow: / on line 2. Synthetic User-Agent probe encountered an HTTP 403 bot or security challenge.
- **Amazon — Alexa user fetches** (Amzn-User): FAIL — robots allowed; synthetic probe challenged (HTTP 403). Allowed by * allow: / on line 2. Synthetic User-Agent probe encountered an HTTP 403 bot or security challenge.
- **Common Crawl — Open web datasets** (CCBot): PREFERENCE — robots allowed; synthetic probe not_tested. Allowed by * allow: / on line 2. No synthetic fetch is appropriate for this policy or training control.

## Page-level AEO Readiness

Readiness: 45/100

- **Index and citation eligibility**: PASS — No general noindex directive was detected.
- **Snippet and answer controls**: PASS — No general nosnippet or max-snippet:0 control was detected.
- **Canonical alignment**: FAIL — No canonical URL was detected.
- **Sitemap coverage and freshness**: UNKNOWN — A sitemap index was found; this safe scan did not recursively fetch child sitemaps.
- **Structured data**: UNKNOWN — Detected 0 JSON-LD block(s), 0 parse error(s), and types none.
- **Public or paywalled content**: UNKNOWN — No isAccessibleForFree structured-data value was detected.
- **Entity clarity**: FAIL — Detected 0 of 3 core identity signals across the title, description, and H1.
- **Answer-ready visible text**: FAIL — Detected 0 visible words and 0 audience, use-case, pricing, or integration signals.
- **Authorship and accountability**: UNKNOWN — No author meta value or structured-data author was detected.
- **Published or updated date**: UNKNOWN — No datePublished or dateModified value was detected in structured data.
- **Supporting-source links**: UNKNOWN — No external supporting links were detected; this is contextual rather than a universal requirement.
- **Rendered content availability**: PASS — Rendered audit completed with 2 visible text element(s).
- **Synthetic search-agent reachability**: FAIL — 0 of 8 search/discovery User-Agent probes returned reachable content.
- **Optional LLM-readable summary**: INFO — No llms.txt file was found; this is optional and does not reduce core AEO readiness.

## Prioritized Fixes

### 1. Improve AI search and crawler readiness

- Category: SEO / AEO
- Status: fail
- Severity: critical
- Rule points lost: 14
- Evidence: intake returned HTTP 403 with Cloudflare signals, which can indicate crawler or bot-security blocking. robots.txt blocks OAI-SearchBot, Claude-SearchBot, Googlebot, and 5 more from AI search or discovery for this page path. Synthetic or robots checks block Claude-User, MistralAI-User, meta-externalfetcher, and 1 more from user-requested fetches. AEO crawler readiness is 70%: discovery 45/45, index and snippet eligibility 20/25, synthetic reachability 0/20, sitemap freshness 5/10.
- Why it matters: AI search systems need crawlable, reachable, indexable, and quotable public content. Training and data-use choices remain neutral publisher preferences.
- Fix: Use the component scores and exact matched robots rules in the crawler report. Fix blocked search agents, noindex or snippet restrictions, canonical or sitemap gaps, and synthetic WAF/challenge failures. Preserve intentional training opt-outs and keep private, admin, and authenticated paths protected before rescanning.

### 2. Fix rendered axe accessibility violations

- Category: Accessibility
- Status: fail
- Severity: high
- Rule points lost: 18
- Evidence: axe found 4 violation rule(s), including 2 serious or critical rule(s). Top rules: meta-refresh (1), html-has-lang (1), page-has-heading-one (1), empty-heading (1).
- Why it matters: axe checks the actual browser-rendered page, so these issues can affect people using keyboards, screen readers, or other assistive technology.
- Fix: Fix the top axe rule IDs first, especially critical and serious violations around names, roles, labels, headings, contrast, landmarks, and keyboard-accessible controls.

### 3. Add responsive viewport metadata

- Category: Design
- Status: fail
- Severity: high
- Rule points lost: 12
- Evidence: No viewport meta tag was detected.
- Why it matters: Launch traffic often comes from phones; missing viewport metadata can make the page render poorly.
- Fix: Add a viewport meta tag with width=device-width and initial-scale=1.

### 4. Add common public security headers

- Category: Security
- Status: fail
- Severity: high
- Rule points lost: 6
- Evidence: Detected 4 of 5 common public security headers. Present: strict-transport-security, x-content-type-options, x-frame-options, referrer-policy. Missing: content-security-policy.
- Why it matters: These headers reduce avoidable browser-side risk and show a baseline of care before launch.
- Fix: Configure headers such as Strict-Transport-Security, Content-Security-Policy, X-Content-Type-Options, X-Frame-Options, and Referrer-Policy.

### 5. Fix runtime browser errors

- Category: Design
- Status: fail
- Severity: low
- Rule points lost: 7
- Evidence: Detected 2 console error(s) and 0 uncaught page error(s) during render.
- Why it matters: Runtime errors can break forms, CTAs, animations, tracking, or responsive behavior even when the static HTML looks fine.
- Fix: Open the page in a browser, reproduce the console errors, and fix missing assets, hydration problems, client-side exceptions, or failing third-party scripts.

## Opportunities

### Add answer-ready sections for common buyer questions

- Impact: high
- Category: SEO / AEO
- Evidence: Pricing signals: 0. Use-case signals: 0. Integration/API signals: 0.
- Why it matters: Answer engines and search visitors need concise textual answers to summarize who the product is for, how it works, what it costs, and what it connects with.
- Next step: Add short, crawlable sections for pricing or plans, ideal users, use cases, integrations, security, and how the product differs from alternatives.

### Expose important supporting pages in navigation or footer

- Impact: medium
- Category: SEO / AEO
- Evidence: No pricing, docs, contact, security, privacy, terms, or about links were detected in public internal links.
- Why it matters: Internal links help visitors, crawlers, and AI answer systems discover supporting facts instead of relying on one landing page.
- Next step: Link to the most useful public pages, especially pricing, docs, contact, security, privacy, terms, and about pages where applicable.

### Make trust and proof easier to detect

- Impact: medium
- Category: Design
- Evidence: Detected 0 trust-signal keyword occurrence(s).
- Why it matters: Visitors who arrive cold from search, social, or AI citations need proof before they submit a form, start a trial, or buy.
- Next step: Add honest proof such as customer quotes, recognizable logos, security notes, usage stats, reviews, case studies, or founder credibility.

### Add an optional LLM-readable site summary

- Impact: low
- Category: SEO / AEO
- Evidence: HTTP 403 returned for llms_txt.
- Why it matters: This is not required for Google AI features, but a concise public markdown summary can help AI agents and internal tools understand key pages.
- Next step: Publish a short llms.txt with product facts, audience, key public links, docs, pricing, support, and usage boundaries.

### Measure search performance with first-party data

- Impact: medium
- Category: SEO / AEO
- Evidence: robots.txt and sitemap.xml were reachable, so the site has the basics needed for Search Console verification and monitoring.
- Why it matters: A scan can identify technical readiness, but Search Console and analytics reveal impressions, queries, clicks, pages, and conversions over time.
- Next step: Verify the domain in Search Console, submit the sitemap, and pair query/page data with analytics events for signups, demo requests, and purchases.

## Insights

### Crawlability needs review

- Category: SEO / AEO
- Evidence: HTTP 403. robots.txt: HTTP 200. sitemap.xml: HTTP 200. noindex check: clear.
- Interpretation: One or more crawl/index signals could prevent the page from being reliably discovered or shown.
- Recommended use: Use this as the first launch gate before deeper content, ranking, or AI visibility work.

### AEO depends on normal SEO plus answerable text

- Category: SEO / AEO
- Evidence: Visible words: 0. H1 count: 0. Audience signals: 0. CTA labels: none detected.
- Interpretation: Google AI features currently rely on standard Search eligibility; the extra advantage comes from content that is easy to quote, summarize, and verify.
- Recommended use: Prioritize clear text answers, crawlable support pages, accurate schema, and visible proof over speculative AI-only markup.

### Detected entity signals

- Category: SEO / AEO
- Evidence: Title: missing. H1: missing. Schema types: none.
- Interpretation: The stronger and more consistent these entity signals are, the easier it is for search and answer systems to identify the brand, product category, and page purpose.
- Recommended use: Keep the title, H1, meta description, Open Graph, schema, footer, and about/pricing/docs pages aligned around the same product facts.

### No structured data detected

- Category: SEO / AEO
- Evidence: JSON-LD blocks: 0. Types: none. Parse errors: 0.
- Interpretation: Missing or invalid structured data makes the page rely more heavily on inferred meaning from text and layout.
- Recommended use: Validate JSON-LD and use only accurate facts that are visible or clearly supported on the public page.

### Weakest score area

- Category: Accessibility
- Evidence: SEO / AEO: 68/100. Security: 88/100. Accessibility: 0/100. Design: 50/100
- Interpretation: The weakest area is Accessibility, so improvements there should have the most visible effect on readiness.
- Recommended use: Use the score mix to choose the next workstream instead of treating every issue as equally urgent.

### LLM-readable file not found

- Category: SEO / AEO
- Evidence: HTTP 403 returned for llms_txt.
- Interpretation: llms.txt can be a useful optional summary for agents, but it should not be treated as a guaranteed AI search ranking factor.
- Recommended use: Invest first in crawlability, helpful visible content, internal links, and accurate schema; add llms.txt as a tidy supplement.

### Rendered page experience snapshot

- Category: Design
- Evidence: Rendered text samples: 2. Contrast failures: 0. Console errors: 2. Horizontal overflow: 0px.
- Interpretation: The scan inspected the browser-rendered page, so contrast, runtime, layout, and timing signals are more representative than static markup alone.
- Recommended use: Use rendered checks to prioritize issues that visitors actually experience after JavaScript and CSS load.

### Rendered speed snapshot

- Category: Design
- Evidence: DOMContentLoaded: 199ms. Load complete: 309ms. First contentful paint: not available. Resources: 4. Scripts: 2. Images: 0. Third-party origins: 1. Transfer: not available.
- Interpretation: These are lightweight browser timings from one rendered scan, so they are useful directional signals rather than real-user performance proof.
- Recommended use: Use slow timings, high script counts, heavy transfer size, and many third-party origins to choose focused speed work, then verify important changes with analytics or field data when available.

### Rendered axe accessibility snapshot

- Category: Accessibility
- Evidence: axe violations: 4. Critical: 1. Serious: 1. Top rules: meta-refresh, html-has-lang, page-has-heading-one, empty-heading.
- Interpretation: axe-core catches common accessibility failures in the actual rendered DOM, but it is still automated coverage and not a full manual accessibility audit.
- Recommended use: Treat critical and serious axe failures as high-priority fixes, then manually review keyboard flow, focus states, screen reader meaning, and interaction states.

## Scope

FreeScan.app performs safe public checks only. It is not a penetration test, full SEO engagement, full accessibility audit, WCAG certification, backlink audit, rank tracker, or analytics platform.

Public reports expose the scanned public URL, safe scores, sanitized public evidence, and fix guidance. They do not include credentials, cookies, hidden form values, or sensitive response bodies.

Rescan same URL

Rerun the full deterministic scanner for openai.com without re-entering the URL. The previous report stays saved so the next result can be compared against it.

Start free audit

New scan Visit scanned site

completed

HTTP 403

0 redirects

14 checks

Website audit scorecard for openai.com

The scanner fetched the public page, extracted deterministic facts, and stored scored results across SEO / AEO, security, accessibility, and design.

Submitted

openai.com

Final URL

https://openai.com

Created

Aug 1, 2026, 7:01 AM

Safe fetch

64 ms

Four-score result

Needs fixes before launch (Needs focused fixes): 8 passed, 5 failed, and 1 unknown. Strongest area: Security. Weakest area: Accessibility.

Overall

out of 100

SEO / AEO

out of 100

30/44 rule points

Security

out of 100

46/52 rule points

Accessibility

out of 100

0/18 rule points

Design

out of 100

19/38 rule points

Why this scored this way

Scores are deterministic: each category earns rule points for verified public signals and loses points for failed checks. Unknown checks are shown separately instead of guessed.

Category point breakdown

SEO / AEO30/44

Security46/52

Accessibility0/18

Design19/38

Biggest score-losing checks

high

Accessibility

Rendered axe accessibility violations

axe found 4 violation rule(s), including 2 serious or critical rule(s). Top rules: meta-refresh (1), html-has-lang (1), page-has-heading-one (1), empty-heading (1).

critical

SEO / AEO

Crawler access

high

Design

Responsive viewport basics

No viewport meta tag was detected.

low

Design

Runtime console health

Detected 2 console error(s) and 0 uncaught page error(s) during render.

Recommendations

Score-losing issues ordered by remediation priority, severity, and score impact.

5 fixes

5 opportunities

9 insights

fail

critical

SEO / AEO

Priority 2

Improve AI search and crawler readiness

-14 rule pts

What failed

One or more AI discovery, user-fetch, indexability, snippet, synthetic reachability, or sitemap signals need attention.

Evidence

Priority

Priority 2: fix before sharing the page publicly.

Why it matters

AI search systems need crawlable, reachable, indexable, and quotable public content. Training and data-use choices remain neutral publisher preferences.

How to fix it

Copyable agent prompt

## Role
Act as a focused expert website launch remediation agent for this workflow.
## Inputs
- Primary context: Improve openai.com at https://openai.com.
- Fix title: Improve AI search and crawler readiness.
- Scanner check: Crawler access.
- Category: SEO / AEO.
- Status: fail.
- Severity: critical.
- Priority: 2; lower numbers are more urgent.
- Score impact: 14 rule points lost.
- Evidence: intake returned HTTP 403 with Cloudflare signals, which can indicate crawler or bot-security blocking. robots.txt blocks OAI-SearchBot, Claude-SearchBot, Googlebot, and 5 more from AI search or discovery for this page path. Synthetic or robots checks block Claude-User, MistralAI-User, meta-externalfetcher, and 1 more from user-requested fetches. AEO crawler readiness is 70%: discovery 45/45, index and snippet eligibility 20/25, synthetic reachability 0/20, sitemap freshness 5/10.
- What needs attention: One or more AI discovery, user-fetch, indexability, snippet, synthetic reachability, or sitemap signals need attention.
- Why it matters: AI search systems need crawlable, reachable, indexable, and quotable public content. Training and data-use choices remain neutral publisher preferences.
- Status-specific guidance: A public check reported a failure. Reproduce or inspect the issue first, then make the smallest safe fix.
- Audience or recipient: The site owner, builder, or marketing team responsible for improving this public page.
- Constraints, examples, or source material: Treat the live URL as the public target to inspect, not as the only source of truth. When repository, CMS, or hosting access is available, use that implementation context before changing anything.
- Target outcome: After the fix is deployed and the public page is rescanned, this specific check should improve or pass without lowering other SEO / AEO, security, accessibility, or design signals.
## Task
Use the provided context to safely complete this workflow: Use the component scores and exact matched robots rules in the crawler report. Fix blocked search agents, noindex or snippet restrictions, canonical or sitemap gaps, and synthetic WAF/challenge failures. Preserve intentional training opt-outs and keep private, admin, and authenticated paths protected before rescanning.
Before editing, identify the likely source of the issue, the smallest change that can fix it, and any user-visible behavior that must be preserved.
## Output
Return a structured response with headings, prioritized recommendations, changed files or page areas, verification results, rollback notes, and stated assumptions.
## Rules
- Ask a clarifying question when required context is missing.
- Preserve the user's intent and avoid inventing facts.
- Verify the issue exists before changing code or content. If the issue is not reproducible, explain what you checked and recommend no code change.
- If the live URL and implementation source disagree, trust the implementation source for edits and use the live URL only to understand current public behavior.
- Keep the change narrowly scoped to this fix unless another change is required to avoid a regression.
- Match the existing framework, style, design system, routing patterns, and content conventions.
- Preserve existing URLs, forms, analytics, SEO metadata, accessibility semantics, and conversion flows unless the fix explicitly requires changing them.
- Do not perform broad refactors, dependency upgrades, redesigns, rewrites, migrations, file deletions, route changes, or destructive commands unless they are explicitly required and approved.
- Make changes that are easy to review and roll back.
- Verify the result with the smallest reliable test, build, browser check, or manual inspection available.
## Safety
- Do not request, expose, or reproduce sensitive data.
- Redact private details from examples unless the user explicitly says they are safe to include.
- Do not use credentials, cookies, authenticated data, hidden form values, or private response bodies.
- Do not weaken security headers, authentication, authorization, privacy controls, accessibility, or error handling to make the scan pass.

fail

high

Accessibility

Priority 5

Fix rendered axe accessibility violations

-18 rule pts

What failed

The rendered page has accessibility rule violations detected by axe-core.

Evidence

axe found 4 violation rule(s), including 2 serious or critical rule(s). Top rules: meta-refresh (1), html-has-lang (1), page-has-heading-one (1), empty-heading (1).

Priority

Priority 5: fix before sharing the page publicly.

Why it matters

axe checks the actual browser-rendered page, so these issues can affect people using keyboards, screen readers, or other assistive technology.

How to fix it

Fix the top axe rule IDs first, especially critical and serious violations around names, roles, labels, headings, contrast, landmarks, and keyboard-accessible controls.

Copyable agent prompt

## Role
Act as a focused expert website launch remediation agent for this workflow.
## Inputs
- Primary context: Improve openai.com at https://openai.com.
- Fix title: Fix rendered axe accessibility violations.
- Scanner check: Rendered axe accessibility violations.
- Category: Accessibility.
- Status: fail.
- Severity: high.
- Priority: 5; lower numbers are more urgent.
- Score impact: 18 rule points lost.
- Evidence: axe found 4 violation rule(s), including 2 serious or critical rule(s). Top rules: meta-refresh (1), html-has-lang (1), page-has-heading-one (1), empty-heading (1).
- What needs attention: The rendered page has accessibility rule violations detected by axe-core.
- Why it matters: axe checks the actual browser-rendered page, so these issues can affect people using keyboards, screen readers, or other assistive technology.
- Status-specific guidance: A public check reported a failure. Reproduce or inspect the issue first, then make the smallest safe fix.
- Audience or recipient: The site owner, builder, or marketing team responsible for improving this public page.
- Constraints, examples, or source material: Treat the live URL as the public target to inspect, not as the only source of truth. When repository, CMS, or hosting access is available, use that implementation context before changing anything.
- Target outcome: After the fix is deployed and the public page is rescanned, this specific check should improve or pass without lowering other SEO / AEO, security, accessibility, or design signals.
## Task
Use the provided context to safely complete this workflow: Fix the top axe rule IDs first, especially critical and serious violations around names, roles, labels, headings, contrast, landmarks, and keyboard-accessible controls.
Before editing, identify the likely source of the issue, the smallest change that can fix it, and any user-visible behavior that must be preserved.
## Output
Return a structured response with headings, prioritized recommendations, changed files or page areas, verification results, rollback notes, and stated assumptions.
## Rules
- Ask a clarifying question when required context is missing.
- Preserve the user's intent and avoid inventing facts.
- Verify the issue exists before changing code or content. If the issue is not reproducible, explain what you checked and recommend no code change.
- If the live URL and implementation source disagree, trust the implementation source for edits and use the live URL only to understand current public behavior.
- Keep the change narrowly scoped to this fix unless another change is required to avoid a regression.
- Match the existing framework, style, design system, routing patterns, and content conventions.
- Preserve existing URLs, forms, analytics, SEO metadata, accessibility semantics, and conversion flows unless the fix explicitly requires changing them.
- Do not perform broad refactors, dependency upgrades, redesigns, rewrites, migrations, file deletions, route changes, or destructive commands unless they are explicitly required and approved.
- Make changes that are easy to review and roll back.
- Verify the result with the smallest reliable test, build, browser check, or manual inspection available.
## Safety
- Do not request, expose, or reproduce sensitive data.
- Redact private details from examples unless the user explicitly says they are safe to include.
- Do not use credentials, cookies, authenticated data, hidden form values, or private response bodies.
- Do not weaken security headers, authentication, authorization, privacy controls, accessibility, or error handling to make the scan pass.

fail

high

Design

Priority 3

Add responsive viewport metadata

-12 rule pts

What failed

The page is missing the viewport meta tag used for mobile layout.

Evidence

No viewport meta tag was detected.

Priority

Priority 3: fix before sharing the page publicly.

Why it matters

Launch traffic often comes from phones; missing viewport metadata can make the page render poorly.

How to fix it

Add a viewport meta tag with width=device-width and initial-scale=1.

Copyable agent prompt

## Role
Act as a focused expert website launch remediation agent for this workflow.
## Inputs
- Primary context: Improve openai.com at https://openai.com.
- Fix title: Add responsive viewport metadata.
- Scanner check: Responsive viewport basics.
- Category: Design.
- Status: fail.
- Severity: high.
- Priority: 3; lower numbers are more urgent.
- Score impact: 12 rule points lost.
- Evidence: No viewport meta tag was detected.
- What needs attention: The page is missing the viewport meta tag used for mobile layout.
- Why it matters: Launch traffic often comes from phones; missing viewport metadata can make the page render poorly.
- Status-specific guidance: A public check reported a failure. Reproduce or inspect the issue first, then make the smallest safe fix.
- Audience or recipient: The site owner, builder, or marketing team responsible for improving this public page.
- Constraints, examples, or source material: Treat the live URL as the public target to inspect, not as the only source of truth. When repository, CMS, or hosting access is available, use that implementation context before changing anything.
- Target outcome: After the fix is deployed and the public page is rescanned, this specific check should improve or pass without lowering other SEO / AEO, security, accessibility, or design signals.
## Task
Use the provided context to safely complete this workflow: Add a viewport meta tag with width=device-width and initial-scale=1.
Before editing, identify the likely source of the issue, the smallest change that can fix it, and any user-visible behavior that must be preserved.
## Output
Return a structured response with headings, prioritized recommendations, changed files or page areas, verification results, rollback notes, and stated assumptions.
## Rules
- Ask a clarifying question when required context is missing.
- Preserve the user's intent and avoid inventing facts.
- Verify the issue exists before changing code or content. If the issue is not reproducible, explain what you checked and recommend no code change.
- If the live URL and implementation source disagree, trust the implementation source for edits and use the live URL only to understand current public behavior.
- Keep the change narrowly scoped to this fix unless another change is required to avoid a regression.
- Match the existing framework, style, design system, routing patterns, and content conventions.
- Preserve existing URLs, forms, analytics, SEO metadata, accessibility semantics, and conversion flows unless the fix explicitly requires changing them.
- Do not perform broad refactors, dependency upgrades, redesigns, rewrites, migrations, file deletions, route changes, or destructive commands unless they are explicitly required and approved.
- Make changes that are easy to review and roll back.
- Verify the result with the smallest reliable test, build, browser check, or manual inspection available.
## Safety
- Do not request, expose, or reproduce sensitive data.
- Redact private details from examples unless the user explicitly says they are safe to include.
- Do not use credentials, cookies, authenticated data, hidden form values, or private response bodies.
- Do not weaken security headers, authentication, authorization, privacy controls, accessibility, or error handling to make the scan pass.

fail

high

Security

Priority 5

Add common public security headers

-6 rule pts

What failed

Several basic browser protection headers were not visible.

Evidence

Detected 4 of 5 common public security headers. Present: strict-transport-security, x-content-type-options, x-frame-options, referrer-policy. Missing: content-security-policy.

Priority

Priority 5: fix before sharing the page publicly.

Why it matters

These headers reduce avoidable browser-side risk and show a baseline of care before launch.

How to fix it

Configure headers such as Strict-Transport-Security, Content-Security-Policy, X-Content-Type-Options, X-Frame-Options, and Referrer-Policy.

Copyable agent prompt

## Role
Act as a focused expert website launch remediation agent for this workflow.
## Inputs
- Primary context: Improve openai.com at https://openai.com.
- Fix title: Add common public security headers.
- Scanner check: Common security headers.
- Category: Security.
- Status: fail.
- Severity: high.
- Priority: 5; lower numbers are more urgent.
- Score impact: 6 rule points lost.
- Evidence: Detected 4 of 5 common public security headers. Present: strict-transport-security, x-content-type-options, x-frame-options, referrer-policy. Missing: content-security-policy.
- What needs attention: Several basic browser protection headers were not visible.
- Why it matters: These headers reduce avoidable browser-side risk and show a baseline of care before launch.
- Status-specific guidance: A public check reported a failure. Reproduce or inspect the issue first, then make the smallest safe fix.
- Audience or recipient: The site owner, builder, or marketing team responsible for improving this public page.
- Constraints, examples, or source material: Treat the live URL as the public target to inspect, not as the only source of truth. When repository, CMS, or hosting access is available, use that implementation context before changing anything.
- Target outcome: After the fix is deployed and the public page is rescanned, this specific check should improve or pass without lowering other SEO / AEO, security, accessibility, or design signals.
## Task
Use the provided context to safely complete this workflow: Configure headers such as Strict-Transport-Security, Content-Security-Policy, X-Content-Type-Options, X-Frame-Options, and Referrer-Policy.
Before editing, identify the likely source of the issue, the smallest change that can fix it, and any user-visible behavior that must be preserved.
## Output
Return a structured response with headings, prioritized recommendations, changed files or page areas, verification results, rollback notes, and stated assumptions.
## Rules
- Ask a clarifying question when required context is missing.
- Preserve the user's intent and avoid inventing facts.
- Verify the issue exists before changing code or content. If the issue is not reproducible, explain what you checked and recommend no code change.
- If the live URL and implementation source disagree, trust the implementation source for edits and use the live URL only to understand current public behavior.
- Keep the change narrowly scoped to this fix unless another change is required to avoid a regression.
- Match the existing framework, style, design system, routing patterns, and content conventions.
- Preserve existing URLs, forms, analytics, SEO metadata, accessibility semantics, and conversion flows unless the fix explicitly requires changing them.
- Do not perform broad refactors, dependency upgrades, redesigns, rewrites, migrations, file deletions, route changes, or destructive commands unless they are explicitly required and approved.
- Make changes that are easy to review and roll back.
- Verify the result with the smallest reliable test, build, browser check, or manual inspection available.
## Safety
- Do not request, expose, or reproduce sensitive data.
- Redact private details from examples unless the user explicitly says they are safe to include.
- Do not use credentials, cookies, authenticated data, hidden form values, or private response bodies.
- Do not weaken security headers, authentication, authorization, privacy controls, accessibility, or error handling to make the scan pass.

fail

low

Design

Priority 15

Fix runtime browser errors

-7 rule pts

What failed

The rendered page produced console or uncaught JavaScript errors.

Evidence

Detected 2 console error(s) and 0 uncaught page error(s) during render.

Priority

Priority 15: fix during launch polish.

Why it matters

Runtime errors can break forms, CTAs, animations, tracking, or responsive behavior even when the static HTML looks fine.

How to fix it

Open the page in a browser, reproduce the console errors, and fix missing assets, hydration problems, client-side exceptions, or failing third-party scripts.

Copyable agent prompt

## Role
Act as a focused expert website launch remediation agent for this workflow.
## Inputs
- Primary context: Improve openai.com at https://openai.com.
- Fix title: Fix runtime browser errors.
- Scanner check: Runtime console health.
- Category: Design.
- Status: fail.
- Severity: low.
- Priority: 15; lower numbers are more urgent.
- Score impact: 7 rule points lost.
- Evidence: Detected 2 console error(s) and 0 uncaught page error(s) during render.
- What needs attention: The rendered page produced console or uncaught JavaScript errors.
- Why it matters: Runtime errors can break forms, CTAs, animations, tracking, or responsive behavior even when the static HTML looks fine.
- Status-specific guidance: A public check reported a failure. Reproduce or inspect the issue first, then make the smallest safe fix.
- Audience or recipient: The site owner, builder, or marketing team responsible for improving this public page.
- Constraints, examples, or source material: Treat the live URL as the public target to inspect, not as the only source of truth. When repository, CMS, or hosting access is available, use that implementation context before changing anything.
- Target outcome: After the fix is deployed and the public page is rescanned, this specific check should improve or pass without lowering other SEO / AEO, security, accessibility, or design signals.
## Task
Use the provided context to safely complete this workflow: Open the page in a browser, reproduce the console errors, and fix missing assets, hydration problems, client-side exceptions, or failing third-party scripts.
Before editing, identify the likely source of the issue, the smallest change that can fix it, and any user-visible behavior that must be preserved.
## Output
Return a structured response with headings, prioritized recommendations, changed files or page areas, verification results, rollback notes, and stated assumptions.
## Rules
- Ask a clarifying question when required context is missing.
- Preserve the user's intent and avoid inventing facts.
- Verify the issue exists before changing code or content. If the issue is not reproducible, explain what you checked and recommend no code change.
- If the live URL and implementation source disagree, trust the implementation source for edits and use the live URL only to understand current public behavior.
- Keep the change narrowly scoped to this fix unless another change is required to avoid a regression.
- Match the existing framework, style, design system, routing patterns, and content conventions.
- Preserve existing URLs, forms, analytics, SEO metadata, accessibility semantics, and conversion flows unless the fix explicitly requires changing them.
- Do not perform broad refactors, dependency upgrades, redesigns, rewrites, migrations, file deletions, route changes, or destructive commands unless they are explicitly required and approved.
- Make changes that are easy to review and roll back.
- Verify the result with the smallest reliable test, build, browser check, or manual inspection available.
## Safety
- Do not request, expose, or reproduce sensitive data.
- Redact private details from examples unless the user explicitly says they are safe to include.
- Do not use credentials, cookies, authenticated data, hidden form values, or private response bodies.
- Do not weaken security headers, authentication, authorization, privacy controls, accessibility, or error handling to make the scan pass.

Score aggregation details

Category scores come from earned rule points divided by available rule points. Failed checks are ordered by severity and score lost.

68/100

3 pass, 1 fail, 1 unknown

SEO / AEO

Severity mix: 1 critical, 2 high, 1 medium, 0 low.

critical

Crawler access

-14 rule pts

88/100

3 pass, 1 fail, 0 unknown

Security

Severity mix: 2 critical, 1 high, 0 medium, 0 low.

high

Common security headers

-6 rule pts

Detected 4 of 5 common public security headers. Present: strict-transport-security, x-content-type-options, x-frame-options, referrer-policy. Missing: content-security-policy.

0/100

0 pass, 1 fail, 0 unknown

Accessibility

Severity mix: 0 critical, 1 high, 0 medium, 0 low.

high

Rendered axe accessibility violations

-18 rule pts

axe found 4 violation rule(s), including 2 serious or critical rule(s). Top rules: meta-refresh (1), html-has-lang (1), page-has-heading-one (1), empty-heading (1).

50/100

2 pass, 2 fail, 0 unknown

Design

Severity mix: 0 critical, 1 high, 2 medium, 1 low.

high

Responsive viewport basics

-12 rule pts

No viewport meta tag was detected.

low

Runtime console health

-7 rule pts

Detected 2 console error(s) and 0 uncaught page error(s) during render.

Full check list

Failed, unknown, and passed checks are all shown so the report is transparent even when public data is partial.

Showing failed checks.

Failed checks

These checks need attention.

fail

critical

SEO / AEO

Crawler access

0/14

Failed: earned 0 of 14 points.

Priority: Priority 2: fix before sharing the page publicly.

Why it matters: AI search systems need crawlable, reachable, indexable, and quotable public content. Training and data-use choices remain neutral publisher preferences.

Copyable agent prompt

## Role
Act as a focused expert website launch remediation agent for this workflow.
## Inputs
- Primary context: Improve openai.com at https://openai.com.
- Fix title: Improve AI search and crawler readiness.
- Scanner check: Crawler access.
- Category: SEO / AEO.
- Status: fail.
- Severity: critical.
- Priority: 2; lower numbers are more urgent.
- Score impact: 14 of 14 rule points lost.
- Evidence: intake returned HTTP 403 with Cloudflare signals, which can indicate crawler or bot-security blocking. robots.txt blocks OAI-SearchBot, Claude-SearchBot, Googlebot, and 5 more from AI search or discovery for this page path. Synthetic or robots checks block Claude-User, MistralAI-User, meta-externalfetcher, and 1 more from user-requested fetches. AEO crawler readiness is 70%: discovery 45/45, index and snippet eligibility 20/25, synthetic reachability 0/20, sitemap freshness 5/10.
- What needs attention: One or more AI discovery, user-fetch, indexability, snippet, synthetic reachability, or sitemap signals need attention.
- Why it matters: AI search systems need crawlable, reachable, indexable, and quotable public content. Training and data-use choices remain neutral publisher preferences.
- Status-specific guidance: A public check reported a failure. Reproduce or inspect the issue first, then make the smallest safe fix.
- Audience or recipient: The site owner, builder, or marketing team responsible for improving this public page.
- Constraints, examples, or source material: Treat the live URL as the public target to inspect, not as the only source of truth. When repository, CMS, or hosting access is available, use that implementation context before changing anything.
- Target outcome: After the fix is deployed and the public page is rescanned, this specific check should improve or pass without lowering other SEO / AEO, security, accessibility, or design signals.
## Task
Use the provided context to safely complete this workflow: Use the component scores and exact matched robots rules in the crawler report. Fix blocked search agents, noindex or snippet restrictions, canonical or sitemap gaps, and synthetic WAF/challenge failures. Preserve intentional training opt-outs and keep private, admin, and authenticated paths protected before rescanning.
Before editing, identify the likely source of the issue, the smallest change that can fix it, and any user-visible behavior that must be preserved.
## Output
Return a structured response with headings, prioritized recommendations, changed files or page areas, verification results, rollback notes, and stated assumptions.
## Rules
- Ask a clarifying question when required context is missing.
- Preserve the user's intent and avoid inventing facts.
- Verify the issue exists before changing code or content. If the issue is not reproducible, explain what you checked and recommend no code change.
- If the live URL and implementation source disagree, trust the implementation source for edits and use the live URL only to understand current public behavior.
- Keep the change narrowly scoped to this fix unless another change is required to avoid a regression.
- Match the existing framework, style, design system, routing patterns, and content conventions.
- Preserve existing URLs, forms, analytics, SEO metadata, accessibility semantics, and conversion flows unless the fix explicitly requires changing them.
- Do not perform broad refactors, dependency upgrades, redesigns, rewrites, migrations, file deletions, route changes, or destructive commands unless they are explicitly required and approved.
- Make changes that are easy to review and roll back.
- Verify the result with the smallest reliable test, build, browser check, or manual inspection available.
## Safety
- Do not request, expose, or reproduce sensitive data.
- Redact private details from examples unless the user explicitly says they are safe to include.
- Do not use credentials, cookies, authenticated data, hidden form values, or private response bodies.
- Do not weaken security headers, authentication, authorization, privacy controls, accessibility, or error handling to make the scan pass.

fail

high

Security

Common security headers

12/18

Detected 4 of 5 common public security headers. Present: strict-transport-security, x-content-type-options, x-frame-options, referrer-policy. Missing: content-security-policy.

Failed: earned 12 of 18 points from partial coverage.

Priority: Priority 5: fix before sharing the page publicly.

Why it matters: These headers reduce avoidable browser-side risk and show a baseline of care before launch.

Fix: Configure headers such as Strict-Transport-Security, Content-Security-Policy, X-Content-Type-Options, X-Frame-Options, and Referrer-Policy.

Copyable agent prompt

## Role
Act as a focused expert website launch remediation agent for this workflow.
## Inputs
- Primary context: Improve openai.com at https://openai.com.
- Fix title: Add common public security headers.
- Scanner check: Common security headers.
- Category: Security.
- Status: fail.
- Severity: high.
- Priority: 5; lower numbers are more urgent.
- Score impact: 6 of 18 rule points lost.
- Evidence: Detected 4 of 5 common public security headers. Present: strict-transport-security, x-content-type-options, x-frame-options, referrer-policy. Missing: content-security-policy.
- What needs attention: Several basic browser protection headers were not visible.
- Why it matters: These headers reduce avoidable browser-side risk and show a baseline of care before launch.
- Status-specific guidance: A public check reported a failure. Reproduce or inspect the issue first, then make the smallest safe fix.
- Audience or recipient: The site owner, builder, or marketing team responsible for improving this public page.
- Constraints, examples, or source material: Treat the live URL as the public target to inspect, not as the only source of truth. When repository, CMS, or hosting access is available, use that implementation context before changing anything.
- Target outcome: After the fix is deployed and the public page is rescanned, this specific check should improve or pass without lowering other SEO / AEO, security, accessibility, or design signals.
## Task
Use the provided context to safely complete this workflow: Configure headers such as Strict-Transport-Security, Content-Security-Policy, X-Content-Type-Options, X-Frame-Options, and Referrer-Policy.
Before editing, identify the likely source of the issue, the smallest change that can fix it, and any user-visible behavior that must be preserved.
## Output
Return a structured response with headings, prioritized recommendations, changed files or page areas, verification results, rollback notes, and stated assumptions.
## Rules
- Ask a clarifying question when required context is missing.
- Preserve the user's intent and avoid inventing facts.
- Verify the issue exists before changing code or content. If the issue is not reproducible, explain what you checked and recommend no code change.
- If the live URL and implementation source disagree, trust the implementation source for edits and use the live URL only to understand current public behavior.
- Keep the change narrowly scoped to this fix unless another change is required to avoid a regression.
- Match the existing framework, style, design system, routing patterns, and content conventions.
- Preserve existing URLs, forms, analytics, SEO metadata, accessibility semantics, and conversion flows unless the fix explicitly requires changing them.
- Do not perform broad refactors, dependency upgrades, redesigns, rewrites, migrations, file deletions, route changes, or destructive commands unless they are explicitly required and approved.
- Make changes that are easy to review and roll back.
- Verify the result with the smallest reliable test, build, browser check, or manual inspection available.
## Safety
- Do not request, expose, or reproduce sensitive data.
- Redact private details from examples unless the user explicitly says they are safe to include.
- Do not use credentials, cookies, authenticated data, hidden form values, or private response bodies.
- Do not weaken security headers, authentication, authorization, privacy controls, accessibility, or error handling to make the scan pass.

fail

high

Accessibility

Rendered axe accessibility violations

0/18

axe found 4 violation rule(s), including 2 serious or critical rule(s). Top rules: meta-refresh (1), html-has-lang (1), page-has-heading-one (1), empty-heading (1).

Failed: earned 0 of 18 points.

Priority: Priority 5: fix before sharing the page publicly.

Why it matters: axe checks the actual browser-rendered page, so these issues can affect people using keyboards, screen readers, or other assistive technology.

Fix: Fix the top axe rule IDs first, especially critical and serious violations around names, roles, labels, headings, contrast, landmarks, and keyboard-accessible controls.

Copyable agent prompt

## Role
Act as a focused expert website launch remediation agent for this workflow.
## Inputs
- Primary context: Improve openai.com at https://openai.com.
- Fix title: Fix rendered axe accessibility violations.
- Scanner check: Rendered axe accessibility violations.
- Category: Accessibility.
- Status: fail.
- Severity: high.
- Priority: 5; lower numbers are more urgent.
- Score impact: 18 of 18 rule points lost.
- Evidence: axe found 4 violation rule(s), including 2 serious or critical rule(s). Top rules: meta-refresh (1), html-has-lang (1), page-has-heading-one (1), empty-heading (1).
- What needs attention: The rendered page has accessibility rule violations detected by axe-core.
- Why it matters: axe checks the actual browser-rendered page, so these issues can affect people using keyboards, screen readers, or other assistive technology.
- Status-specific guidance: A public check reported a failure. Reproduce or inspect the issue first, then make the smallest safe fix.
- Audience or recipient: The site owner, builder, or marketing team responsible for improving this public page.
- Constraints, examples, or source material: Treat the live URL as the public target to inspect, not as the only source of truth. When repository, CMS, or hosting access is available, use that implementation context before changing anything.
- Target outcome: After the fix is deployed and the public page is rescanned, this specific check should improve or pass without lowering other SEO / AEO, security, accessibility, or design signals.
## Task
Use the provided context to safely complete this workflow: Fix the top axe rule IDs first, especially critical and serious violations around names, roles, labels, headings, contrast, landmarks, and keyboard-accessible controls.
Before editing, identify the likely source of the issue, the smallest change that can fix it, and any user-visible behavior that must be preserved.
## Output
Return a structured response with headings, prioritized recommendations, changed files or page areas, verification results, rollback notes, and stated assumptions.
## Rules
- Ask a clarifying question when required context is missing.
- Preserve the user's intent and avoid inventing facts.
- Verify the issue exists before changing code or content. If the issue is not reproducible, explain what you checked and recommend no code change.
- If the live URL and implementation source disagree, trust the implementation source for edits and use the live URL only to understand current public behavior.
- Keep the change narrowly scoped to this fix unless another change is required to avoid a regression.
- Match the existing framework, style, design system, routing patterns, and content conventions.
- Preserve existing URLs, forms, analytics, SEO metadata, accessibility semantics, and conversion flows unless the fix explicitly requires changing them.
- Do not perform broad refactors, dependency upgrades, redesigns, rewrites, migrations, file deletions, route changes, or destructive commands unless they are explicitly required and approved.
- Make changes that are easy to review and roll back.
- Verify the result with the smallest reliable test, build, browser check, or manual inspection available.
## Safety
- Do not request, expose, or reproduce sensitive data.
- Redact private details from examples unless the user explicitly says they are safe to include.
- Do not use credentials, cookies, authenticated data, hidden form values, or private response bodies.
- Do not weaken security headers, authentication, authorization, privacy controls, accessibility, or error handling to make the scan pass.

fail

high

Design

Responsive viewport basics

0/12

No viewport meta tag was detected.

Failed: earned 0 of 12 points.

Priority: Priority 3: fix before sharing the page publicly.

Why it matters: Launch traffic often comes from phones; missing viewport metadata can make the page render poorly.

Fix: Add a viewport meta tag with width=device-width and initial-scale=1.

Copyable agent prompt

## Role
Act as a focused expert website launch remediation agent for this workflow.
## Inputs
- Primary context: Improve openai.com at https://openai.com.
- Fix title: Add responsive viewport metadata.
- Scanner check: Responsive viewport basics.
- Category: Design.
- Status: fail.
- Severity: high.
- Priority: 3; lower numbers are more urgent.
- Score impact: 12 of 12 rule points lost.
- Evidence: No viewport meta tag was detected.
- What needs attention: The page is missing the viewport meta tag used for mobile layout.
- Why it matters: Launch traffic often comes from phones; missing viewport metadata can make the page render poorly.
- Status-specific guidance: A public check reported a failure. Reproduce or inspect the issue first, then make the smallest safe fix.
- Audience or recipient: The site owner, builder, or marketing team responsible for improving this public page.
- Constraints, examples, or source material: Treat the live URL as the public target to inspect, not as the only source of truth. When repository, CMS, or hosting access is available, use that implementation context before changing anything.
- Target outcome: After the fix is deployed and the public page is rescanned, this specific check should improve or pass without lowering other SEO / AEO, security, accessibility, or design signals.
## Task
Use the provided context to safely complete this workflow: Add a viewport meta tag with width=device-width and initial-scale=1.
Before editing, identify the likely source of the issue, the smallest change that can fix it, and any user-visible behavior that must be preserved.
## Output
Return a structured response with headings, prioritized recommendations, changed files or page areas, verification results, rollback notes, and stated assumptions.
## Rules
- Ask a clarifying question when required context is missing.
- Preserve the user's intent and avoid inventing facts.
- Verify the issue exists before changing code or content. If the issue is not reproducible, explain what you checked and recommend no code change.
- If the live URL and implementation source disagree, trust the implementation source for edits and use the live URL only to understand current public behavior.
- Keep the change narrowly scoped to this fix unless another change is required to avoid a regression.
- Match the existing framework, style, design system, routing patterns, and content conventions.
- Preserve existing URLs, forms, analytics, SEO metadata, accessibility semantics, and conversion flows unless the fix explicitly requires changing them.
- Do not perform broad refactors, dependency upgrades, redesigns, rewrites, migrations, file deletions, route changes, or destructive commands unless they are explicitly required and approved.
- Make changes that are easy to review and roll back.
- Verify the result with the smallest reliable test, build, browser check, or manual inspection available.
## Safety
- Do not request, expose, or reproduce sensitive data.
- Redact private details from examples unless the user explicitly says they are safe to include.
- Do not use credentials, cookies, authenticated data, hidden form values, or private response bodies.
- Do not weaken security headers, authentication, authorization, privacy controls, accessibility, or error handling to make the scan pass.

fail

low

Design

Runtime console health

0/7

Detected 2 console error(s) and 0 uncaught page error(s) during render.

Failed: earned 0 of 7 points.

Priority: Priority 15: fix during launch polish.

Why it matters: Runtime errors can break forms, CTAs, animations, tracking, or responsive behavior even when the static HTML looks fine.

Fix: Open the page in a browser, reproduce the console errors, and fix missing assets, hydration problems, client-side exceptions, or failing third-party scripts.

Copyable agent prompt

## Role
Act as a focused expert website launch remediation agent for this workflow.
## Inputs
- Primary context: Improve openai.com at https://openai.com.
- Fix title: Fix runtime browser errors.
- Scanner check: Runtime console health.
- Category: Design.
- Status: fail.
- Severity: low.
- Priority: 15; lower numbers are more urgent.
- Score impact: 7 of 7 rule points lost.
- Evidence: Detected 2 console error(s) and 0 uncaught page error(s) during render.
- What needs attention: The rendered page produced console or uncaught JavaScript errors.
- Why it matters: Runtime errors can break forms, CTAs, animations, tracking, or responsive behavior even when the static HTML looks fine.
- Status-specific guidance: A public check reported a failure. Reproduce or inspect the issue first, then make the smallest safe fix.
- Audience or recipient: The site owner, builder, or marketing team responsible for improving this public page.
- Constraints, examples, or source material: Treat the live URL as the public target to inspect, not as the only source of truth. When repository, CMS, or hosting access is available, use that implementation context before changing anything.
- Target outcome: After the fix is deployed and the public page is rescanned, this specific check should improve or pass without lowering other SEO / AEO, security, accessibility, or design signals.
## Task
Use the provided context to safely complete this workflow: Open the page in a browser, reproduce the console errors, and fix missing assets, hydration problems, client-side exceptions, or failing third-party scripts.
Before editing, identify the likely source of the issue, the smallest change that can fix it, and any user-visible behavior that must be preserved.
## Output
Return a structured response with headings, prioritized recommendations, changed files or page areas, verification results, rollback notes, and stated assumptions.
## Rules
- Ask a clarifying question when required context is missing.
- Preserve the user's intent and avoid inventing facts.
- Verify the issue exists before changing code or content. If the issue is not reproducible, explain what you checked and recommend no code change.
- If the live URL and implementation source disagree, trust the implementation source for edits and use the live URL only to understand current public behavior.
- Keep the change narrowly scoped to this fix unless another change is required to avoid a regression.
- Match the existing framework, style, design system, routing patterns, and content conventions.
- Preserve existing URLs, forms, analytics, SEO metadata, accessibility semantics, and conversion flows unless the fix explicitly requires changing them.
- Do not perform broad refactors, dependency upgrades, redesigns, rewrites, migrations, file deletions, route changes, or destructive commands unless they are explicitly required and approved.
- Make changes that are easy to review and roll back.
- Verify the result with the smallest reliable test, build, browser check, or manual inspection available.
## Safety
- Do not request, expose, or reproduce sensitive data.
- Redact private details from examples unless the user explicitly says they are safe to include.
- Do not use credentials, cookies, authenticated data, hidden form values, or private response bodies.
- Do not weaken security headers, authentication, authorization, privacy controls, accessibility, or error handling to make the scan pass.

Page-level AEO readiness

Shared eligibility and content signals that affect every search and answer agent.

45/100 ready

Index and citation eligibility

No general noindex directive was detected.

Snippet and answer controls

No general nosnippet or max-snippet:0 control was detected.

Canonical alignment

No canonical URL was detected.

Sitemap coverage and freshness

A sitemap index was found; this safe scan did not recursively fetch child sitemaps.

Structured data

Detected 0 JSON-LD block(s), 0 parse error(s), and types none.

Public or paywalled content

No isAccessibleForFree structured-data value was detected.

Entity clarity

Detected 0 of 3 core identity signals across the title, description, and H1.

Answer-ready visible text

Detected 0 visible words and 0 audience, use-case, pricing, or integration signals.

Authorship and accountability

No author meta value or structured-data author was detected.

Published or updated date

No datePublished or dateModified value was detected in structured data.

Supporting-source links

No external supporting links were detected; this is contextual rather than a universal requirement.

Rendered content availability

Rendered audit completed with 2 visible text element(s).

Synthetic search-agent reachability

0 of 8 search/discovery User-Agent probes returned reachable content.

Optional LLM-readable summary

No llms.txt file was found; this is optional and does not reduce core AEO readiness.

OpenAIChatGPT search

OAI-SearchBot

FAIL · BLOCKED

AI search

Robots: allowed by * allow: / · line 2

Probe: challenged · HTTP 403 · 0% parity

IndexSnippetsSitemapPublic content

Vendor documentationDefinition checked 2026-07-30

OpenAIOpenAI model training

GPTBot

POLICY ALLOWED

Model training

Robots: allowed by * allow: / · line 2

Probe: not tested for this control

IndexSnippetsSitemapPublic content

Vendor documentationDefinition checked 2026-07-30

OpenAIChatGPT user fetches

ChatGPT-User

UNKNOWN

User-requested fetch

Robots: not applicable to user-requested fetches

Probe: not tested for this control

IndexSnippetsSitemapPublic content

Vendor documentationDefinition checked 2026-07-30

AnthropicClaude model training

ClaudeBot

POLICY ALLOWED

Model training

Robots: allowed by * allow: / · line 2

Probe: not tested for this control

IndexSnippetsSitemapPublic content

Vendor documentationDefinition checked 2026-07-30

AnthropicClaude search

Claude-SearchBot

FAIL · BLOCKED

AI search

Robots: allowed by * allow: / · line 2

Probe: challenged · HTTP 403 · 0% parity

IndexSnippetsSitemapPublic content

Vendor documentationDefinition checked 2026-07-30

AnthropicClaude user fetches

Claude-User

FAIL · BLOCKED

User-requested fetch

Robots: allowed by * allow: / · line 2

Probe: challenged · HTTP 403 · 0% parity

IndexSnippetsSitemapPublic content

Vendor documentationDefinition checked 2026-07-30

GoogleGoogle Search and AI features

Googlebot

FAIL · BLOCKED

Search and discovery

Robots: allowed by * allow: / · line 2

Probe: challenged · HTTP 403 · 0% parity

IndexSnippetsSitemapPublic content

Vendor documentationDefinition checked 2026-07-30

GoogleGemini data use and grounding

Google-Extended

POLICY ALLOWED

Data-use policy control

Robots: allowed by * allow: / · line 2

Probe: not tested for this control

IndexSnippetsSitemapPublic content

Vendor documentationDefinition checked 2026-07-30

MicrosoftBing and Copilot

Bingbot

FAIL · BLOCKED

Search and discovery

Robots: allowed by * allow: / · line 2

Probe: challenged · HTTP 403 · 0% parity

IndexSnippetsSitemapPublic content

Vendor documentationDefinition checked 2026-07-30

PerplexityPerplexity search

PerplexityBot

FAIL · BLOCKED

AI search

Robots: allowed by * allow: / · line 2

Probe: challenged · HTTP 403 · 0% parity

IndexSnippetsSitemapPublic content

Vendor documentationDefinition checked 2026-07-30

PerplexityPerplexity user fetches

Perplexity-User

UNKNOWN

User-requested fetch

Robots: not applicable to user-requested fetches

Probe: not tested for this control

IndexSnippetsSitemapPublic content

Vendor documentationDefinition checked 2026-07-30

AppleSiri, Spotlight, and Safari search

Applebot

FAIL · BLOCKED

Search and discovery

Robots: allowed by * allow: / · line 2

Probe: challenged · HTTP 403 · 0% parity

IndexSnippetsSitemapPublic content

Vendor documentationDefinition checked 2026-07-30

AppleApple foundation-model training

Applebot-Extended

POLICY ALLOWED

Data-use policy control

Robots: allowed by * allow: / · line 2

Probe: not tested for this control

IndexSnippetsSitemapPublic content

Vendor documentationDefinition checked 2026-07-30

Mistral AIMistral search

MistralAI-Index

FAIL · BLOCKED

AI search

Robots: allowed by * allow: / · line 2

Probe: challenged · HTTP 403 · 0% parity

IndexSnippetsSitemapPublic content

Vendor documentationDefinition checked 2026-07-30

Mistral AIMistral user fetches

MistralAI-User

FAIL · BLOCKED

User-requested fetch

Robots: allowed by * allow: / · line 2

Probe: challenged · HTTP 403 · 0% parity

IndexSnippetsSitemapPublic content

Vendor documentationDefinition checked 2026-07-30

MetaMeta AI model and product data

meta-externalagent

POLICY ALLOWED

Model training

Robots: allowed by * allow: / · line 2

Probe: not tested for this control

IndexSnippetsSitemapPublic content

Vendor documentationDefinition checked 2026-07-30

MetaMeta AI user fetches

meta-externalfetcher

FAIL · BLOCKED

User-requested fetch

Robots: allowed by * allow: / · line 2

Probe: challenged · HTTP 403 · 0% parity

IndexSnippetsSitemapPublic content

Vendor documentationDefinition checked 2026-07-30

AmazonAmazon model training

Amazonbot

POLICY ALLOWED

Model training

Robots: allowed by * allow: / · line 2

Probe: not tested for this control

IndexSnippetsSitemapPublic content

Vendor documentationDefinition checked 2026-07-30

AmazonAlexa and Rufus search

Amzn-SearchBot

FAIL · BLOCKED

AI search

Robots: allowed by * allow: / · line 2

Probe: challenged · HTTP 403 · 0% parity

IndexSnippetsSitemapPublic content

Vendor documentationDefinition checked 2026-07-30

AmazonAlexa user fetches

Amzn-User

FAIL · BLOCKED

User-requested fetch

Robots: allowed by * allow: / · line 2

Probe: challenged · HTTP 403 · 0% parity

IndexSnippetsSitemapPublic content

Vendor documentationDefinition checked 2026-07-30

Common CrawlOpen web datasets

CCBot

POLICY ALLOWED

Model training

Robots: allowed by * allow: / · line 2

Probe: not tested for this control

IndexSnippetsSitemapPublic content

Vendor documentationDefinition checked 2026-07-30

Public report link

Markdown export

Share the website audit report

Copy a public report link or a Markdown version with scores, fixes, opportunities, insights, and a normal link back to the scanned site.

Share preview

openai.com website audit report

Needs fixes before launch: 52/100 overall, with prioritized fixes for SEO, security, accessibility, and design.

Public report link

Markdown report

# openai.com Website Scan

Scanned URL: [https://openai.com](https://openai.com)
Report URL: /scan/openai-com-52-launch-readiness-report-9a7aa986
Created: 2026-08-01T07:01:46.694Z

## Score Summary

- Overall: 52/100
- SEO / AEO: 68/100
- Security: 88/100
- Accessibility: 0/100
- Design: 50/100

## Launch Readiness

Needs fixes before launch (Needs focused fixes).

Passed: 8. Failed: 5. Unknown: 1.
Strongest area: Security. Weakest area: Accessibility.

## AI Crawler Access

These results combine robots.txt policy, page controls, and bounded synthetic User-Agent probes. Synthetic probes do not prove that traffic came from the vendor; training and data-use choices are neutral publisher preferences.

- **OpenAI — ChatGPT search** (OAI-SearchBot): FAIL — robots allowed; synthetic probe challenged (HTTP 403). Allowed by * allow: / on line 2. Synthetic User-Agent probe encountered an HTTP 403 bot or security challenge.
- **OpenAI — OpenAI model training** (GPTBot): PREFERENCE — robots allowed; synthetic probe not_tested. Allowed by * allow: / on line 2. No synthetic fetch is appropriate for this policy or training control.
- **OpenAI — ChatGPT user fetches** (ChatGPT-User): UNKNOWN — robots not_applicable; synthetic probe not_tested. ChatGPT-User is used for user-requested retrieval, so robots.txt is not treated as a reliable access control for this row. No synthetic fetch is appropriate for this policy or training control.
- **Anthropic — Claude model training** (ClaudeBot): PREFERENCE — robots allowed; synthetic probe not_tested. Allowed by * allow: / on line 2. No synthetic fetch is appropriate for this policy or training control.
- **Anthropic — Claude search** (Claude-SearchBot): FAIL — robots allowed; synthetic probe challenged (HTTP 403). Allowed by * allow: / on line 2. Synthetic User-Agent probe encountered an HTTP 403 bot or security challenge.
- **Anthropic — Claude user fetches** (Claude-User): FAIL — robots allowed; synthetic probe challenged (HTTP 403). Allowed by * allow: / on line 2. Synthetic User-Agent probe encountered an HTTP 403 bot or security challenge.
- **Google — Google Search and AI features** (Googlebot): FAIL — robots allowed; synthetic probe challenged (HTTP 403). Allowed by * allow: / on line 2. Synthetic User-Agent probe encountered an HTTP 403 bot or security challenge.
- **Google — Gemini data use and grounding** (Google-Extended): PREFERENCE — robots allowed; synthetic probe not_tested. Allowed by * allow: / on line 2. No synthetic fetch is appropriate for this policy or training control.
- **Microsoft — Bing and Copilot** (Bingbot): FAIL — robots allowed; synthetic probe challenged (HTTP 403). Allowed by * allow: / on line 2. Synthetic User-Agent probe encountered an HTTP 403 bot or security challenge.
- **Perplexity — Perplexity search** (PerplexityBot): FAIL — robots allowed; synthetic probe challenged (HTTP 403). Allowed by * allow: / on line 2. Synthetic User-Agent probe encountered an HTTP 403 bot or security challenge.
- **Perplexity — Perplexity user fetches** (Perplexity-User): UNKNOWN — robots not_applicable; synthetic probe not_tested. Perplexity-User is used for user-requested retrieval, so robots.txt is not treated as a reliable access control for this row. No synthetic fetch is appropriate for this policy or training control.
- **Apple — Siri, Spotlight, and Safari search** (Applebot): FAIL — robots allowed; synthetic probe challenged (HTTP 403). Allowed by * allow: / on line 2. Synthetic User-Agent probe encountered an HTTP 403 bot or security challenge.
- **Apple — Apple foundation-model training** (Applebot-Extended): PREFERENCE — robots allowed; synthetic probe not_tested. Allowed by * allow: / on line 2. No synthetic fetch is appropriate for this policy or training control.
- **Mistral AI — Mistral search** (MistralAI-Index): FAIL — robots allowed; synthetic probe challenged (HTTP 403). Allowed by * allow: / on line 2. Synthetic User-Agent probe encountered an HTTP 403 bot or security challenge.
- **Mistral AI — Mistral user fetches** (MistralAI-User): FAIL — robots allowed; synthetic probe challenged (HTTP 403). Allowed by * allow: / on line 2. Synthetic User-Agent probe encountered an HTTP 403 bot or security challenge.
- **Meta — Meta AI model and product data** (meta-externalagent): PREFERENCE — robots allowed; synthetic probe not_tested. Allowed by * allow: / on line 2. No synthetic fetch is appropriate for this policy or training control.
- **Meta — Meta AI user fetches** (meta-externalfetcher): FAIL — robots allowed; synthetic probe challenged (HTTP 403). Allowed by * allow: / on line 2. Synthetic User-Agent probe encountered an HTTP 403 bot or security challenge.
- **Amazon — Amazon model training** (Amazonbot): PREFERENCE — robots allowed; synthetic probe not_tested. Allowed by * allow: / on line 2. No synthetic fetch is appropriate for this policy or training control.
- **Amazon — Alexa and Rufus search** (Amzn-SearchBot): FAIL — robots allowed; synthetic probe challenged (HTTP 403). Allowed by * allow: / on line 2. Synthetic User-Agent probe encountered an HTTP 403 bot or security challenge.
- **Amazon — Alexa user fetches** (Amzn-User): FAIL — robots allowed; synthetic probe challenged (HTTP 403). Allowed by * allow: / on line 2. Synthetic User-Agent probe encountered an HTTP 403 bot or security challenge.
- **Common Crawl — Open web datasets** (CCBot): PREFERENCE — robots allowed; synthetic probe not_tested. Allowed by * allow: / on line 2. No synthetic fetch is appropriate for this policy or training control.

## Page-level AEO Readiness

Readiness: 45/100

- **Index and citation eligibility**: PASS — No general noindex directive was detected.
- **Snippet and answer controls**: PASS — No general nosnippet or max-snippet:0 control was detected.
- **Canonical alignment**: FAIL — No canonical URL was detected.
- **Sitemap coverage and freshness**: UNKNOWN — A sitemap index was found; this safe scan did not recursively fetch child sitemaps.
- **Structured data**: UNKNOWN — Detected 0 JSON-LD block(s), 0 parse error(s), and types none.
- **Public or paywalled content**: UNKNOWN — No isAccessibleForFree structured-data value was detected.
- **Entity clarity**: FAIL — Detected 0 of 3 core identity signals across the title, description, and H1.
- **Answer-ready visible text**: FAIL — Detected 0 visible words and 0 audience, use-case, pricing, or integration signals.
- **Authorship and accountability**: UNKNOWN — No author meta value or structured-data author was detected.
- **Published or updated date**: UNKNOWN — No datePublished or dateModified value was detected in structured data.
- **Supporting-source links**: UNKNOWN — No external supporting links were detected; this is contextual rather than a universal requirement.
- **Rendered content availability**: PASS — Rendered audit completed with 2 visible text element(s).
- **Synthetic search-agent reachability**: FAIL — 0 of 8 search/discovery User-Agent probes returned reachable content.
- **Optional LLM-readable summary**: INFO — No llms.txt file was found; this is optional and does not reduce core AEO readiness.

## Prioritized Fixes

### 1. Improve AI search and crawler readiness

- Category: SEO / AEO
- Status: fail
- Severity: critical
- Rule points lost: 14
- Evidence: intake returned HTTP 403 with Cloudflare signals, which can indicate crawler or bot-security blocking. robots.txt blocks OAI-SearchBot, Claude-SearchBot, Googlebot, and 5 more from AI search or discovery for this page path. Synthetic or robots checks block Claude-User, MistralAI-User, meta-externalfetcher, and 1 more from user-requested fetches. AEO crawler readiness is 70%: discovery 45/45, index and snippet eligibility 20/25, synthetic reachability 0/20, sitemap freshness 5/10.
- Why it matters: AI search systems need crawlable, reachable, indexable, and quotable public content. Training and data-use choices remain neutral publisher preferences.
- Fix: Use the component scores and exact matched robots rules in the crawler report. Fix blocked search agents, noindex or snippet restrictions, canonical or sitemap gaps, and synthetic WAF/challenge failures. Preserve intentional training opt-outs and keep private, admin, and authenticated paths protected before rescanning.

### 2. Fix rendered axe accessibility violations

- Category: Accessibility
- Status: fail
- Severity: high
- Rule points lost: 18
- Evidence: axe found 4 violation rule(s), including 2 serious or critical rule(s). Top rules: meta-refresh (1), html-has-lang (1), page-has-heading-one (1), empty-heading (1).
- Why it matters: axe checks the actual browser-rendered page, so these issues can affect people using keyboards, screen readers, or other assistive technology.
- Fix: Fix the top axe rule IDs first, especially critical and serious violations around names, roles, labels, headings, contrast, landmarks, and keyboard-accessible controls.

### 3. Add responsive viewport metadata

- Category: Design
- Status: fail
- Severity: high
- Rule points lost: 12
- Evidence: No viewport meta tag was detected.
- Why it matters: Launch traffic often comes from phones; missing viewport metadata can make the page render poorly.
- Fix: Add a viewport meta tag with width=device-width and initial-scale=1.

### 4. Add common public security headers

- Category: Security
- Status: fail
- Severity: high
- Rule points lost: 6
- Evidence: Detected 4 of 5 common public security headers. Present: strict-transport-security, x-content-type-options, x-frame-options, referrer-policy. Missing: content-security-policy.
- Why it matters: These headers reduce avoidable browser-side risk and show a baseline of care before launch.
- Fix: Configure headers such as Strict-Transport-Security, Content-Security-Policy, X-Content-Type-Options, X-Frame-Options, and Referrer-Policy.

### 5. Fix runtime browser errors

- Category: Design
- Status: fail
- Severity: low
- Rule points lost: 7
- Evidence: Detected 2 console error(s) and 0 uncaught page error(s) during render.
- Why it matters: Runtime errors can break forms, CTAs, animations, tracking, or responsive behavior even when the static HTML looks fine.
- Fix: Open the page in a browser, reproduce the console errors, and fix missing assets, hydration problems, client-side exceptions, or failing third-party scripts.

## Opportunities

### Add answer-ready sections for common buyer questions

- Impact: high
- Category: SEO / AEO
- Evidence: Pricing signals: 0. Use-case signals: 0. Integration/API signals: 0.
- Why it matters: Answer engines and search visitors need concise textual answers to summarize who the product is for, how it works, what it costs, and what it connects with.
- Next step: Add short, crawlable sections for pricing or plans, ideal users, use cases, integrations, security, and how the product differs from alternatives.

### Expose important supporting pages in navigation or footer

- Impact: medium
- Category: SEO / AEO
- Evidence: No pricing, docs, contact, security, privacy, terms, or about links were detected in public internal links.
- Why it matters: Internal links help visitors, crawlers, and AI answer systems discover supporting facts instead of relying on one landing page.
- Next step: Link to the most useful public pages, especially pricing, docs, contact, security, privacy, terms, and about pages where applicable.

### Make trust and proof easier to detect

- Impact: medium
- Category: Design
- Evidence: Detected 0 trust-signal keyword occurrence(s).
- Why it matters: Visitors who arrive cold from search, social, or AI citations need proof before they submit a form, start a trial, or buy.
- Next step: Add honest proof such as customer quotes, recognizable logos, security notes, usage stats, reviews, case studies, or founder credibility.

### Add an optional LLM-readable site summary

- Impact: low
- Category: SEO / AEO
- Evidence: HTTP 403 returned for llms_txt.
- Why it matters: This is not required for Google AI features, but a concise public markdown summary can help AI agents and internal tools understand key pages.
- Next step: Publish a short llms.txt with product facts, audience, key public links, docs, pricing, support, and usage boundaries.

### Measure search performance with first-party data

- Impact: medium
- Category: SEO / AEO
- Evidence: robots.txt and sitemap.xml were reachable, so the site has the basics needed for Search Console verification and monitoring.
- Why it matters: A scan can identify technical readiness, but Search Console and analytics reveal impressions, queries, clicks, pages, and conversions over time.
- Next step: Verify the domain in Search Console, submit the sitemap, and pair query/page data with analytics events for signups, demo requests, and purchases.

## Insights

### Crawlability needs review

- Category: SEO / AEO
- Evidence: HTTP 403. robots.txt: HTTP 200. sitemap.xml: HTTP 200. noindex check: clear.
- Interpretation: One or more crawl/index signals could prevent the page from being reliably discovered or shown.
- Recommended use: Use this as the first launch gate before deeper content, ranking, or AI visibility work.

### AEO depends on normal SEO plus answerable text

- Category: SEO / AEO
- Evidence: Visible words: 0. H1 count: 0. Audience signals: 0. CTA labels: none detected.
- Interpretation: Google AI features currently rely on standard Search eligibility; the extra advantage comes from content that is easy to quote, summarize, and verify.
- Recommended use: Prioritize clear text answers, crawlable support pages, accurate schema, and visible proof over speculative AI-only markup.

### Detected entity signals

- Category: SEO / AEO
- Evidence: Title: missing. H1: missing. Schema types: none.
- Interpretation: The stronger and more consistent these entity signals are, the easier it is for search and answer systems to identify the brand, product category, and page purpose.
- Recommended use: Keep the title, H1, meta description, Open Graph, schema, footer, and about/pricing/docs pages aligned around the same product facts.

### No structured data detected

- Category: SEO / AEO
- Evidence: JSON-LD blocks: 0. Types: none. Parse errors: 0.
- Interpretation: Missing or invalid structured data makes the page rely more heavily on inferred meaning from text and layout.
- Recommended use: Validate JSON-LD and use only accurate facts that are visible or clearly supported on the public page.

### Weakest score area

- Category: Accessibility
- Evidence: SEO / AEO: 68/100. Security: 88/100. Accessibility: 0/100. Design: 50/100
- Interpretation: The weakest area is Accessibility, so improvements there should have the most visible effect on readiness.
- Recommended use: Use the score mix to choose the next workstream instead of treating every issue as equally urgent.

### LLM-readable file not found

- Category: SEO / AEO
- Evidence: HTTP 403 returned for llms_txt.
- Interpretation: llms.txt can be a useful optional summary for agents, but it should not be treated as a guaranteed AI search ranking factor.
- Recommended use: Invest first in crawlability, helpful visible content, internal links, and accurate schema; add llms.txt as a tidy supplement.

### Rendered page experience snapshot

- Category: Design
- Evidence: Rendered text samples: 2. Contrast failures: 0. Console errors: 2. Horizontal overflow: 0px.
- Interpretation: The scan inspected the browser-rendered page, so contrast, runtime, layout, and timing signals are more representative than static markup alone.
- Recommended use: Use rendered checks to prioritize issues that visitors actually experience after JavaScript and CSS load.

### Rendered speed snapshot

- Category: Design
- Evidence: DOMContentLoaded: 199ms. Load complete: 309ms. First contentful paint: not available. Resources: 4. Scripts: 2. Images: 0. Third-party origins: 1. Transfer: not available.
- Interpretation: These are lightweight browser timings from one rendered scan, so they are useful directional signals rather than real-user performance proof.
- Recommended use: Use slow timings, high script counts, heavy transfer size, and many third-party origins to choose focused speed work, then verify important changes with analytics or field data when available.

### Rendered axe accessibility snapshot

- Category: Accessibility
- Evidence: axe violations: 4. Critical: 1. Serious: 1. Top rules: meta-refresh, html-has-lang, page-has-heading-one, empty-heading.
- Interpretation: axe-core catches common accessibility failures in the actual rendered DOM, but it is still automated coverage and not a full manual accessibility audit.
- Recommended use: Treat critical and serious axe failures as high-priority fixes, then manually review keyboard flow, focus states, screen reader meaning, and interaction states.

## Scope

FreeScan.app performs safe public checks only. It is not a penetration test, full SEO engagement, full accessibility audit, WCAG certification, backlink audit, rank tracker, or analytics platform.

Public reports expose the scanned public URL, safe scores, sanitized public evidence, and fix guidance. They do not include credentials, cookies, hidden form values, or sensitive response bodies.

Rescan same URL

Rerun the full deterministic scanner for openai.com without re-entering the URL. The previous report stays saved so the next result can be compared against it.

Website audit scorecard for openai.com

Improve AI search and crawler readiness

Copyable agent prompt

Fix rendered axe accessibility violations

Copyable agent prompt

Add responsive viewport metadata

Copyable agent prompt

Add common public security headers

Copyable agent prompt

Fix runtime browser errors

Copyable agent prompt

SEO / AEO

Crawler access

Security

Common security headers

Accessibility

Rendered axe accessibility violations

Design

Responsive viewport basics

Runtime console health

Failed checks

Crawler access

Copyable agent prompt

Common security headers

Copyable agent prompt

Rendered axe accessibility violations

Copyable agent prompt

Responsive viewport basics

Copyable agent prompt

Runtime console health

Copyable agent prompt

AI crawler accessMajor AI search, user-fetch, and data-use agents checked for /, with robots evidence, synthetic reachability, and page-level AEO controls.0 pass12 fail2 unknown7 preferences

Unknown and not detected statesFreeScan.app keeps partial public data explicit. It marks unverifiable signals as unknown or not detected instead of inventing evidence.

Safe fetch metadataPublic headers and redirects captured during intake. Response bodies, cookies, and credentials are not stored.

Website audit scorecard for openai.com

Improve AI search and crawler readiness

Copyable agent prompt

Fix rendered axe accessibility violations

Copyable agent prompt

Add responsive viewport metadata

Copyable agent prompt

Add common public security headers

Copyable agent prompt

Fix runtime browser errors

Copyable agent prompt

SEO / AEO

Crawler access

Security

Common security headers

Accessibility

Rendered axe accessibility violations

Design

Responsive viewport basics

Runtime console health

Failed checks

Crawler access

Copyable agent prompt

Common security headers

Copyable agent prompt

Rendered axe accessibility violations

Copyable agent prompt

Responsive viewport basics

Copyable agent prompt

Runtime console health

Copyable agent prompt

AI crawler accessMajor AI search, user-fetch, and data-use agents checked for /, with robots evidence, synthetic reachability, and page-level AEO controls.0 pass12 fail2 unknown7 preferences

Unknown and not detected statesFreeScan.app keeps partial public data explicit. It marks unverifiable signals as unknown or not detected instead of inventing evidence.

Safe fetch metadataPublic headers and redirects captured during intake. Response bodies, cookies, and credentials are not stored.