CanAgentUse

Saved report

https://duo.com/

SCANNED

Jun 8, 2026, 8:41 PM

VISIBILITY

Public

Rescan Report

Share Report

Copy Report Link

New Scan

https://duo.com/

SCANNED

Jun 8, 2026, 8:41:46 PMJun 8, 2026, 8:41 PM

VISIBILITY

Public

Rescan Report

Share Report

Copy Report Link

Export Report

65/100

OVERALL SCORE

Level 3, Bot-Aware

Moderate readiness for AI agents

CAPTURED SCREENSHOT

What AI sees of your website

Complete Identity Security & MFA Solutions | Cisco Duo

Duo Security offers solutions to protect organizations from identity threats. Explore Duo identity security, phishing-resistant MFA, and other solutions.

Next step

Turn this report into a fix workflow

23 failed checks are ready to move into MCP or CLI remediation. Generate a repair prompt, connect the scanner to your coding agent, or open the integration docs before your next rescan.

Detailed report scores grouped by capability area
Metric	Score	Status	Passed	Failed	Warning	Evidence
AI Discoverability	45	Priority fix	8	14	1	View details
Discoverability	83	Mostly ready	6	3	0	View details
Content Readiness	42	Priority fix	2	7	1	View details
Bot Access Control	0	Priority fix	0	4	0	View details
Agent Ease of Use	10	Priority fix	6	29	1	View details
API	0	Priority fix	0	6	0	View details
Auth	Not Applicable	Not Applicable	0	7	0	View details
MCP	25	Priority fix	2	6	0	View details
Skill Discovery	5	Priority fix	0	10	1	View details
Agent Commerce	Not Applicable	Not Applicable	4	0	0
GEO, AIO and AEO	83	Mostly ready	8	0	10
GEO Readiness	Not Applicable	Not Applicable	4	0	0
AIO Readiness	84	Mostly ready	3	0	4
AEO Readiness	72	Needs work	1	0	6
SEO	100	Strong	11	0	0
SEO	100	Strong	11	0	0
Security & Trust	80	Mostly ready	8	1	0	View details
Security & Trust	80	Mostly ready	4	1	0	View details
AI Training Exposure	Not Applicable	Not Applicable	4	0	0
Performance and Accessibility	87	Mostly ready	20	4	1	View details
Performance	81	Mostly ready	11	4	1	View details
Accessibility	97	Strong	9	0	0

Prioritized recommendations

Issues ranked by score impact

39 items need attention

Security & TrustSecurity & TrustEstablished

Content-Security-Policy

Content-Security-Policy is missing or incomplete.

100 Fail

Needs attention

Content-Security-Policy

Failed check

Issue

Content-Security-Policy is missing or incomplete.

Why it matters

Content Security Policy limits where scripts, styles, frames, and connections can load from, reducing the impact of injection bugs.

Check name

Content-Security-Policy

Score

0/100

Status

fail

Category

Security & Trust

Maturity

Established

Goal

Constrain script, style, frame, and resource loading with a Content-Security-Policy header.

Result

Content-Security-Policy is missing or incomplete.

Evidence

{
  "header": "content-security-policy",
  "value": "frame-ancestors 'self' resources.duo.com learn-cloudsecurity.cisco.com;"
}

AI DiscoverabilityDiscoverabilityEstablished

Link headers

Link headers failed at "Find useful Link headers".

100 Fail

Needs attention

Link headers

Failed check

Issue

No useful agent discovery Link headers were found.

Why it matters

Link headers let automated clients discover API catalogs, documentation, and machine-readable alternates without parsing page markup first.

Check name

Link headers

Score

0/100

Status

fail

Category

Discoverability

Maturity

Established

Goal

Include Link response headers for agent discovery using RFC 8288.

Result

Link headers failed at "Find useful Link headers".

Validation steps

Find useful Link headers
No useful agent discovery Link headers were found.
Fetch same-origin Link header targets
Link headers did not expose any same-origin targets to validate.

Evidence

{
  "failedStep": "presence",
  "steps": [
    {
      "id": "presence",
      "title": "Find useful Link headers",
      "status": "fail",
      "evidence": {
        "links": []
      },
      "issue": "No useful agent discovery Link headers were found.",
      "howToFix": "Expose useful Link headers such as rel=\"api-catalog\", rel=\"service-doc\", and rel=\"service-desc\"."
    },
    {
      "id": "target-validation",
      "title": "Fetch same-origin Link header targets",
      "status": "fail",
      "evidence": {
        "checked": [],
        "failures": [
          {
            "reason": "No same-origin Link header targets were available to fetch."
          }
        ]
      },
      "issue": "Link headers did not expose any same-origin targets to validate.",
      "howToFix": "Make each same-origin Link href reachable and serve the advertised media type."
    }
  ]
}

Agent Ease of UseAPIEstablished

API Catalog

API Catalog failed at "Fetch API catalog".

50 Fail

Needs attention

API Catalog

Failed check

Issue

The API catalog endpoint did not return HTTP 2xx.

Why it matters

API catalogs help agents find service descriptions, documentation, and status resources without guessing API entry points.

Check name

API Catalog

Score

0/100

Status

fail

Category

API

Maturity

Established

Goal

Publish an API catalog for automated API discovery using RFC 9727.

Result

API Catalog failed at "Fetch API catalog".

Validation steps

Fetch API catalog
The API catalog endpoint did not return HTTP 2xx.
Validate RFC 9727 linkset
Response is not valid JSON.
Fetch advertised API catalog targets
API Catalog did not expose any same-origin hrefs to validate.

Evidence

{
  "failedStep": "fetch",
  "steps": [
    {
      "id": "fetch",
      "title": "Fetch API catalog",
      "status": "fail",
      "evidence": {
        "statusCode": 403,
        "contentType": "text/html; charset=utf-8"
      },
      "issue": "The API catalog endpoint did not return HTTP 2xx.",
      "howToFix": "Publish /.well-known/api-catalog."
    },
    {
      "id": "validate",
      "title": "Validate RFC 9727 linkset",
      "status": "fail",
      "evidence": {
        "valid": false,
        "compatibleContentType": false,
        "issue": "Response is not valid JSON.",
        "rawExcerpt": "<html>\r\n<head><title>403 Forbidden</title></head>\r\n<body>\r\n<center><h1>403 Forbidden</h1></center>\r\n<hr><center>Duo/1.0</center>\r\n</body>\r\n</html>\r\n"
      },
      "issue": "Response is not valid JSON.",
      "howToFix": "Use application/linkset+json with service-desc, service-doc, and status relations that each include href."
    },
    {
      "id": "target-validation",
      "title": "Fetch advertised API catalog targets",
      "status": "fail",
      "evidence": {
        "checked": [],
        "failures": [
          {
            "reason": "No same-origin API catalog hrefs were available to fetch."
          }
        ]
      },
      "issue": "API Catalog did not expose any same-origin hrefs to validate.",
      "howToFix": "Make each same-origin API catalog href reachable and serve the advertised media type."
    }
  ]
}

Agent Ease of UseAPIEstablished

OpenAPI discovery

OpenAPI discovery failed at "Find valid OpenAPI document".

50 Fail

Needs attention

OpenAPI discovery

Failed check

Issue

OpenAPI YAML document did not match the expected shape. Content-Type "text/html; charset=utf-8" is not a recognized type; unsupported version: ; missing info block with title and version; missing paths block; no operations found.

Why it matters

OpenAPI documents let agents understand available operations, schemas, authentication, and request formats before calling an API.

Check name

OpenAPI discovery

Score

0/100

Status

fail

Category

API

Maturity

Established

Goal

Publish a valid OpenAPI or Swagger document for API discovery.

Result

OpenAPI discovery failed at "Find valid OpenAPI document".

Validation steps

Find valid OpenAPI document
OpenAPI YAML document did not match the expected shape. Content-Type "text/html; charset=utf-8" is not a recognized type; unsupported version: ; missing info block with title and version; missing paths block; no operations found.

Evidence

{
  "failedStep": "fetch",
  "steps": [
    {
      "id": "fetch",
      "title": "Find valid OpenAPI document",
      "status": "fail",
      "evidence": {
        "checked": [
          {
            "path": "/openapi.json",
            "statusCode": 404,
            "contentType": "text/html; charset=utf-8",
            "valid": false,
            "issue": "OpenAPI YAML document did not match the expected shape. Content-Type \"text/html; charset=utf-8\" is not a recognized type; unsupported version: ; missing info block with title and version; missing paths block; no operations found.",
            "compatibleContentType": false,
            "format": "yaml",
            "version": "",
            "pathCount": 0,
            "operationCount": 0,
            "rawExcerpt": "<!doctype html>\n<html lang=\"en\" dir=\"ltr\">\n    <head>\n        <meta charset=\"utf-8\">\n        <meta http-equiv=\"X-UA-Compatible\" content=\"IE=edge\">\n        <meta name=\"viewport\" content=\"width=device-width, initial-scale=1, user-scalable=yes\">\n        <link rel=\"icon\" href=\"/images/favicon/favicon.ico\" type=\"image/x-icon\">\n<link rel=\"icon\" type=\"image/png\" sizes=\"16x16\" href=\"/images/favicon/favicon-16x16.png\">\n<link rel=\"icon\" type=\"image/png\" sizes=\"32x32\" href=\"/images/favicon/favicon-32x32.png\">\n<link rel=\"icon\" type=\"image/png\" sizes=\"96x96\" href=\"/images/favicon/favicon-96x96.png\">\n<link rel=\"icon\" type=\"image/png\" sizes=\"192x192\" href=\"/images/favicon/favicon-192x192.png\">\n<link rel=\"apple-touch-icon\" sizes=\"57x57\" href=\"/images/favicon/favicon-57x57.png\">\n<link rel=\"apple-touch-icon"
          },
          {
            "path": "/openapi.yaml",
            "statusCode": 404,
            "contentType": "text/html; charset=utf-8",
            "valid": false,
            "issue": "OpenAPI YAML document did not match the expected shape. Content-Type \"text/html; charset=utf-8\" is not a recognized type; unsupported version: ; missing info block with title and version; missing paths block; no operations found.",
            "compatibleContentType": false,
            "format": "yaml",
            "version": "",
            "pathCount": 0,
            "operationCount": 0,
            "rawExcerpt": "<!doctype html>\n<html lang=\"en\" dir=\"ltr\">\n    <head>\n        <meta charset=\"utf-8\">\n        <meta http-equiv=\"X-UA-Compatible\" content=\"IE=edge\">\n        <meta name=\"viewport\" content=\"width=device-width, initial-scale=1, user-scalable=yes\">\n        <link rel=\"icon\" href=\"/images/favicon/favicon.ico\" type=\"image/x-icon\">\n<link rel=\"icon\" type=\"image/png\" sizes=\"16x16\" href=\"/images/favicon/favicon-16x16.png\">\n<link rel=\"icon\" type=\"image/png\" sizes=\"32x32\" href=\"/images/favicon/favicon-32x32.png\">\n<link rel=\"icon\" type=\"image/png\" sizes=\"96x96\" href=\"/images/favicon/favicon-96x96.png\">\n<link rel=\"icon\" type=\"image/png\" sizes=\"192x192\" href=\"/images/favicon/favicon-192x192.png\">\n<link rel=\"apple-touch-icon\" sizes=\"57x57\" href=\"/images/favicon/favicon-57x57.png\">\n<link rel=\"apple-touch-icon"
          },
          {
            "path": "/swagger.json",
            "statusCode": 404,
            "contentType": "text/html; charset=utf-8",
            "valid": false,
            "issue": "OpenAPI YAML document did not match the expected shape. Content-Type \"text/html; charset=utf-8\" is not a recognized type; unsupported version: ; missing info block with title and version; missing paths block; no operations found.",
            "compatibleContentType": false,
            "format": "yaml",
            "version": "",
            "pathCount": 0,
            "operationCount": 0,
            "rawExcerpt": "<!doctype html>\n<html lang=\"en\" dir=\"ltr\">\n    <head>\n        <meta charset=\"utf-8\">\n        <meta http-equiv=\"X-UA-Compatible\" content=\"IE=edge\">\n        <meta name=\"viewport\" content=\"width=device-width, initial-scale=1, user-scalable=yes\">\n        <link rel=\"icon\" href=\"/images/favicon/favicon.ico\" type=\"image/x-icon\">\n<link rel=\"icon\" type=\"image/png\" sizes=\"16x16\" href=\"/images/favicon/favicon-16x16.png\">\n<link rel=\"icon\" type=\"image/png\" sizes=\"32x32\" href=\"/images/favicon/favicon-32x32.png\">\n<link rel=\"icon\" type=\"image/png\" sizes=\"96x96\" href=\"/images/favicon/favicon-96x96.png\">\n<link rel=\"icon\" type=\"image/png\" sizes=\"192x192\" href=\"/images/favicon/favicon-192x192.png\">\n<link rel=\"apple-touch-icon\" sizes=\"57x57\" href=\"/images/favicon/favicon-57x57.png\">\n<link rel=\"apple-touch-icon"
          },
          {
            "path": "/swagger.yaml",
            "statusCode": 404,
            "contentType": "text/html; charset=utf-8",
            "valid": false,
            "issue": "OpenAPI YAML document did not match the expected shape. Content-Type \"text/html; charset=utf-8\" is not a recognized type; unsupported version: ; missing info block with title and version; missing paths block; no operations found.",
            "compatibleContentType": false,
            "format": "yaml",
            "version": "",
            "pathCount": 0,
            "operationCount": 0,
            "rawExcerpt": "<!doctype html>\n<html lang=\"en\" dir=\"ltr\">\n    <head>\n        <meta charset=\"utf-8\">\n        <meta http-equiv=\"X-UA-Compatible\" content=\"IE=edge\">\n        <meta name=\"viewport\" content=\"width=device-width, initial-scale=1, user-scalable=yes\">\n        <link rel=\"icon\" href=\"/images/favicon/favicon.ico\" type=\"image/x-icon\">\n<link rel=\"icon\" type=\"image/png\" sizes=\"16x16\" href=\"/images/favicon/favicon-16x16.png\">\n<link rel=\"icon\" type=\"image/png\" sizes=\"32x32\" href=\"/images/favicon/favicon-32x32.png\">\n<link rel=\"icon\" type=\"image/png\" sizes=\"96x96\" href=\"/images/favicon/favicon-96x96.png\">\n<link rel=\"icon\" type=\"image/png\" sizes=\"192x192\" href=\"/images/favicon/favicon-192x192.png\">\n<link rel=\"apple-touch-icon\" sizes=\"57x57\" href=\"/images/favicon/favicon-57x57.png\">\n<link rel=\"apple-touch-icon"
          },
          {
            "path": "/api/openapi.json",
            "statusCode": 404,
            "contentType": "text/html; charset=utf-8",
            "valid": false,
            "issue": "OpenAPI YAML document did not match the expected shape. Content-Type \"text/html; charset=utf-8\" is not a recognized type; unsupported version: ; missing info block with title and version; missing paths block; no operations found.",
            "compatibleContentType": false,
            "format": "yaml",
            "version": "",
            "pathCount": 0,
            "operationCount": 0,
            "rawExcerpt": "<!doctype html>\n<html lang=\"en\" dir=\"ltr\">\n    <head>\n        <meta charset=\"utf-8\">\n        <meta http-equiv=\"X-UA-Compatible\" content=\"IE=edge\">\n        <meta name=\"viewport\" content=\"width=device-width, initial-scale=1, user-scalable=yes\">\n        <link rel=\"icon\" href=\"/images/favicon/favicon.ico\" type=\"image/x-icon\">\n<link rel=\"icon\" type=\"image/png\" sizes=\"16x16\" href=\"/images/favicon/favicon-16x16.png\">\n<link rel=\"icon\" type=\"image/png\" sizes=\"32x32\" href=\"/images/favicon/favicon-32x32.png\">\n<link rel=\"icon\" type=\"image/png\" sizes=\"96x96\" href=\"/images/favicon/favicon-96x96.png\">\n<link rel=\"icon\" type=\"image/png\" sizes=\"192x192\" href=\"/images/favicon/favicon-192x192.png\">\n<link rel=\"apple-touch-icon\" sizes=\"57x57\" href=\"/images/favicon/favicon-57x57.png\">\n<link rel=\"apple-touch-icon"
          },
          {
            "path": "/api/swagger.json",
            "statusCode": 404,
            "contentType": "text/html; charset=utf-8",
            "valid": false,
            "issue": "OpenAPI YAML document did not match the expected shape. Content-Type \"text/html; charset=utf-8\" is not a recognized type; unsupported version: ; missing info block with title and version; missing paths block; no operations found.",
            "compatibleContentType": false,
            "format": "yaml",
            "version": "",
            "pathCount": 0,
            "operationCount": 0,
            "rawExcerpt": "<!doctype html>\n<html lang=\"en\" dir=\"ltr\">\n    <head>\n        <meta charset=\"utf-8\">\n        <meta http-equiv=\"X-UA-Compatible\" content=\"IE=edge\">\n        <meta name=\"viewport\" content=\"width=device-width, initial-scale=1, user-scalable=yes\">\n        <link rel=\"icon\" href=\"/images/favicon/favicon.ico\" type=\"image/x-icon\">\n<link rel=\"icon\" type=\"image/png\" sizes=\"16x16\" href=\"/images/favicon/favicon-16x16.png\">\n<link rel=\"icon\" type=\"image/png\" sizes=\"32x32\" href=\"/images/favicon/favicon-32x32.png\">\n<link rel=\"icon\" type=\"image/png\" sizes=\"96x96\" href=\"/images/favicon/favicon-96x96.png\">\n<link rel=\"icon\" type=\"image/png\" sizes=\"192x192\" href=\"/images/favicon/favicon-192x192.png\">\n<link rel=\"apple-touch-icon\" sizes=\"57x57\" href=\"/images/favicon/favicon-57x57.png\">\n<link rel=\"apple-touch-icon"
          },
          {
            "path": "/docs/openapi.json",
            "statusCode": 404,
            "contentType": "text/html; charset=utf-8",
            "valid": false,
            "issue": "OpenAPI YAML document did not match the expected shape. Content-Type \"text/html; charset=utf-8\" is not a recognized type; unsupported version: ; missing info block with title and version; missing paths block; no operations found.",
            "compatibleContentType": false,
            "format": "yaml",
            "version": "",
            "pathCount": 0,
            "operationCount": 0,
            "rawExcerpt": "<!doctype html>\n<html lang=\"en\" dir=\"ltr\">\n    <head>\n        <meta charset=\"utf-8\">\n        <meta http-equiv=\"X-UA-Compatible\" content=\"IE=edge\">\n        <meta name=\"viewport\" content=\"width=device-width, initial-scale=1, user-scalable=yes\">\n        <link rel=\"icon\" href=\"/images/favicon/favicon.ico\" type=\"image/x-icon\">\n<link rel=\"icon\" type=\"image/png\" sizes=\"16x16\" href=\"/images/favicon/favicon-16x16.png\">\n<link rel=\"icon\" type=\"image/png\" sizes=\"32x32\" href=\"/images/favicon/favicon-32x32.png\">\n<link rel=\"icon\" type=\"image/png\" sizes=\"96x96\" href=\"/images/favicon/favicon-96x96.png\">\n<link rel=\"icon\" type=\"image/png\" sizes=\"192x192\" href=\"/images/favicon/favicon-192x192.png\">\n<link rel=\"apple-touch-icon\" sizes=\"57x57\" href=\"/images/favicon/favicon-57x57.png\">\n<link rel=\"apple-touch-icon"
          }
        ]
      },
      "issue": "OpenAPI YAML document did not match the expected shape. Content-Type \"text/html; charset=utf-8\" is not a recognized type; unsupported version: ; missing info block with title and version; missing paths block; no operations found.",
      "howToFix": "Publish a valid OpenAPI 3.x or Swagger 2.0 JSON/YAML document with info, paths, operations, and responses."
    }
  ]
}

AI DiscoverabilityBot Access ControlEstablished

AI bot rules in robots.txt

AI bot rules in robots.txt is missing or incomplete.

33 Fail

Needs attention

AI bot rules in robots.txt

Failed check

Issue

No specific User-agent rules found for major AI crawlers (GPTBot, ClaudeBot, etc.) in robots.txt.

Why it matters

Explicit AI bot rules reduce ambiguity for crawler operators and make training, indexing, or retrieval access policy auditable.

Check name

AI bot rules in robots.txt

Score

0/100

Status

fail

Category

Bot Access Control

Maturity

Established

Goal

Add User-agent rules for AI crawlers like GPTBot, Claude-Web, and others.

Result

AI bot rules in robots.txt is missing or incomplete.

Evidence

{
  "expectedBots": [
    "GPTBot",
    "ChatGPT-User",
    "ClaudeBot",
    "Claude-Web",
    "Anthropic-AI",
    "Google-Extended",
    "PerplexityBot",
    "CCBot",
    "Applebot-Extended",
    "Meta-ExternalAgent",
    "Bytespider",
    "Amazonbot",
    "Cohere-AI"
  ],
  "configuredBots": []
}

AI DiscoverabilityBot Access ControlInformational

Content Signal

Content Signal is missing or incomplete.

33 Fail

Needs attention

Content Signal

Failed check

Issue

No Content Signal found in robots.txt

Why it matters

Content Signal provides a machine-readable way to communicate AI usage preferences where participating crawlers look for policy.

Check name

Content Signal

Score

0/100

Status

fail

Category

Bot Access Control

Maturity

Informational

Goal

Declare AI content usage preferences with Content Signal in robots.txt.

Result

Content Signal is missing or incomplete.

Evidence

{
  "signals": [],
  "ai-train": false,
  "search": false,
  "ai-input": false
}

Agent Ease of UseMCPEmerging recommendation

MCP Server Card

MCP Server Card failed at "Fetch to find resource".

33 Fail

Needs attention

MCP Server Card

Failed check

Issue

MCP Server Card was not found at the expected path.

Why it matters

MCP Server Cards help agents discover server transports, capabilities, and protocol details before opening an MCP session.

Check name

MCP Server Card

Score

0/100

Status

fail

Category

MCP

Maturity

Emerging recommendation

Goal

Publish an MCP Server Card for agent discovery.

Result

MCP Server Card failed at "Fetch to find resource".

Validation steps

Fetch to find resource
MCP Server Card was not found at the expected path.

Evidence

{
  "failedStep": "fetch",
  "steps": [
    {
      "id": "fetch",
      "title": "Fetch to find resource",
      "status": "fail",
      "evidence": {
        "checked": [
          {
            "path": "/.well-known/mcp/server-card.json",
            "statusCode": 404,
            "contentType": "text/html; charset=utf-8",
            "length": 63330
          },
          {
            "path": "/.well-known/mcp/server-cards.json",
            "statusCode": 404,
            "contentType": "text/html; charset=utf-8",
            "length": 63330
          },
          {
            "path": "/.well-known/mcp.json",
            "statusCode": 404,
            "contentType": "text/html; charset=utf-8",
            "length": 63330
          }
        ]
      },
      "issue": "MCP Server Card was not found at the expected path.",
      "howToFix": "Publish an MCP server card with valid transports and make each advertised local endpoint answer an MCP initialize request."
    }
  ]
}

Agent Ease of UseMCPEmerging recommendation

mcp.json

mcp.json failed at "Fetch to find resource".

33 Fail

Needs attention

mcp.json

Failed check

Issue

mcp.json was not found at the expected path.

Why it matters

MCP clients need trustworthy server metadata, protocol version, transport details, and capability hints before connecting to a remote MCP server.

Check name

mcp.json

Score

0/100

Status

fail

Category

MCP

Maturity

Emerging recommendation

Goal

Expose a stable MCP server metadata document that points agents to the site's MCP endpoint.

Result

mcp.json failed at "Fetch to find resource".

Validation steps

Fetch to find resource
mcp.json was not found at the expected path.

Evidence

{
  "failedStep": "fetch",
  "steps": [
    {
      "id": "fetch",
      "title": "Fetch to find resource",
      "status": "fail",
      "evidence": {
        "checked": [
          {
            "path": "/mcp.json",
            "statusCode": 404,
            "contentType": "text/html; charset=utf-8",
            "length": 63330
          },
          {
            "path": "/.well-known/mcp.json",
            "statusCode": 404,
            "contentType": "text/html; charset=utf-8",
            "length": 63330
          },
          {
            "path": "/.well-known/mcp/server-card.json",
            "statusCode": 404,
            "contentType": "text/html; charset=utf-8",
            "length": 63330
          }
        ]
      },
      "issue": "mcp.json was not found at the expected path.",
      "howToFix": "Publish mcp.json or an MCP server card with serverInfo, protocolVersion, transport endpoint, and capabilities."
    }
  ]
}

AI DiscoverabilityBot Access ControlInformational

Web Bot Auth request signing

Web Bot Auth request signing failed at "Fetch to find resource".

33 Fail

Needs attention

Web Bot Auth request signing

Failed check

Issue

Web Bot Auth request signing was not found at the expected path.

Why it matters

Web Bot Auth discovery lets servers and clients find signing keys for bot identity workflows based on HTTP Message Signatures.

Check name

Web Bot Auth request signing

Score

0/100

Status

fail

Category

Bot Access Control

Maturity

Informational

Goal

Advertise HTTP Message Signatures keys when this site operates signed bot clients or supports Web Bot Auth workflows.

Result

Web Bot Auth request signing failed at "Fetch to find resource".

Validation steps

Fetch to find resource
Web Bot Auth request signing was not found at the expected path.

Evidence

{
  "failedStep": "fetch",
  "steps": [
    {
      "id": "fetch",
      "title": "Fetch to find resource",
      "status": "fail",
      "evidence": {
        "checked": [
          {
            "path": "/.well-known/http-message-signatures-directory",
            "statusCode": 403,
            "contentType": "text/html; charset=utf-8",
            "length": 148
          }
        ]
      },
      "issue": "Web Bot Auth request signing was not found at the expected path.",
      "howToFix": "If publishing Web Bot Auth keys, return a JSON key directory with a non-empty keys array and the draft media type."
    }
  ]
}

Agent Ease of UseMCPInformational

WebMCP manifest

WebMCP manifest failed at "Fetch to find resource".

33 Fail

Needs attention

WebMCP manifest

Failed check

Issue

WebMCP manifest was not found at the expected path.

Why it matters

A WebMCP manifest advertises browser-exposed tools declaratively so agents can understand available site actions before invoking them.

Check name

WebMCP manifest

Score

0/100

Status

fail

Category

MCP

Maturity

Informational

Goal

Publish a WebMCP manifest for declarative browser tool discovery when using the draft manifest convention.

Result

WebMCP manifest failed at "Fetch to find resource".

Validation steps

Fetch to find resource
WebMCP manifest was not found at the expected path.

Evidence

{
  "failedStep": "fetch",
  "steps": [
    {
      "id": "fetch",
      "title": "Fetch to find resource",
      "status": "fail",
      "evidence": {
        "checked": [
          {
            "path": "/.well-known/webmcp.json",
            "statusCode": 404,
            "contentType": "text/html; charset=utf-8",
            "length": 63330
          },
          {
            "path": "/webmcp.json",
            "statusCode": 404,
            "contentType": "text/html; charset=utf-8",
            "length": 63330
          },
          {
            "path": "/mcp.json",
            "statusCode": 404,
            "contentType": "text/html; charset=utf-8",
            "length": 63330
          }
        ]
      },
      "issue": "WebMCP manifest was not found at the expected path.",
      "howToFix": "Keep declarative WebMCP manifest discovery informational until the manifest shape stabilizes; validate tools if you publish one."
    }
  ]
}

AI DiscoverabilityContent ReadinessEmerging recommendation

llms.txt

llms.txt failed at "Fetch to find resource".

25 Fail

Needs attention

llms.txt

Failed check

Issue

llms.txt was not found at the expected path.

Why it matters

llms.txt gives language-model clients a concise, curated summary of important site context and links before they crawl broadly.

Check name

llms.txt

Score

0/100

Status

fail

Category

Content Readiness

Maturity

Emerging recommendation

Goal

Publish llms.txt to summarize agent-readable site guidance.

Result

llms.txt failed at "Fetch to find resource".

Validation steps

Fetch to find resource
llms.txt was not found at the expected path.

Evidence

{
  "failedStep": "fetch",
  "steps": [
    {
      "id": "fetch",
      "title": "Fetch to find resource",
      "status": "fail",
      "evidence": {
        "checked": [
          {
            "path": "/llms.txt",
            "statusCode": 404,
            "contentType": "text/html; charset=utf-8",
            "length": 63330
          },
          {
            "path": "/llms-full.txt",
            "statusCode": 404,
            "contentType": "text/html; charset=utf-8",
            "length": 63330
          }
        ]
      },
      "issue": "llms.txt was not found at the expected path.",
      "howToFix": "Publish /llms.txt as Markdown with a clear title, concise site summary, and useful links for agents."
    }
  ]
}

AI DiscoverabilityContent ReadinessEstablished

Markdown negotiation

Markdown negotiation failed at "Markdown content type".

25 Fail

Needs attention

Markdown negotiation

Failed check

Issue

Content-Type "text/html; charset=utf-8" does not indicate Markdown when requested with Accept: text/markdown.

Why it matters

Markdown negotiation gives agents a cleaner representation of page content while preserving normal HTML for browsers.

Check name

Markdown negotiation

Score

0/100

Status

fail

Category

Content Readiness

Maturity

Established

Goal

Return HTML responses as markdown when agents request it.

Result

Markdown negotiation failed at "Markdown content type".

Validation steps

Markdown content type
Content-Type "text/html; charset=utf-8" does not indicate Markdown when requested with Accept: text/markdown.
Vary: Accept header
Markdown negotiation is missing Vary: Accept; current Vary header is "Accept-Encoding".
Structured Markdown body
Markdown response is missing a heading.

Evidence

{
  "failedStep": "content-type",
  "steps": [
    {
      "id": "content-type",
      "title": "Markdown content type",
      "status": "fail",
      "evidence": {
        "statusCode": 200,
        "contentType": "text/html; charset=utf-8"
      },
      "issue": "Content-Type \"text/html; charset=utf-8\" does not indicate Markdown when requested with Accept: text/markdown.",
      "howToFix": "Return Content-Type: text/markdown; charset=utf-8 for requests with Accept: text/markdown."
    },
    {
      "id": "vary-accept",
      "title": "Vary: Accept header",
      "status": "fail",
      "evidence": {
        "vary": "Accept-Encoding"
      },
      "issue": "Markdown negotiation is missing Vary: Accept; current Vary header is \"Accept-Encoding\".",
      "howToFix": "Add Vary: Accept on negotiated Markdown responses so shared caches keep HTML and Markdown variants separate."
    },
    {
      "id": "markdown-content",
      "title": "Structured Markdown body",
      "status": "fail",
      "evidence": {
        "valid": false,
        "hasHeading": false,
        "wordCount": 9270,
        "excerpt": "<!doctype html>\n<html lang=\"en\" dir=\"ltr\">\n    <head>\n        <meta charset=\"utf-8\">\n        <meta http-equiv=\"X-UA-Compatible\" content=\"IE=edge\">\n        <meta name=\"viewport\" content=\"width=device-width, initial-scale=1, user-scalable=yes",
        "issue": "Markdown response is missing a heading."
      },
      "issue": "Markdown response is missing a heading.",
      "howToFix": "Return Markdown with at least one heading and substantive page content, including useful links or instructions for agents."
    }
  ]
}

AI DiscoverabilityContent ReadinessEstablished

Semantic HTML

Semantic HTML is missing or incomplete.

25 Fail

Needs attention

Semantic HTML

Failed check

Issue

Semantic HTML is incomplete: missing <main> landmark.

Why it matters

Semantic HTML gives browsers, assistive technology, search systems, and agents reliable landmarks, headings, controls, form semantics, and image context.

Check name

Semantic HTML

Score

0/100

Status

fail

Category

Content Readiness

Maturity

Established

Goal

Expose readable page structure through semantic HTML and accessible controls.

Result

Semantic HTML is missing or incomplete.

Evidence

{
  "main": false,
  "nav": true,
  "footer": true,
  "meaningfulH1": true,
  "headingOrder": true,
  "accessibleLinks": true,
  "accessibleButtons": true,
  "imageAltCoverage": true,
  "formAutocompleteCoverage": true,
  "details": {
    "inaccessibleLinks": [],
    "inaccessibleButtons": [],
    "missingAutocompleteInputs": [],
    "imagesMissingAlt": [],
    "skippedHeadingLevels": []
  },
  "counts": {
    "h1": 1,
    "headings": 26,
    "links": 152,
    "inaccessibleLinks": 0,
    "buttons": 2,
    "inaccessibleButtons": 0,
    "images": 33,
    "imagesWithAlt": 33,
    "autocompleteInputs": 0,
    "inputsWithAutocomplete": 0,
    "missingAutocompleteInputs": 0
  }
}

Agent Ease of UseSkill DiscoveryEmerging recommendation

A2A Agent Card

A2A Agent Card failed at "Fetch to find resource".

20 Fail

Needs attention

A2A Agent Card

Failed check

Issue

A2A Agent Card was not found at the expected path.

Why it matters

A2A Agent Cards let compatible clients discover agent skills, input and output modes, and the endpoint used to invoke those skills.

Check name

A2A Agent Card

Score

0/100

Status

fail

Category

Skill Discovery

Maturity

Emerging recommendation

Goal

Publish an agent card so A2A-compatible clients can discover capabilities.

Result

A2A Agent Card failed at "Fetch to find resource".

Validation steps

Fetch to find resource
A2A Agent Card was not found at the expected path.

Evidence

{
  "failedStep": "fetch",
  "steps": [
    {
      "id": "fetch",
      "title": "Fetch to find resource",
      "status": "fail",
      "evidence": {
        "checked": [
          {
            "path": "/.well-known/agent-card.json",
            "statusCode": 404,
            "contentType": "text/html; charset=utf-8",
            "length": 63330
          },
          {
            "path": "/.well-known/a2a/agent-card.json",
            "statusCode": 404,
            "contentType": "text/html; charset=utf-8",
            "length": 63330
          },
          {
            "path": "/agent-card.json",
            "statusCode": 404,
            "contentType": "text/html; charset=utf-8",
            "length": 63330
          }
        ]
      },
      "issue": "A2A Agent Card was not found at the expected path.",
      "howToFix": "Publish an A2A Agent Card with required skill details and make the advertised url answer A2A JSON-RPC requests."
    }
  ]
}

Agent Ease of UseSkill DiscoveryEmerging recommendation

Agent Skills index

Agent Skills index failed at "Fetch to find resource".

20 Fail

Needs attention

Agent Skills index

Failed check

Issue

Agent Skills index was not found at the expected path.

Why it matters

An Agent Skills index lets clients find task-specific SKILL.md documents that describe how to use site capabilities correctly.

Check name

Agent Skills index

Score

0/100

Status

fail

Category

Skill Discovery

Maturity

Emerging recommendation

Goal

Publish an agent skills discovery index.

Result

Agent Skills index failed at "Fetch to find resource".

Validation steps

Fetch to find resource
Agent Skills index was not found at the expected path.

Evidence

{
  "failedStep": "fetch",
  "steps": [
    {
      "id": "fetch",
      "title": "Fetch to find resource",
      "status": "fail",
      "evidence": {
        "checked": [
          {
            "path": "/.well-known/agent-skills/index.json",
            "statusCode": 404,
            "contentType": "text/html; charset=utf-8",
            "length": 63330
          },
          {
            "path": "/.well-known/skills/index.json",
            "statusCode": 404,
            "contentType": "text/html; charset=utf-8",
            "length": 63330
          }
        ]
      },
      "issue": "Agent Skills index was not found at the expected path.",
      "howToFix": "Publish an index with a non-empty skills array and reachable SKILL.md URLs."
    }
  ]
}

Agent Ease of UseSkill DiscoveryEmerging recommendation

agent.json

agent.json failed at "Fetch to find resource".

20 Fail

Needs attention

agent.json

Failed check

Issue

agent.json was not found at the expected path.

Why it matters

agent.json is an emerging machine-readable manifest for declaring what a website does, how agents authenticate, and which actions or protocols are available.

Check name

agent.json

Score

0/100

Status

fail

Category

Skill Discovery

Maturity

Emerging recommendation

Goal

Publish the singular Agent Web Protocol agent.json manifest without confusing it with the separate agents.json directory convention.

Result

agent.json failed at "Fetch to find resource".

Validation steps

Fetch to find resource
agent.json was not found at the expected path.

Evidence

{
  "failedStep": "fetch",
  "steps": [
    {
      "id": "fetch",
      "title": "Fetch to find resource",
      "status": "fail",
      "evidence": {
        "checked": [
          {
            "path": "/.well-known/agent.json",
            "statusCode": 404,
            "contentType": "text/html; charset=utf-8",
            "length": 63330
          },
          {
            "path": "/agent.json",
            "statusCode": 404,
            "contentType": "text/html; charset=utf-8",
            "length": 63330
          }
        ]
      },
      "issue": "agent.json was not found at the expected path.",
      "howToFix": "Publish agent.json with awp_version, domain, intent, and typed actions that point to real same-origin API or protocol endpoints."
    }
  ]
}

Agent Ease of UseSkill DiscoveryInformational

agents.json

agents.json failed at "Fetch to find resource".

20 Fail

Needs attention

agents.json

Failed check

Issue

agents.json was not found at the expected path.

Why it matters

agents.json gives clients a simple directory of agent-facing capabilities and contacts when a site chooses to advertise them.

Check name

agents.json

Score

0/100

Status

fail

Category

Skill Discovery

Maturity

Informational

Goal

Publish an agents.json directory for agent-facing capabilities and contacts when using this convention.

Result

agents.json failed at "Fetch to find resource".

Validation steps

Fetch to find resource
agents.json was not found at the expected path.

Evidence

{
  "failedStep": "fetch",
  "steps": [
    {
      "id": "fetch",
      "title": "Fetch to find resource",
      "status": "fail",
      "evidence": {
        "checked": [
          {
            "path": "/.well-known/agents.json",
            "statusCode": 404,
            "contentType": "text/html; charset=utf-8",
            "length": 63330
          },
          {
            "path": "/agents.json",
            "statusCode": 404,
            "contentType": "text/html; charset=utf-8",
            "length": 63330
          }
        ]
      },
      "issue": "agents.json was not found at the expected path.",
      "howToFix": "If this site uses agents.json, publish JSON with an agents array containing name and url for each agent."
    }
  ]
}

Agent Ease of UseSkill DiscoveryEmerging recommendation

DNS-AID Agent Discovery

DNS-AID Agent Discovery failed at "Resolve DNS-AID SVCB/HTTPS records".

15 Fail

Needs attention

DNS-AID Agent Discovery

Failed check

Issue

No DNS-AID entrypoint records were found under _agents.

Why it matters

DNS-AID lets agents discover index, A2A, and other agent entrypoints before fetching HTTP metadata, while DNSSEC can authenticate the discovery zone.

Check name

DNS-AID Agent Discovery

Score

25/100

Status

fail

Category

Skill Discovery

Maturity

Emerging recommendation

Goal

Publish DNS for AI Discovery records under _agents for DNS-based agent entrypoint discovery.

Result

DNS-AID Agent Discovery failed at "Resolve DNS-AID SVCB/HTTPS records".

Validation steps

Resolve DNS-AID SVCB/HTTPS records
No DNS-AID entrypoint records were found under _agents.
Validate alpn and endpoint parameters
Include alpn and endpoint service parameters in each DNS-AID record so agents know the protocol and target entrypoint.
Check DNSSEC material
DNSSEC material was not visible for the hostname or parent zone from this resolver.

Evidence

{
  "failedStep": "svcb-https-records",
  "steps": [
    {
      "id": "svcb-https-records",
      "title": "Resolve DNS-AID SVCB/HTTPS records",
      "status": "fail",
      "evidence": {
        "hostname": "duo.com",
        "probes": [
          {
            "name": "_index._agents.duo.com",
            "found": false,
            "recordCount": 1,
            "records": [],
            "hasAlpn": false,
            "hasEndpoint": false
          },
          {
            "name": "_a2a._agents.duo.com",
            "found": false,
            "recordCount": 1,
            "records": [],
            "hasAlpn": false,
            "hasEndpoint": false
          }
        ]
      },
      "issue": "No DNS-AID entrypoint records were found under _agents.",
      "howToFix": "Publish ServiceMode SVCB/HTTPS records such as _index._agents.example.com or _a2a._agents.example.com."
    },
    {
      "id": "service-params",
      "title": "Validate alpn and endpoint parameters",
      "status": "informational",
      "evidence": {
        "discovered": []
      },
      "howToFix": "Include alpn and endpoint service parameters in each DNS-AID record so agents know the protocol and target entrypoint."
    },
    {
      "id": "dnssec",
      "title": "Check DNSSEC material",
      "status": "warning",
      "evidence": {
        "hasDnssecMaterial": false,
        "checked": [
          {
            "name": "duo.com",
            "dnssecTypes": [],
            "dnssecRecordCount": 0
          }
        ]
      },
      "issue": "DNSSEC material was not visible for the hostname or parent zone from this resolver.",
      "howToFix": "Sign the public discovery zone with DNSSEC so validating resolvers can return authenticated data."
    }
  ]
}

AI DiscoverabilityContent ReadinessEstablished

Content freshness signals

Content freshness signals is partially implemented.

13 Warning

Needs attention

Content freshness signals

Warning

Issue

Content freshness signals are incomplete: missing dateModified/datePublished in JSON-LD.

Why it matters

Freshness signals help agents decide whether content is current enough to cite, summarize, or compare against newer sources.

Check name

Content freshness signals

Score

50/100

Status

warning

Category

Content Readiness

Maturity

Established

Goal

Expose modified and published dates for freshness-aware retrieval and ranking.

Result

Content freshness signals is partially implemented.

Evidence

{
  "lastModified": "Mon, 08 Jun 2026 13:01:24 GMT",
  "schemaDates": [],
  "metaDateCount": 3,
  "timeDateCount": 0
}

GEO, AIO and AEOGEO, AIO & AEOEmerging recommendation

AIO: Source and trust signals

AIO: Source and trust signals scored 60/100 and needs improvement.

6 Warning

Needs attention

AIO: Source and trust signals

Warning

Issue

Missing AIO trust signals: publisher, freshnessDate.

Details

Why it matters

AI Overviews depend on Google-search eligibility, useful visible content, consistent structured data, answer-first sections, trust signals, and preview controls that permit snippets.

Check name

AIO: Source and trust signals

Score

60/100

Status

warning

Category

GEO, AIO & AEO

Maturity

Emerging recommendation

Goal

Make page content eligible and useful for Google AI Overviews and AI Mode extraction.

Result

AIO: Source and trust signals scored 60/100 and needs improvement.

Evidence

{
  "signals": {
    "author": true,
    "publisher": false,
    "freshnessDate": false,
    "aboutOrContact": true,
    "policyLinks": true
  },
  "missing": [
    "publisher",
    "freshnessDate"
  ],
  "authorMeta": "Cisco Duo",
  "schemaAuthors": [
    "Mark Rodrigue",
    "Mike Johnson",
    "Christopher Martin"
  ],
  "schemaPublishers": [],
  "schemaDates": [],
  "visibleDates": [],
  "aboutLinks": [
    {
      "href": "/about",
      "text": "About Duo",
      "html": "<a class href=\"/about\"> <span>About Duo</span> </a>"
    },
    {
      "href": "/about/contact",
      "text": "Contact sales",
      "html": "<a class=\"button button-secondary\" href=\"/about/contact\"> <span>Contact sales</span> </a>"
    },
    {
      "href": "/solutions/phishing-prevention",
      "text": "Learn about end-to-end phishing resistance",
      "html": "<a class=\"button button-link\" href=\"/solutions/phishing-prevention\"> <span>Learn about end-to-end phishing resistance</span><i class=\"icon-chevron-right\"></i><i class=\"icon-arrow-right\"></i> </a>"
    },
    {
      "href": "/product/duo-directory",
      "text": "Learn more about Duo Directory",
      "html": "<a class=\"button button-link\" href=\"/product/duo-directory\"> <span>Learn more about Duo Directory</span><i class=\"icon-chevron-right\"></i><i class=\"icon-arrow-right\"></i> </a>"
    },
    {
      "href": "/solutions/enterprise",
      "text": "Learn more about enterprise solutions",
      "html": "<a class=\"button button-link\" href=\"/solutions/enterprise\"> <span>Learn more about enterprise solutions</span><i class=\"icon-chevron-right\"></i><i class=\"icon-arrow-right\"></i> </a>"
    },
    {
      "href": "/about/contact",
      "text": "Contact sales Connect with our sales team and learn more.",
      "html": "<a class=\"card background-color-white\" href=\"/about/contact\"> <div class=\"card-text\"> <h3 class=\"text-heading h5 mt-default mb-default\">Contact sales</h3> <p>Connect with our sales team and learn more.</p> </div> <i class=\"button-circular blue-300 icon-arrow-right\"></i> </a>"
    },
    {
      "href": "/about",
      "text": "About Duo",
      "html": "<a class href=\"/about\"> <span>About Duo</span> </a>"
    },
    {
      "href": "https://www.linkedin.com/company/duosec",
      "text": "",
      "html": "<a class=\"social-icons__icon\" href=\"https://www.linkedin.com/company/duosec\" aria-label=\"Cisco Duo on LinkedIn\" target=\"_blank\"> <i class=\"icon-linkedin\" aria-hidden=\"true\"></i> </a>"
    },
    {
      "href": "https://www.cisco.com/c/en/us/about/legal/terms-conditions.html",
      "text": "Copyright Dispute Policy",
      "html": "<a class href=\"https://www.cisco.com/c/en/us/about/legal/terms-conditions.html\"> <span>Copyright Dispute Policy</span> </a>"
    }
  ],
  "contactLinks": [
    {
      "href": "/support",
      "text": "Support",
      "html": "<a class href=\"/support\"> <span>Support</span> </a>"
    },
    {
      "href": "/support",
      "text": "Duo Support",
      "html": "<a class href=\"/support\"> <span>Duo Support</span> </a>"
    },
    {
      "href": "/support#admins",
      "text": "For Admins",
      "html": "<a class href=\"/support#admins\"> <span>For Admins</span> </a>"
    },
    {
      "href": "/support#users",
      "text": "For Users",
      "html": "<a class href=\"/support#users\"> <span>For Users</span> </a>"
    },
    {
      "href": "/support",
      "text": "Support",
      "html": "<a class=\"utility-item\" href=\"/support\"> <span>Support</span> </a>"
    },
    {
      "href": "/about/contact",
      "text": "Contact sales",
      "html": "<a class=\"button button-secondary\" href=\"/about/contact\"> <span>Contact sales</span> </a>"
    },
    {
      "href": "/about/contact",
      "text": "Contact sales Connect with our sales team and learn more.",
      "html": "<a class=\"card background-color-white\" href=\"/about/contact\"> <div class=\"card-text\"> <h3 class=\"text-heading h5 mt-default mb-default\">Contact sales</h3> <p>Connect with our sales team and learn more.</p> </div> <i class=\"button-circular blue-300 icon-arrow-right\"></i> </a>"
    },
    {
      "href": "/support",
      "text": "Duo Support",
      "html": "<a class href=\"/support\"> <span>Duo Support</span> </a>"
    },
    {
      "href": "/support/free-trial-onboarding-guide",
      "text": "Getting Started with Duo",
      "html": "<a class href=\"/support/free-trial-onboarding-guide\"> <span>Getting Started with Duo</span> </a>"
    },
    {
      "href": "/support#admins",
      "text": "Support for Admins",
      "html": "<a class href=\"/support#admins\"> <span>Support for Admins</span> </a>"
    },
    {
      "href": "/support#users",
      "text": "Support for Users",
      "html": "<a class href=\"/support#users\"> <span>Support for Users</span> </a>"
    },
    {
      "href": "/support/security-and-reliability/security-response",
      "text": "Security Response",
      "html": "<a class href=\"/support/security-and-reliability/security-response\"> <span>Security Response</span> </a>"
    }
  ],
  "privacyLinks": [
    {
      "href": "/legal/terms",
      "text": "Terms of Service",
      "html": "<a class href=\"/legal/terms\"> <span>Terms of Service</span> </a>"
    },
    {
      "href": "/legal/cisco-online-privacy-statement",
      "text": "Privacy Statement",
      "html": "<a class href=\"/legal/cisco-online-privacy-statement\"> <span>Privacy Statement</span> </a>"
    },
    {
      "href": "https://www.cisco.com/c/en/us/about/legal/terms-conditions.html",
      "text": "Copyright Dispute Policy",
      "html": "<a class href=\"https://www.cisco.com/c/en/us/about/legal/terms-conditions.html\"> <span>Copyright Dispute Policy</span> </a>"
    }
  ],
  "score": 60,
  "weight": 20
}

GEO, AIO and AEOGEO, AIO & AEOEmerging recommendation

AEO: Answer-first sections

AEO: Answer-first sections scored 65/100 and needs improvement.

4 Warning

Needs attention

AEO: Answer-first sections

Warning

Issue

21 section(s) may benefit from a clearer opening answer; this is optional for feature/card sections.

Details

Why it matters

Answer engines need concise answers, question-led structure, entity clarity, visible evidence, and trust signals that can be extracted without relying on search-only metadata checks.

Check name

AEO: Answer-first sections

Score

65/100

Status

warning

Category

GEO, AIO & AEO

Maturity

Emerging recommendation

Goal

Make page content easy for answer engines and assistants to answer from directly.

Result

AEO: Answer-first sections scored 65/100 and needs improvement.

Evidence

{
  "sectionCount": 25,
  "passing": 4,
  "failing": [
    {
      "heading": "Phishing season is over",
      "headingHtml": "<h2 class=\"text-heading h2 mt-default mb-default\">Phishing season is <span>over</span></h2>",
      "firstParagraph": "Unleash phishing-resistant MFA with Duo—the only IAM solution built for security.",
      "paragraphHtml": "<p>Unleash phishing-resistant MFA with Duo&#x2014;the only IAM solution built for security.</p>",
      "words": 12,
      "direct": false,
      "issue": "First paragraph is 12 words and does not look like a concise direct answer."
    },
    {
      "heading": "Secure identity. No disruptions.",
      "headingHtml": "<h2 class=\"text-heading h3 mt-default mb-default\">Secure identity. No disruptions.</h2>",
      "firstParagraph": "Use Duo as a full IAM solution or broker secure access from identity sources you already have. Either way, establish consistent security control with Duo.",
      "paragraphHtml": "<p>Use Duo as a full IAM solution or broker secure access from identity sources you already have. Either way, establish consistent security control with Duo.</p>",
      "words": 25,
      "direct": false,
      "issue": "First paragraph is 25 words and does not look like a concise direct answer."
    },
    {
      "heading": "See more. Stop more. Stay safe.",
      "headingHtml": "<h2 class=\"text-heading h3 mt-default mb-default\">See more. Stop more. Stay safe.</h2>",
      "firstParagraph": "Know who’s logging in, what’s risky, and what to do next. Cisco Identity Intelligence gives you the power to act before threats become problems.",
      "paragraphHtml": "<p>Know who&#x2019;s logging in, what&#x2019;s risky, and what to do next. Cisco Identity Intelligence gives you the power to act before threats become problems.</p>",
      "words": 26,
      "direct": false,
      "issue": "First paragraph is 26 words and does not look like a concise direct answer."
    },
    {
      "heading": "Agents secured. Data protected.",
      "headingHtml": "<h2 class=\"text-heading h3 mt-default mb-default\">Agents secured. Data protected.</h2>",
      "firstParagraph": "To unlock the benefits of the agentic AI era, trust must be established between humans and agents. Duo’s Agentic IAM extends formidable zero trust tenets to agentic workforce.",
      "paragraphHtml": "<p>To unlock the benefits of the agentic AI era, trust must be established between humans and agents. Duo&#x2019;s Agentic IAM extends formidable zero trust tenets to agentic workforce.</p>",
      "words": 29,
      "direct": false,
      "issue": "First paragraph is 29 words and does not look like a concise direct answer."
    },
    {
      "heading": "Seamless and secure",
      "headingHtml": "<h2 class=\"text-heading h2 mt-default mb-default\">Seamless and secure</h2>",
      "firstParagraph": "There’s no cutting corners when it comes to security. Cisco Duo goes beyond multi-factor-authentication (MFA), saves your team time, and easily integrates into your team’s workflow.",
      "paragraphHtml": "<p>There&#x2019;s no cutting corners when it comes to security. Cisco Duo goes beyond multi-factor-authentication (MFA), saves your team time, and easily integrates into your team&#x2019;s workflow.</p>",
      "words": 28,
      "direct": false,
      "issue": "First paragraph is 28 words and does not look like a concise direct answer."
    },
    {
      "heading": "SMB",
      "headingHtml": "<h2 class=\"text-heading h5 mt-default mb-default\">SMB</h2>",
      "firstParagraph": "Flexible protection for growing teams. Phishing-resistant multi-factor authentication (MFA), single sign-on (SSO), and additional safeguards help you stay ahead of evolving threats.",
      "paragraphHtml": "<p>Flexible protection for growing teams. Phishing-resistant multi-factor authentication (MFA), single sign-on (SSO), and additional safeguards help you stay ahead of evolving threats.</p>",
      "words": 22,
      "direct": false,
      "issue": "First paragraph is 22 words and does not look like a concise direct answer."
    },
    {
      "heading": "Enterprise",
      "headingHtml": "<h2 class=\"text-heading h5 mt-default mb-default\">Enterprise</h2>",
      "firstParagraph": "Scalable identity security for teams that need more comprehensive protection. Streamline identity management for every device.",
      "paragraphHtml": "<p>Scalable identity security for teams that need more comprehensive protection. Streamline identity management for every device.</p>",
      "words": 16,
      "direct": false,
      "issue": "First paragraph is 16 words and does not look like a concise direct answer."
    },
    {
      "heading": "Government",
      "headingHtml": "<h2 class=\"text-heading h5 mt-default mb-default\">Government</h2>",
      "firstParagraph": "For the strictest safety standards, stay ahead of evolving threats with Duo’s advanced tools to protect confidential data.",
      "paragraphHtml": "<p>For the strictest safety standards, stay ahead of evolving threats with Duo&#x2019;s advanced tools to protect confidential data.</p>",
      "words": 19,
      "direct": false,
      "issue": "First paragraph is 19 words and does not look like a concise direct answer."
    },
    {
      "heading": "Simple to set up, easy to use",
      "headingHtml": "<h2 class=\"text-heading h3 mt-default mb-default\">Simple to set up, easy to use</h2>",
      "firstParagraph": "Duo takes the guesswork out of security and reduces friction so your team can focus their time on moving your business forward.",
      "paragraphHtml": "<p>Duo takes the guesswork out of security and reduces friction so your team can focus their time on moving your business forward.</p>",
      "words": 22,
      "direct": false,
      "issue": "First paragraph is 22 words and does not look like a concise direct answer."
    },
    {
      "heading": "Cisco Systems is a 2026 Customers’ Choice for the Access Management market on Gartner Peer Insights™ based on reviews submitted for Cisco Duo.",
      "headingHtml": "<h2 class=\"text-heading h5 mt-default mb-default\">Cisco Systems is a 2026 Customers&#x2019; Choice for the Access Management market on Gartner Peer Insights&#x2122; based on reviews submitted for Cisco Duo.</h2>",
      "firstParagraph": "",
      "paragraphHtml": "<p></p>",
      "words": 0,
      "direct": false,
      "issue": "First paragraph is 0 words and does not look like a concise direct answer."
    },
    {
      "heading": "Start your free trial",
      "headingHtml": "<h3 class=\"text-heading h5 mt-default mb-default\">Start your free trial</h3>",
      "firstParagraph": "See why Duo is the leader in identity security.",
      "paragraphHtml": "<p>See why Duo is the leader in identity security.</p>",
      "words": 9,
      "direct": false,
      "issue": "First paragraph is 9 words and does not look like a concise direct answer."
    },
    {
      "heading": "Compare editions",
      "headingHtml": "<h3 class=\"text-heading h5 mt-default mb-default\">Compare editions</h3>",
      "firstParagraph": "Find out which edition is right for your organization.",
      "paragraphHtml": "<p>Find out which edition is right for your organization.</p>",
      "words": 9,
      "direct": false,
      "issue": "First paragraph is 9 words and does not look like a concise direct answer."
    },
    {
      "heading": "Contact sales",
      "headingHtml": "<h3 class=\"text-heading h5 mt-default mb-default\">Contact sales</h3>",
      "firstParagraph": "Connect with our sales team and learn more.",
      "paragraphHtml": "<p>Connect with our sales team and learn more.</p>",
      "words": 8,
      "direct": false,
      "issue": "First paragraph is 8 words and does not look like a concise direct answer."
    },
    {
      "heading": "Products",
      "headingHtml": "<h2 class=\"body-small\"> <span>Products</span> </h2>",
      "firstParagraph": "",
      "paragraphHtml": "",
      "words": 0,
      "direct": false,
      "issue": "No paragraph follows this heading."
    },
    {
      "heading": "Solutions",
      "headingHtml": "<h2 class=\"body-small\"> <span>Solutions</span> </h2>",
      "firstParagraph": "",
      "paragraphHtml": "",
      "words": 0,
      "direct": false,
      "issue": "No paragraph follows this heading."
    },
    {
      "heading": "PARTNERSHIPS",
      "headingHtml": "<h2 class=\"body-small\"> <span>PARTNERSHIPS</span> </h2>",
      "firstParagraph": "",
      "paragraphHtml": "",
      "words": 0,
      "direct": false,
      "issue": "No paragraph follows this heading."
    },
    {
      "heading": "Support",
      "headingHtml": "<h2 class=\"body-small\"> <span>Support</span> </h2>",
      "firstParagraph": "",
      "paragraphHtml": "",
      "words": 0,
      "direct": false,
      "issue": "No paragraph follows this heading."
    },
    {
      "heading": "Docs & Resources",
      "headingHtml": "<h2 class=\"body-small\"> <span>Docs &amp; Resources</span> </h2>",
      "firstParagraph": "",
      "paragraphHtml": "",
      "words": 0,
      "direct": false,
      "issue": "No paragraph follows this heading."
    },
    {
      "heading": "PRICING",
      "headingHtml": "<h2 class=\"body-small\"> <span>PRICING</span> </h2>",
      "firstParagraph": "",
      "paragraphHtml": "",
      "words": 0,
      "direct": false,
      "issue": "No paragraph follows this heading."
    },
    {
      "heading": "Company",
      "headingHtml": "<h2 class=\"body-small\"> <span>Company</span> </h2>",
      "firstParagraph": "",
      "paragraphHtml": "",
      "words": 0,
      "direct": false,
      "issue": "No paragraph follows this heading."
    },
    {
      "heading": "Download our app",
      "headingHtml": "<h2 class=\"body-small\"> <span>Download our app</span> </h2>",
      "firstParagraph": "© 2026 Cisco Systems, Inc.",
      "paragraphHtml": "<p class=\"copyright\"> &#xa9; 2026 Cisco Systems, Inc. </p>",
      "words": 4,
      "direct": false,
      "issue": "First paragraph is 4 words and does not look like a concise direct answer."
    }
  ],
  "score": 65,
  "weight": 28
}

GEO, AIO and AEOGEO, AIO & AEOEmerging recommendation

AEO: Answer evidence and trust

AEO: Answer evidence and trust scored 60/100 and needs improvement.

3 Warning

Needs attention

AEO: Answer evidence and trust

Warning

Issue

Missing AIO trust signals: publisher, freshnessDate.

Details

Why it matters

Answer engines need concise answers, question-led structure, entity clarity, visible evidence, and trust signals that can be extracted without relying on search-only metadata checks.

Check name

AEO: Answer evidence and trust

Score

60/100

Status

warning

Category

GEO, AIO & AEO

Maturity

Emerging recommendation

Goal

Make page content easy for answer engines and assistants to answer from directly.

Result

AEO: Answer evidence and trust scored 60/100 and needs improvement.

Evidence

{
  "signals": {
    "author": true,
    "publisher": false,
    "freshnessDate": false,
    "aboutOrContact": true,
    "policyLinks": true
  },
  "missing": [
    "publisher",
    "freshnessDate"
  ],
  "authorMeta": "Cisco Duo",
  "schemaAuthors": [
    "Mark Rodrigue",
    "Mike Johnson",
    "Christopher Martin"
  ],
  "schemaPublishers": [],
  "schemaDates": [],
  "visibleDates": [],
  "aboutLinks": [
    {
      "href": "/about",
      "text": "About Duo",
      "html": "<a class href=\"/about\"> <span>About Duo</span> </a>"
    },
    {
      "href": "/about/contact",
      "text": "Contact sales",
      "html": "<a class=\"button button-secondary\" href=\"/about/contact\"> <span>Contact sales</span> </a>"
    },
    {
      "href": "/solutions/phishing-prevention",
      "text": "Learn about end-to-end phishing resistance",
      "html": "<a class=\"button button-link\" href=\"/solutions/phishing-prevention\"> <span>Learn about end-to-end phishing resistance</span><i class=\"icon-chevron-right\"></i><i class=\"icon-arrow-right\"></i> </a>"
    },
    {
      "href": "/product/duo-directory",
      "text": "Learn more about Duo Directory",
      "html": "<a class=\"button button-link\" href=\"/product/duo-directory\"> <span>Learn more about Duo Directory</span><i class=\"icon-chevron-right\"></i><i class=\"icon-arrow-right\"></i> </a>"
    },
    {
      "href": "/solutions/enterprise",
      "text": "Learn more about enterprise solutions",
      "html": "<a class=\"button button-link\" href=\"/solutions/enterprise\"> <span>Learn more about enterprise solutions</span><i class=\"icon-chevron-right\"></i><i class=\"icon-arrow-right\"></i> </a>"
    },
    {
      "href": "/about/contact",
      "text": "Contact sales Connect with our sales team and learn more.",
      "html": "<a class=\"card background-color-white\" href=\"/about/contact\"> <div class=\"card-text\"> <h3 class=\"text-heading h5 mt-default mb-default\">Contact sales</h3> <p>Connect with our sales team and learn more.</p> </div> <i class=\"button-circular blue-300 icon-arrow-right\"></i> </a>"
    },
    {
      "href": "/about",
      "text": "About Duo",
      "html": "<a class href=\"/about\"> <span>About Duo</span> </a>"
    },
    {
      "href": "https://www.linkedin.com/company/duosec",
      "text": "",
      "html": "<a class=\"social-icons__icon\" href=\"https://www.linkedin.com/company/duosec\" aria-label=\"Cisco Duo on LinkedIn\" target=\"_blank\"> <i class=\"icon-linkedin\" aria-hidden=\"true\"></i> </a>"
    },
    {
      "href": "https://www.cisco.com/c/en/us/about/legal/terms-conditions.html",
      "text": "Copyright Dispute Policy",
      "html": "<a class href=\"https://www.cisco.com/c/en/us/about/legal/terms-conditions.html\"> <span>Copyright Dispute Policy</span> </a>"
    }
  ],
  "contactLinks": [
    {
      "href": "/support",
      "text": "Support",
      "html": "<a class href=\"/support\"> <span>Support</span> </a>"
    },
    {
      "href": "/support",
      "text": "Duo Support",
      "html": "<a class href=\"/support\"> <span>Duo Support</span> </a>"
    },
    {
      "href": "/support#admins",
      "text": "For Admins",
      "html": "<a class href=\"/support#admins\"> <span>For Admins</span> </a>"
    },
    {
      "href": "/support#users",
      "text": "For Users",
      "html": "<a class href=\"/support#users\"> <span>For Users</span> </a>"
    },
    {
      "href": "/support",
      "text": "Support",
      "html": "<a class=\"utility-item\" href=\"/support\"> <span>Support</span> </a>"
    },
    {
      "href": "/about/contact",
      "text": "Contact sales",
      "html": "<a class=\"button button-secondary\" href=\"/about/contact\"> <span>Contact sales</span> </a>"
    },
    {
      "href": "/about/contact",
      "text": "Contact sales Connect with our sales team and learn more.",
      "html": "<a class=\"card background-color-white\" href=\"/about/contact\"> <div class=\"card-text\"> <h3 class=\"text-heading h5 mt-default mb-default\">Contact sales</h3> <p>Connect with our sales team and learn more.</p> </div> <i class=\"button-circular blue-300 icon-arrow-right\"></i> </a>"
    },
    {
      "href": "/support",
      "text": "Duo Support",
      "html": "<a class href=\"/support\"> <span>Duo Support</span> </a>"
    },
    {
      "href": "/support/free-trial-onboarding-guide",
      "text": "Getting Started with Duo",
      "html": "<a class href=\"/support/free-trial-onboarding-guide\"> <span>Getting Started with Duo</span> </a>"
    },
    {
      "href": "/support#admins",
      "text": "Support for Admins",
      "html": "<a class href=\"/support#admins\"> <span>Support for Admins</span> </a>"
    },
    {
      "href": "/support#users",
      "text": "Support for Users",
      "html": "<a class href=\"/support#users\"> <span>Support for Users</span> </a>"
    },
    {
      "href": "/support/security-and-reliability/security-response",
      "text": "Security Response",
      "html": "<a class href=\"/support/security-and-reliability/security-response\"> <span>Security Response</span> </a>"
    }
  ],
  "privacyLinks": [
    {
      "href": "/legal/terms",
      "text": "Terms of Service",
      "html": "<a class href=\"/legal/terms\"> <span>Terms of Service</span> </a>"
    },
    {
      "href": "/legal/cisco-online-privacy-statement",
      "text": "Privacy Statement",
      "html": "<a class href=\"/legal/cisco-online-privacy-statement\"> <span>Privacy Statement</span> </a>"
    },
    {
      "href": "https://www.cisco.com/c/en/us/about/legal/terms-conditions.html",
      "text": "Copyright Dispute Policy",
      "html": "<a class href=\"https://www.cisco.com/c/en/us/about/legal/terms-conditions.html\"> <span>Copyright Dispute Policy</span> </a>"
    }
  ],
  "score": 60,
  "weight": 22
}

GEO, AIO and AEOGEO, AIO & AEOEmerging recommendation

AIO: Answer block readiness

AIO: Answer block readiness scored 65/100 and needs improvement.

2 Warning

Needs attention

AIO: Answer block readiness

Warning

Issue

21 section(s) may benefit from a clearer opening answer; this is optional for feature/card sections.

Details

Why it matters

AI Overviews depend on Google-search eligibility, useful visible content, consistent structured data, answer-first sections, trust signals, and preview controls that permit snippets.

Check name

AIO: Answer block readiness

Score

65/100

Status

warning

Category

GEO, AIO & AEO

Maturity

Emerging recommendation

Goal

Make page content eligible and useful for Google AI Overviews and AI Mode extraction.

Result

AIO: Answer block readiness scored 65/100 and needs improvement.

Evidence

{
  "sectionCount": 25,
  "passing": 4,
  "failing": [
    {
      "heading": "Phishing season is over",
      "headingHtml": "<h2 class=\"text-heading h2 mt-default mb-default\">Phishing season is <span>over</span></h2>",
      "firstParagraph": "Unleash phishing-resistant MFA with Duo—the only IAM solution built for security.",
      "paragraphHtml": "<p>Unleash phishing-resistant MFA with Duo&#x2014;the only IAM solution built for security.</p>",
      "words": 12,
      "direct": false,
      "issue": "First paragraph is 12 words and does not look like a concise direct answer."
    },
    {
      "heading": "Secure identity. No disruptions.",
      "headingHtml": "<h2 class=\"text-heading h3 mt-default mb-default\">Secure identity. No disruptions.</h2>",
      "firstParagraph": "Use Duo as a full IAM solution or broker secure access from identity sources you already have. Either way, establish consistent security control with Duo.",
      "paragraphHtml": "<p>Use Duo as a full IAM solution or broker secure access from identity sources you already have. Either way, establish consistent security control with Duo.</p>",
      "words": 25,
      "direct": false,
      "issue": "First paragraph is 25 words and does not look like a concise direct answer."
    },
    {
      "heading": "See more. Stop more. Stay safe.",
      "headingHtml": "<h2 class=\"text-heading h3 mt-default mb-default\">See more. Stop more. Stay safe.</h2>",
      "firstParagraph": "Know who’s logging in, what’s risky, and what to do next. Cisco Identity Intelligence gives you the power to act before threats become problems.",
      "paragraphHtml": "<p>Know who&#x2019;s logging in, what&#x2019;s risky, and what to do next. Cisco Identity Intelligence gives you the power to act before threats become problems.</p>",
      "words": 26,
      "direct": false,
      "issue": "First paragraph is 26 words and does not look like a concise direct answer."
    },
    {
      "heading": "Agents secured. Data protected.",
      "headingHtml": "<h2 class=\"text-heading h3 mt-default mb-default\">Agents secured. Data protected.</h2>",
      "firstParagraph": "To unlock the benefits of the agentic AI era, trust must be established between humans and agents. Duo’s Agentic IAM extends formidable zero trust tenets to agentic workforce.",
      "paragraphHtml": "<p>To unlock the benefits of the agentic AI era, trust must be established between humans and agents. Duo&#x2019;s Agentic IAM extends formidable zero trust tenets to agentic workforce.</p>",
      "words": 29,
      "direct": false,
      "issue": "First paragraph is 29 words and does not look like a concise direct answer."
    },
    {
      "heading": "Seamless and secure",
      "headingHtml": "<h2 class=\"text-heading h2 mt-default mb-default\">Seamless and secure</h2>",
      "firstParagraph": "There’s no cutting corners when it comes to security. Cisco Duo goes beyond multi-factor-authentication (MFA), saves your team time, and easily integrates into your team’s workflow.",
      "paragraphHtml": "<p>There&#x2019;s no cutting corners when it comes to security. Cisco Duo goes beyond multi-factor-authentication (MFA), saves your team time, and easily integrates into your team&#x2019;s workflow.</p>",
      "words": 28,
      "direct": false,
      "issue": "First paragraph is 28 words and does not look like a concise direct answer."
    },
    {
      "heading": "SMB",
      "headingHtml": "<h2 class=\"text-heading h5 mt-default mb-default\">SMB</h2>",
      "firstParagraph": "Flexible protection for growing teams. Phishing-resistant multi-factor authentication (MFA), single sign-on (SSO), and additional safeguards help you stay ahead of evolving threats.",
      "paragraphHtml": "<p>Flexible protection for growing teams. Phishing-resistant multi-factor authentication (MFA), single sign-on (SSO), and additional safeguards help you stay ahead of evolving threats.</p>",
      "words": 22,
      "direct": false,
      "issue": "First paragraph is 22 words and does not look like a concise direct answer."
    },
    {
      "heading": "Enterprise",
      "headingHtml": "<h2 class=\"text-heading h5 mt-default mb-default\">Enterprise</h2>",
      "firstParagraph": "Scalable identity security for teams that need more comprehensive protection. Streamline identity management for every device.",
      "paragraphHtml": "<p>Scalable identity security for teams that need more comprehensive protection. Streamline identity management for every device.</p>",
      "words": 16,
      "direct": false,
      "issue": "First paragraph is 16 words and does not look like a concise direct answer."
    },
    {
      "heading": "Government",
      "headingHtml": "<h2 class=\"text-heading h5 mt-default mb-default\">Government</h2>",
      "firstParagraph": "For the strictest safety standards, stay ahead of evolving threats with Duo’s advanced tools to protect confidential data.",
      "paragraphHtml": "<p>For the strictest safety standards, stay ahead of evolving threats with Duo&#x2019;s advanced tools to protect confidential data.</p>",
      "words": 19,
      "direct": false,
      "issue": "First paragraph is 19 words and does not look like a concise direct answer."
    },
    {
      "heading": "Simple to set up, easy to use",
      "headingHtml": "<h2 class=\"text-heading h3 mt-default mb-default\">Simple to set up, easy to use</h2>",
      "firstParagraph": "Duo takes the guesswork out of security and reduces friction so your team can focus their time on moving your business forward.",
      "paragraphHtml": "<p>Duo takes the guesswork out of security and reduces friction so your team can focus their time on moving your business forward.</p>",
      "words": 22,
      "direct": false,
      "issue": "First paragraph is 22 words and does not look like a concise direct answer."
    },
    {
      "heading": "Cisco Systems is a 2026 Customers’ Choice for the Access Management market on Gartner Peer Insights™ based on reviews submitted for Cisco Duo.",
      "headingHtml": "<h2 class=\"text-heading h5 mt-default mb-default\">Cisco Systems is a 2026 Customers&#x2019; Choice for the Access Management market on Gartner Peer Insights&#x2122; based on reviews submitted for Cisco Duo.</h2>",
      "firstParagraph": "",
      "paragraphHtml": "<p></p>",
      "words": 0,
      "direct": false,
      "issue": "First paragraph is 0 words and does not look like a concise direct answer."
    },
    {
      "heading": "Start your free trial",
      "headingHtml": "<h3 class=\"text-heading h5 mt-default mb-default\">Start your free trial</h3>",
      "firstParagraph": "See why Duo is the leader in identity security.",
      "paragraphHtml": "<p>See why Duo is the leader in identity security.</p>",
      "words": 9,
      "direct": false,
      "issue": "First paragraph is 9 words and does not look like a concise direct answer."
    },
    {
      "heading": "Compare editions",
      "headingHtml": "<h3 class=\"text-heading h5 mt-default mb-default\">Compare editions</h3>",
      "firstParagraph": "Find out which edition is right for your organization.",
      "paragraphHtml": "<p>Find out which edition is right for your organization.</p>",
      "words": 9,
      "direct": false,
      "issue": "First paragraph is 9 words and does not look like a concise direct answer."
    },
    {
      "heading": "Contact sales",
      "headingHtml": "<h3 class=\"text-heading h5 mt-default mb-default\">Contact sales</h3>",
      "firstParagraph": "Connect with our sales team and learn more.",
      "paragraphHtml": "<p>Connect with our sales team and learn more.</p>",
      "words": 8,
      "direct": false,
      "issue": "First paragraph is 8 words and does not look like a concise direct answer."
    },
    {
      "heading": "Products",
      "headingHtml": "<h2 class=\"body-small\"> <span>Products</span> </h2>",
      "firstParagraph": "",
      "paragraphHtml": "",
      "words": 0,
      "direct": false,
      "issue": "No paragraph follows this heading."
    },
    {
      "heading": "Solutions",
      "headingHtml": "<h2 class=\"body-small\"> <span>Solutions</span> </h2>",
      "firstParagraph": "",
      "paragraphHtml": "",
      "words": 0,
      "direct": false,
      "issue": "No paragraph follows this heading."
    },
    {
      "heading": "PARTNERSHIPS",
      "headingHtml": "<h2 class=\"body-small\"> <span>PARTNERSHIPS</span> </h2>",
      "firstParagraph": "",
      "paragraphHtml": "",
      "words": 0,
      "direct": false,
      "issue": "No paragraph follows this heading."
    },
    {
      "heading": "Support",
      "headingHtml": "<h2 class=\"body-small\"> <span>Support</span> </h2>",
      "firstParagraph": "",
      "paragraphHtml": "",
      "words": 0,
      "direct": false,
      "issue": "No paragraph follows this heading."
    },
    {
      "heading": "Docs & Resources",
      "headingHtml": "<h2 class=\"body-small\"> <span>Docs &amp; Resources</span> </h2>",
      "firstParagraph": "",
      "paragraphHtml": "",
      "words": 0,
      "direct": false,
      "issue": "No paragraph follows this heading."
    },
    {
      "heading": "PRICING",
      "headingHtml": "<h2 class=\"body-small\"> <span>PRICING</span> </h2>",
      "firstParagraph": "",
      "paragraphHtml": "",
      "words": 0,
      "direct": false,
      "issue": "No paragraph follows this heading."
    },
    {
      "heading": "Company",
      "headingHtml": "<h2 class=\"body-small\"> <span>Company</span> </h2>",
      "firstParagraph": "",
      "paragraphHtml": "",
      "words": 0,
      "direct": false,
      "issue": "No paragraph follows this heading."
    },
    {
      "heading": "Download our app",
      "headingHtml": "<h2 class=\"body-small\"> <span>Download our app</span> </h2>",
      "firstParagraph": "© 2026 Cisco Systems, Inc.",
      "paragraphHtml": "<p class=\"copyright\"> &#xa9; 2026 Cisco Systems, Inc. </p>",
      "words": 4,
      "direct": false,
      "issue": "First paragraph is 4 words and does not look like a concise direct answer."
    }
  ],
  "score": 65,
  "weight": 8
}

GEO, AIO and AEOGEO, AIO & AEOEmerging recommendation

AEO: Question-led structure

AEO: Question-led structure scored 70/100 and needs improvement.

2 Warning

Needs attention

AEO: Question-led structure

Warning

Issue

21 section(s) may benefit from a clearer opening answer; this is optional for feature/card sections.

Why it matters

Answer engines need concise answers, question-led structure, entity clarity, visible evidence, and trust signals that can be extracted without relying on search-only metadata checks.

Check name

AEO: Question-led structure

Score

70/100

Status

warning

Category

GEO, AIO & AEO

Maturity

Emerging recommendation

Goal

Make page content easy for answer engines and assistants to answer from directly.

Result

AEO: Question-led structure scored 70/100 and needs improvement.

Evidence

{
  "h2Count": 22,
  "questionH2s": [
    {
      "index": 14,
      "text": "Ready to secure your organization?",
      "isQuestion": true,
      "html": "<h2 class=\"text-heading h2 mt-default mb-default\">Ready to secure your organization?</h2>"
    }
  ],
  "hasFaq": false,
  "score": 70,
  "weight": 18
}

GEO, AIO and AEOGEO, AIO & AEOEmerging recommendation

AIO: Page experience for AIO

AIO: Page experience for AIO scored 80/100 and needs improvement.

2 Warning

Needs attention

AIO: Page experience for AIO

Warning

Issue

30 image(s) are missing width/height attributes.

Details

Why it matters

AI Overviews depend on Google-search eligibility, useful visible content, consistent structured data, answer-first sections, trust signals, and preview controls that permit snippets.

Check name

AIO: Page experience for AIO

Score

80/100

Status

warning

Category

GEO, AIO & AEO

Maturity

Emerging recommendation

Goal

Make page content eligible and useful for Google AI Overviews and AI Mode extraction.

Result

AIO: Page experience for AIO scored 80/100 and needs improvement.

Evidence

{
  "viewportContent": "width=device-width, initial-scale=1, user-scalable=yes",
  "visibleWords": 1165,
  "htmlBytes": 132676,
  "imagesMissingDimensions": [
    {
      "src": "/images/duo-logo.svg",
      "width": "",
      "height": "",
      "loading": "",
      "html": "<img src=\"/images/duo-logo.svg\" alt=\"Cisco Duo logo\">"
    },
    {
      "src": "/assets/img/home-page-end-to-end-phishing-resistance.webp",
      "width": "",
      "height": "",
      "loading": "lazy",
      "html": "<img src=\"/assets/img/home-page-end-to-end-phishing-resistance.webp\" loading=\"lazy\" alt=\"A man working on a laptop at a desk in his home office is looking at his mobile phone. A digital message box on the left side of the image displays a Phishing icon and the text Phishing Threat Detected.\" class=\"border-radius-md\">"
    },
    {
      "src": "/assets/img/indentiverse_pillar1_phishing_500x500_transparent.webp",
      "width": "",
      "height": "",
      "loading": "lazy",
      "html": "<img src=\"/assets/img/indentiverse_pillar1_phishing_500x500_transparent.webp\" loading=\"lazy\" alt=\"A woman with short dark hair is standing in a server room, holding and working on a Duo trusted device. A digital message box on the left side of the image displays a shield icon and the text\" class=\"border-radius-md\">"
    },
    {
      "src": "/assets/img/indentiverse_pillar3_identityintelligence_500x500_transparent.webp",
      "width": "",
      "height": "",
      "loading": "lazy",
      "html": "<img src=\"/assets/img/indentiverse_pillar3_identityintelligence_500x500_transparent.webp\" loading=\"lazy\" alt=\"A cybersecurity agent looking at a display of data security analytics, including colorful graphs, logs of network traffic, and potential threat alerts.\" class=\"border-radius-md\">"
    },
    {
      "src": "/assets/img/agentic_ai_hero_home.webp",
      "width": "",
      "height": "",
      "loading": "lazy",
      "html": "<img src=\"/assets/img/agentic_ai_hero_home.webp\" loading=\"lazy\" alt=\"Duo Agentic IAM\" class=\"border-radius-md\">"
    },
    {
      "src": "/assets/img/images_1_1_2x.webp",
      "width": "",
      "height": "",
      "loading": "lazy",
      "html": "<img src=\"/assets/img/images_1_1_2x.webp\" loading=\"lazy\" alt=\"Placeholder\" class=\"border-radius-md\">"
    },
    {
      "src": "/images/home/ellipse_line_2x.webp",
      "width": "",
      "height": "",
      "loading": "",
      "html": "<img class=\"img-ellipse-line hide-mobile\" src=\"/images/home/ellipse_line_2x.webp\" alt=\"Line ellipse graphic\">"
    },
    {
      "src": "/images/home/ellipse_line_mobile_1x.webp",
      "width": "",
      "height": "",
      "loading": "",
      "html": "<img class=\"img-ellipse-line-mobile show-mobile\" src=\"/images/home/ellipse_line_mobile_1x.webp\" alt=\"Line ellipse graphic\">"
    },
    {
      "src": "/images/home/ellipse_large_2x.webp",
      "width": "",
      "height": "",
      "loading": "",
      "html": "<img class=\"img-ellipse-large hide-mobile\" src=\"/images/home/ellipse_large_2x.webp\" alt=\"Ellipse graphic\">"
    },
    {
      "src": "/images/home/ellipse_large_mobile_1x.webp",
      "width": "",
      "height": "",
      "loading": "",
      "html": "<img class=\"img-ellipse-large-mobile show-mobile\" src=\"/images/home/ellipse_large_mobile_1x.webp\" alt=\"Ellipse graphic\">"
    },
    {
      "src": "/images/icon-fieldtype/Lock.svg",
      "width": "",
      "height": "",
      "loading": "",
      "html": "<img src=\"/images/icon-fieldtype/Lock.svg\" alt=\"Lock icon\">"
    },
    {
      "src": "/images/home/bubble_02_2x.webp",
      "width": "",
      "height": "",
      "loading": "",
      "html": "<img class=\"img-bubble-02\" src=\"/images/home/bubble_02_2x.webp\" alt=\"Person making phone call\">"
    },
    {
      "src": "/images/home/bubble_03_2x.webp",
      "width": "",
      "height": "",
      "loading": "",
      "html": "<img class=\"img-bubble-03\" src=\"/images/home/bubble_03_2x.webp\" alt=\"Person raising hands, speaking\">"
    },
    {
      "src": "/assets/img/customerimage_roomandboard.webp",
      "width": "",
      "height": "",
      "loading": "lazy",
      "html": "<img src=\"/assets/img/customerimage_roomandboard.webp\" loading=\"lazy\" alt=\"A well-lit furniture showroom displays various modern living room furniture arrangements.\">"
    },
    {
      "src": "/assets/img/room-and-board-logo-gray-400x72.png",
      "width": "",
      "height": "",
      "loading": "lazy",
      "html": "<img src=\"/assets/img/room-and-board-logo-gray-400x72.png\" loading=\"lazy\" alt=\"Room and Board logo\">"
    },
    {
      "src": "/assets/img/customerimage_lyft.webp",
      "width": "",
      "height": "",
      "loading": "lazy",
      "html": "<img src=\"/assets/img/customerimage_lyft.webp\" loading=\"lazy\" alt=\"Two people are smiling inside a car with a Lyft logo device visible on the dashboard.\">"
    },
    {
      "src": "/assets/img/lyft-logo-gray-400x286.png",
      "width": "",
      "height": "",
      "loading": "lazy",
      "html": "<img src=\"/assets/img/lyft-logo-gray-400x286.png\" loading=\"lazy\" alt=\"lyft logo\">"
    },
    {
      "src": "/assets/img/customerimage_amerigas1.webp",
      "width": "",
      "height": "",
      "loading": "lazy",
      "html": "<img src=\"/assets/img/customerimage_amerigas1.webp\" loading=\"lazy\" alt=\"An Amerigas propane delivery truck is parked in front of a house.\">"
    },
    {
      "src": "/assets/img/amerigas-logo.webp",
      "width": "",
      "height": "",
      "loading": "lazy",
      "html": "<img src=\"/assets/img/amerigas-logo.webp\" loading=\"lazy\" alt=\"amerigas logo\">"
    },
    {
      "src": "/assets/img/logo_box.webp",
      "width": "",
      "height": "",
      "loading": "lazy",
      "html": "<img src=\"/assets/img/logo_box.webp\" loading=\"lazy\" alt=\"box logo\">"
    },
    {
      "src": "/assets/img/denver-city-logo.webp",
      "width": "",
      "height": "",
      "loading": "lazy",
      "html": "<img src=\"/assets/img/denver-city-logo.webp\" loading=\"lazy\" alt=\"Denver city logo\">"
    },
    {
      "src": "/assets/img/generali-logo.webp",
      "width": "",
      "height": "",
      "loading": "lazy",
      "html": "<img src=\"/assets/img/generali-logo.webp\" loading=\"lazy\" alt=\"generali logo\">"
    },
    {
      "src": "/assets/img/lyft-logo.webp",
      "width": "",
      "height": "",
      "loading": "lazy",
      "html": "<img src=\"/assets/img/lyft-logo.webp\" loading=\"lazy\" alt=\"lyft logo\">"
    },
    {
      "src": "/assets/img/marin-logo.webp",
      "width": "",
      "height": "",
      "loading": "lazy",
      "html": "<img src=\"/assets/img/marin-logo.webp\" loading=\"lazy\" alt=\"marin logo\">"
    },
    {
      "src": "/assets/img/michiganuni-logo.webp",
      "width": "",
      "height": "",
      "loading": "lazy",
      "html": "<img src=\"/assets/img/michiganuni-logo.webp\" loading=\"lazy\" alt=\"michiganuni logo\">"
    },
    {
      "src": "/assets/img/room-and-board-logo.webp",
      "width": "",
      "height": "",
      "loading": "lazy",
      "html": "<img src=\"/assets/img/room-and-board-logo.webp\" loading=\"lazy\" alt=\"room and board logo\">"
    },
    {
      "src": "/assets/img/threadless-logo.webp",
      "width": "",
      "height": "",
      "loading": "lazy",
      "html": "<img src=\"/assets/img/threadless-logo.webp\" loading=\"lazy\" alt=\"threadless logo\">"
    },
    {
      "src": "/assets/img/usga-logo.webp",
      "width": "",
      "height": "",
      "loading": "lazy",
      "html": "<img src=\"/assets/img/usga-logo.webp\" loading=\"lazy\" alt=\"usga logo\">"
    },
    {
      "src": "/assets/img/gartner-peer-insights-customers-choice-badge-2026-660x301.webp",
      "width": "",
      "height": "",
      "loading": "lazy",
      "html": "<img src=\"/assets/img/gartner-peer-insights-customers-choice-badge-2026-660x301.webp\" loading=\"lazy\" alt=\"Gartner Peer Insights Customers&apos; Choice 2026 for User Authentication based on reviews submitted for Cisco Duo\">"
    },
    {
      "src": "/images/duo-logo-white.svg",
      "width": "",
      "height": "",
      "loading": "",
      "html": "<img src=\"/images/duo-logo-white.svg\" alt=\"Cisco Duo logo\">"
    }
  ],
  "possibleDialogs": [],
  "score": 80,
  "weight": 10
}

GEO, AIO and AEOGEO, AIO & AEOEmerging recommendation

AEO: Answer intent coverage

AEO: Answer intent coverage scored 70/100 and needs improvement.

1 Warning

Needs attention

AEO: Answer intent coverage

Warning

Issue

Missing likely AI Overview intent sections: what, how, compare.

Details

Why it matters

Answer engines need concise answers, question-led structure, entity clarity, visible evidence, and trust signals that can be extracted without relying on search-only metadata checks.

Check name

AEO: Answer intent coverage

Score

70/100

Status

warning

Category

GEO, AIO & AEO

Maturity

Emerging recommendation

Goal

Make page content easy for answer engines and assistants to answer from directly.

Result

AEO: Answer intent coverage scored 70/100 and needs improvement.

Evidence

{
  "headings": [
    {
      "text": "Phishing season is over",
      "html": "<h2 class=\"text-heading h2 mt-default mb-default\">Phishing season is <span>over</span></h2>"
    },
    {
      "text": "No phishing. No friction.",
      "html": "<h2 class=\"text-heading h3 mt-default mb-default\">No phishing. No friction.</h2>"
    },
    {
      "text": "Secure identity. No disruptions.",
      "html": "<h2 class=\"text-heading h3 mt-default mb-default\">Secure identity. No disruptions.</h2>"
    },
    {
      "text": "See more. Stop more. Stay safe.",
      "html": "<h2 class=\"text-heading h3 mt-default mb-default\">See more. Stop more. Stay safe.</h2>"
    },
    {
      "text": "Agents secured. Data protected.",
      "html": "<h2 class=\"text-heading h3 mt-default mb-default\">Agents secured. Data protected.</h2>"
    },
    {
      "text": "Seamless and secure",
      "html": "<h2 class=\"text-heading h2 mt-default mb-default\">Seamless and secure</h2>"
    },
    {
      "text": "For teams of every size",
      "html": "<h2 class=\"text-heading h2 mt-default mb-default\">For teams of <span>every size</span></h2>"
    },
    {
      "text": "SMB",
      "html": "<h2 class=\"text-heading h5 mt-default mb-default\">SMB</h2>"
    },
    {
      "text": "Enterprise",
      "html": "<h2 class=\"text-heading h5 mt-default mb-default\">Enterprise</h2>"
    },
    {
      "text": "Government",
      "html": "<h2 class=\"text-heading h5 mt-default mb-default\">Government</h2>"
    },
    {
      "text": "Simple to set up, easy to use",
      "html": "<h2 class=\"text-heading h3 mt-default mb-default\">Simple to set up, easy to use</h2>"
    },
    {
      "text": "Trusted by industry leaders",
      "html": "<h2 class=\"text-heading h2 mt-default mb-default\">Trusted by industry leaders</h2>"
    },
    {
      "text": "Cisco Systems is a 2026 Customers’ Choice for the Access Management market on Gartner Peer Insights™ based on reviews submitted for Cisco Duo.",
      "html": "<h2 class=\"text-heading h5 mt-default mb-default\">Cisco Systems is a 2026 Customers&#x2019; Choice for the Access Management market on Gartner Peer Insights&#x2122; based on reviews submitted for Cisco Duo.</h2>"
    },
    {
      "text": "Ready to secure your organization?",
      "html": "<h2 class=\"text-heading h2 mt-default mb-default\">Ready to secure your organization?</h2>"
    },
    {
      "text": "Products",
      "html": "<h2 class=\"body-small\"> <span>Products</span> </h2>"
    },
    {
      "text": "Solutions",
      "html": "<h2 class=\"body-small\"> <span>Solutions</span> </h2>"
    },
    {
      "text": "PARTNERSHIPS",
      "html": "<h2 class=\"body-small\"> <span>PARTNERSHIPS</span> </h2>"
    },
    {
      "text": "Support",
      "html": "<h2 class=\"body-small\"> <span>Support</span> </h2>"
    },
    {
      "text": "Docs & Resources",
      "html": "<h2 class=\"body-small\"> <span>Docs &amp; Resources</span> </h2>"
    },
    {
      "text": "PRICING",
      "html": "<h2 class=\"body-small\"> <span>PRICING</span> </h2>"
    },
    {
      "text": "Company",
      "html": "<h2 class=\"body-small\"> <span>Company</span> </h2>"
    },
    {
      "text": "Download our app",
      "html": "<h2 class=\"body-small\"> <span>Download our app</span> </h2>"
    }
  ],
  "expected": [
    {
      "id": "what",
      "label": "What is Identity Security & MFA Solutions?",
      "pattern": {}
    },
    {
      "id": "how",
      "label": "How does Identity Security & MFA Solutions work?",
      "pattern": {}
    },
    {
      "id": "benefits",
      "label": "Why use Identity Security & MFA Solutions?",
      "pattern": {}
    },
    {
      "id": "cost",
      "label": "Is Identity Security & MFA Solutions free or paid?",
      "pattern": {}
    },
    {
      "id": "compare",
      "label": "How does Identity Security & MFA Solutions compare with alternatives?",
      "pattern": {}
    }
  ],
  "missing": [
    {
      "id": "what",
      "label": "What is Identity Security & MFA Solutions?",
      "pattern": {}
    },
    {
      "id": "how",
      "label": "How does Identity Security & MFA Solutions work?",
      "pattern": {}
    },
    {
      "id": "compare",
      "label": "How does Identity Security & MFA Solutions compare with alternatives?",
      "pattern": {}
    }
  ],
  "score": 70,
  "weight": 8
}

GEO, AIO and AEOGEO, AIO & AEOEmerging recommendation

AEO: Entity and definition clarity

AEO: Entity and definition clarity scored 89/100 and needs improvement.

1 Warning

Needs attention

AEO: Entity and definition clarity

Warning

Issue

Entity or definition gaps: complete, cisco, crisis, cure.

Details

Why it matters

Answer engines need concise answers, question-led structure, entity clarity, visible evidence, and trust signals that can be extracted without relying on search-only metadata checks.

Check name

AEO: Entity and definition clarity

Score

89/100

Status

warning

Category

GEO, AIO & AEO

Maturity

Emerging recommendation

Goal

Make page content easy for answer engines and assistants to answer from directly.

Result

AEO: Entity and definition clarity scored 89/100 and needs improvement.

Evidence

{
  "title": "Complete Identity Security & MFA Solutions | Cisco Duo",
  "h1": "Identity is in crisis.Duo is the cure.",
  "description": "Duo Security offers solutions to protect organizations from identity threats. Explore Duo identity security, phishing-resistant MFA, and other solutions.",
  "topicOverlap": 0.5555555555555556,
  "definitionCount": 8,
  "topicTerms": [
    "complete",
    "identity",
    "security",
    "mfa",
    "solutions",
    "cisco",
    "duo",
    "crisis",
    "cure"
  ],
  "descriptionTerms": [
    "duo",
    "security",
    "offers",
    "solutions",
    "protect",
    "organizations",
    "identity",
    "threats",
    "explore",
    "phishing",
    "resistant",
    "mfa",
    "other"
  ],
  "missingFromDescription": [
    "complete",
    "cisco",
    "crisis",
    "cure"
  ],
  "score": 89,
  "weight": 18
}

Agent Ease of UseAPIEmerging recommendation

AI context endpoint

AI context endpoint is informational for this page.

Informational

Needs attention

AI context endpoint

Informational

Issue

AI context endpoint is informational for this page.

Why it matters

A context endpoint gives agents a small, low-latency summary of product purpose, safe actions, and canonical machine-readable resources without scraping the whole site.

Check name

AI context endpoint

Score

100/100

Status

informational

Category

API

Maturity

Emerging recommendation

Goal

Expose a compact API context endpoint agents can fetch before deciding which public API or discovery resource to use.

Result

AI context endpoint is informational for this page.

Validation steps

Fetch to find resource
AI context endpoint was not found at the expected path.

Evidence

{
  "steps": [
    {
      "id": "fetch",
      "title": "Fetch to find resource",
      "status": "informational",
      "evidence": {
        "checked": [
          {
            "path": "/api/ai/context",
            "statusCode": 404,
            "contentType": "text/html; charset=utf-8",
            "length": 63330
          },
          {
            "path": "/api/context",
            "statusCode": 404,
            "contentType": "text/html; charset=utf-8",
            "length": 63330
          },
          {
            "path": "/context",
            "statusCode": 404,
            "contentType": "text/html; charset=utf-8",
            "length": 63330
          }
        ]
      },
      "issue": "AI context endpoint was not found at the expected path.",
      "howToFix": "Publish a concise JSON or Markdown AI context endpoint describing the product, public actions, and machine-readable resources."
    }
  ]
}

GEO, AIO and AEOGEO, AIO & AEOEmerging recommendation

AIO: Query intent coverage

AIO: Query intent coverage is informational for this page.

Informational

Needs attention

AIO: Query intent coverage

Informational

Issue

Missing likely AI Overview intent sections: what, how, compare.

Details

Why it matters

AI Overviews depend on Google-search eligibility, useful visible content, consistent structured data, answer-first sections, trust signals, and preview controls that permit snippets.

Check name

AIO: Query intent coverage

Score

70/100

Status

informational

Category

GEO, AIO & AEO

Maturity

Emerging recommendation

Goal

Make page content eligible and useful for Google AI Overviews and AI Mode extraction.

Result

AIO: Query intent coverage is informational for this page.

Evidence

{
  "headings": [
    {
      "text": "Phishing season is over",
      "html": "<h2 class=\"text-heading h2 mt-default mb-default\">Phishing season is <span>over</span></h2>"
    },
    {
      "text": "No phishing. No friction.",
      "html": "<h2 class=\"text-heading h3 mt-default mb-default\">No phishing. No friction.</h2>"
    },
    {
      "text": "Secure identity. No disruptions.",
      "html": "<h2 class=\"text-heading h3 mt-default mb-default\">Secure identity. No disruptions.</h2>"
    },
    {
      "text": "See more. Stop more. Stay safe.",
      "html": "<h2 class=\"text-heading h3 mt-default mb-default\">See more. Stop more. Stay safe.</h2>"
    },
    {
      "text": "Agents secured. Data protected.",
      "html": "<h2 class=\"text-heading h3 mt-default mb-default\">Agents secured. Data protected.</h2>"
    },
    {
      "text": "Seamless and secure",
      "html": "<h2 class=\"text-heading h2 mt-default mb-default\">Seamless and secure</h2>"
    },
    {
      "text": "For teams of every size",
      "html": "<h2 class=\"text-heading h2 mt-default mb-default\">For teams of <span>every size</span></h2>"
    },
    {
      "text": "SMB",
      "html": "<h2 class=\"text-heading h5 mt-default mb-default\">SMB</h2>"
    },
    {
      "text": "Enterprise",
      "html": "<h2 class=\"text-heading h5 mt-default mb-default\">Enterprise</h2>"
    },
    {
      "text": "Government",
      "html": "<h2 class=\"text-heading h5 mt-default mb-default\">Government</h2>"
    },
    {
      "text": "Simple to set up, easy to use",
      "html": "<h2 class=\"text-heading h3 mt-default mb-default\">Simple to set up, easy to use</h2>"
    },
    {
      "text": "Trusted by industry leaders",
      "html": "<h2 class=\"text-heading h2 mt-default mb-default\">Trusted by industry leaders</h2>"
    },
    {
      "text": "Cisco Systems is a 2026 Customers’ Choice for the Access Management market on Gartner Peer Insights™ based on reviews submitted for Cisco Duo.",
      "html": "<h2 class=\"text-heading h5 mt-default mb-default\">Cisco Systems is a 2026 Customers&#x2019; Choice for the Access Management market on Gartner Peer Insights&#x2122; based on reviews submitted for Cisco Duo.</h2>"
    },
    {
      "text": "Ready to secure your organization?",
      "html": "<h2 class=\"text-heading h2 mt-default mb-default\">Ready to secure your organization?</h2>"
    },
    {
      "text": "Products",
      "html": "<h2 class=\"body-small\"> <span>Products</span> </h2>"
    },
    {
      "text": "Solutions",
      "html": "<h2 class=\"body-small\"> <span>Solutions</span> </h2>"
    },
    {
      "text": "PARTNERSHIPS",
      "html": "<h2 class=\"body-small\"> <span>PARTNERSHIPS</span> </h2>"
    },
    {
      "text": "Support",
      "html": "<h2 class=\"body-small\"> <span>Support</span> </h2>"
    },
    {
      "text": "Docs & Resources",
      "html": "<h2 class=\"body-small\"> <span>Docs &amp; Resources</span> </h2>"
    },
    {
      "text": "PRICING",
      "html": "<h2 class=\"body-small\"> <span>PRICING</span> </h2>"
    },
    {
      "text": "Company",
      "html": "<h2 class=\"body-small\"> <span>Company</span> </h2>"
    },
    {
      "text": "Download our app",
      "html": "<h2 class=\"body-small\"> <span>Download our app</span> </h2>"
    }
  ],
  "expected": [
    {
      "id": "what",
      "label": "What is Identity Security & MFA Solutions?",
      "pattern": {}
    },
    {
      "id": "how",
      "label": "How does Identity Security & MFA Solutions work?",
      "pattern": {}
    },
    {
      "id": "benefits",
      "label": "Why use Identity Security & MFA Solutions?",
      "pattern": {}
    },
    {
      "id": "cost",
      "label": "Is Identity Security & MFA Solutions free or paid?",
      "pattern": {}
    },
    {
      "id": "compare",
      "label": "How does Identity Security & MFA Solutions compare with alternatives?",
      "pattern": {}
    }
  ],
  "missing": [
    {
      "id": "what",
      "label": "What is Identity Security & MFA Solutions?",
      "pattern": {}
    },
    {
      "id": "how",
      "label": "How does Identity Security & MFA Solutions work?",
      "pattern": {}
    },
    {
      "id": "compare",
      "label": "How does Identity Security & MFA Solutions compare with alternatives?",
      "pattern": {}
    }
  ],
  "score": 70,
  "weight": 4
}

Agent Ease of UseAuthEmerging recommendation

Auth.md Agent Registration

Auth.md Agent Registration has an informational finding because the page appears to support authentication.

Informational

Needs attention

Auth.md Agent Registration

Informational

Issue

auth.md response did not match the expected agent registration shape. Content-Type "text/html; charset=utf-8" is not Markdown or text/plain; missing registration instructions; missing /.well-known/oauth-protected-resource link; missing /.well-known/oauth-authorization-server link; missing credential type language.

Why it matters

Agent registration metadata lets automated clients find the registration path, supported identity types, credential types, and related claim or revocation endpoints without scraping human docs.

Check name

Auth.md Agent Registration

Score

0/100

Status

informational

Category

Auth

Maturity

Emerging recommendation

Goal

Publish Auth.md and agent_auth metadata so agents can discover registration and credential requirements.

Result

Auth.md Agent Registration has an informational finding because the page appears to support authentication.

Validation steps

Fetch and validate /auth.md
auth.md response did not match the expected agent registration shape. Content-Type "text/html; charset=utf-8" is not Markdown or text/plain; missing registration instructions; missing /.well-known/oauth-protected-resource link; missing /.well-known/oauth-authorization-server link; missing credential type language.
Publish protected resource metadata
The OAuth Protected Resource metadata endpoint did not return HTTP 2xx.
Validate agent_auth authorization metadata
OAuth authorization server metadata could not be fetched.

Evidence

{
  "failedStep": "auth-md",
  "steps": [
    {
      "id": "auth-md",
      "title": "Fetch and validate /auth.md",
      "status": "fail",
      "evidence": {
        "path": "/auth.md",
        "ok": false,
        "statusCode": 404,
        "contentType": "text/html; charset=utf-8",
        "length": 63330,
        "validation": {
          "valid": false,
          "issue": "auth.md response did not match the expected agent registration shape. Content-Type \"text/html; charset=utf-8\" is not Markdown or text/plain; missing registration instructions; missing /.well-known/oauth-protected-resource link; missing /.well-known/oauth-authorization-server link; missing credential type language.",
          "compatibleContentType": false,
          "contentLength": 33346,
          "hasRegisterInstructions": false,
          "hasProtectedResourceLink": false,
          "hasAuthorizationServerLink": false,
          "mentionsIdentity": true,
          "mentionsCredential": false,
          "links": [
            "/images/favicon/favicon.ico",
            "/x-icon",
            "/png",
            "/images/favicon/favicon-16x16.png",
            "/png",
            "/images/favicon/favicon-32x32.png",
            "/png",
            "/images/favicon/favicon-96x96.png",
            "/png",
            "/images/favicon/favicon-192x192.png"
          ],
          "rawExcerpt": "<!doctype html>\n<html lang=\"en\" dir=\"ltr\">\n    <head>\n        <meta charset=\"utf-8\">\n        <meta http-equiv=\"X-UA-Compatible\" content=\"IE=edge\">\n        <meta name=\"viewport\" content=\"width=device-width, initial-scale=1, user-scalable=yes\">\n        <link rel=\"icon\" href=\"/images/favicon/favicon.ico\" type=\"image/x-icon\">\n<link rel=\"icon\" type=\"image/png\" sizes=\"16x16\" href=\"/images/favicon/favicon-16x16.png\">\n<link rel=\"icon\" type=\"image/png\" sizes=\"32x32\" href=\"/images/favicon/favicon-32x32.png\">\n<link rel=\"icon\" type=\"image/png\" sizes=\"96x96\" href=\"/images/favicon/favicon-96x96.png\">\n<link rel=\"icon\" type=\"image/png\" sizes=\"192x192\" href=\"/images/favicon/favicon-192x192.png\">\n<link rel=\"apple-touch-icon\" sizes=\"57x57\" href=\"/images/favicon/favicon-57x57.png\">\n<link rel=\"apple-touch-icon"
        }
      },
      "issue": "auth.md response did not match the expected agent registration shape. Content-Type \"text/html; charset=utf-8\" is not Markdown or text/plain; missing registration instructions; missing /.well-known/oauth-protected-resource link; missing /.well-known/oauth-authorization-server link; missing credential type language.",
      "howToFix": "Serve /auth.md at the site root as Markdown with agent registration instructions and links to OAuth metadata."
    },
    {
      "id": "oauth-protected-resource",
      "title": "Publish protected resource metadata",
      "status": "fail",
      "evidence": {
        "path": "/.well-known/oauth-protected-resource",
        "ok": false,
        "statusCode": 403,
        "contentType": "text/html; charset=utf-8",
        "length": 148,
        "text": "<html>\r\n<head><title>403 Forbidden</title></head>\r\n<body>\r\n<center><h1>403 Forbidden</h1></center>\r\n<hr><center>Duo/1.0</center>\r\n</body>\r\n</html>\r\n"
      },
      "issue": "The OAuth Protected Resource metadata endpoint did not return HTTP 2xx.",
      "howToFix": "Publish /.well-known/oauth-protected-resource with resource and authorization_servers fields."
    },
    {
      "id": "agent-auth-block",
      "title": "Validate agent_auth authorization metadata",
      "status": "fail",
      "evidence": {
        "valid": false,
        "issue": "OAuth authorization server metadata could not be fetched.",
        "fetch": {
          "ok": false,
          "statusCode": 403,
          "contentType": "text/html; charset=utf-8",
          "length": 148,
          "text": "<html>\r\n<head><title>403 Forbidden</title></head>\r\n<body>\r\n<center><h1>403 Forbidden</h1></center>\r\n<hr><center>Duo/1.0</center>\r\n</body>\r\n</html>\r\n"
        }
      },
      "issue": "OAuth authorization server metadata could not be fetched.",
      "howToFix": "Add agent_auth to /.well-known/oauth-authorization-server with register_uri, supported identity types, credential types, and claim or revocation URLs where applicable."
    }
  ],
  "authApplicability": {
    "supportsAuth": true,
    "score": 17,
    "signals": [
      {
        "source": "link:href",
        "weight": 3,
        "match": "auth link"
      },
      {
        "source": "visible-text",
        "weight": 3,
        "match": "login"
      },
      {
        "source": "visible-text",
        "weight": 3,
        "match": "sign up"
      },
      {
        "source": "visible-text",
        "weight": 3,
        "match": "single sign-on"
      },
      {
        "source": "visible-text",
        "weight": 3,
        "match": "sso"
      },
      {
        "source": "visible-text",
        "weight": 2,
        "match": "admin login"
      }
    ]
  },
  "resourceFetchSucceeded": false
}

AI DiscoverabilityDiscoverabilityEstablished

IndexNow key

IndexNow key is informational for this page.

Informational

Needs attention

IndexNow key

Informational

Issue

IndexNow key is informational for this page.

Why it matters

IndexNow lets sites notify participating search engines about changed URLs, but ownership verification requires a UTF-8 key file whose filename matches the key.

Check name

IndexNow key

Score

100/100

Status

informational

Category

Discoverability

Maturity

Established

Goal

Verify that IndexNow ownership key placement is detectable when the site advertises it.

Result

IndexNow key is informational for this page.

Validation steps

Find advertised IndexNow key location
No IndexNow key location was advertised in HTML, Link headers, or robots.txt.
Fetch and validate IndexNow key file
No discoverable IndexNow key file was found.

Evidence

{
  "steps": [
    {
      "id": "advertised-location",
      "title": "Find advertised IndexNow key location",
      "status": "informational",
      "evidence": {
        "advertised": []
      },
      "issue": "No IndexNow key location was advertised in HTML, Link headers, or robots.txt.",
      "howToFix": "Advertise the key location with robots.txt IndexNow-Key, rel=\"indexnow-key\", or meta name=\"indexnow-key-location\" if you want scanners to verify it."
    },
    {
      "id": "fetch-key",
      "title": "Fetch and validate IndexNow key file",
      "status": "informational",
      "evidence": {
        "advertised": [],
        "checked": []
      },
      "issue": "No discoverable IndexNow key file was found.",
      "howToFix": "Host a UTF-8 text file named {key}.txt using a 32-character hexadecimal key whose body exactly matches the key."
    }
  ]
}

Agent Ease of UseAuthEstablished

OAuth / OIDC discovery

OAuth / OIDC discovery has an informational finding because the page appears to support authentication.

Informational

Needs attention

OAuth / OIDC discovery

Informational

Issue

OAuth / OIDC discovery was not found at the expected path.

Why it matters

OAuth and OIDC discovery let agents find authorization, token, and key endpoints programmatically instead of relying on human documentation.

Check name

OAuth / OIDC discovery

Score

0/100

Status

informational

Category

Auth

Maturity

Established

Goal

Publish OAuth/OIDC discovery metadata so agents can authenticate with your APIs.

Result

OAuth / OIDC discovery has an informational finding because the page appears to support authentication.

Validation steps

Fetch to find resource
OAuth / OIDC discovery was not found at the expected path.

Evidence

{
  "failedStep": "fetch",
  "steps": [
    {
      "id": "fetch",
      "title": "Fetch to find resource",
      "status": "fail",
      "evidence": {
        "checked": [
          {
            "path": "/.well-known/openid-configuration",
            "statusCode": 403,
            "contentType": "text/html; charset=utf-8",
            "length": 148
          },
          {
            "path": "/.well-known/oauth-authorization-server",
            "statusCode": 403,
            "contentType": "text/html; charset=utf-8",
            "length": 148
          }
        ]
      },
      "issue": "OAuth / OIDC discovery was not found at the expected path.",
      "howToFix": "Publish valid OAuth/OIDC metadata only when the site actually supports OAuth/OIDC. Otherwise omit provider discovery and document any unauthenticated public APIs separately."
    }
  ],
  "authApplicability": {
    "supportsAuth": true,
    "score": 17,
    "signals": [
      {
        "source": "link:href",
        "weight": 3,
        "match": "auth link"
      },
      {
        "source": "visible-text",
        "weight": 3,
        "match": "login"
      },
      {
        "source": "visible-text",
        "weight": 3,
        "match": "sign up"
      },
      {
        "source": "visible-text",
        "weight": 3,
        "match": "single sign-on"
      },
      {
        "source": "visible-text",
        "weight": 3,
        "match": "sso"
      },
      {
        "source": "visible-text",
        "weight": 2,
        "match": "admin login"
      }
    ]
  },
  "resourceFetchSucceeded": false
}

Agent Ease of UseAuthEmerging recommendation

OAuth Protected Resource

OAuth Protected Resource has an informational finding because the page appears to support authentication.

Informational

Needs attention

OAuth Protected Resource

Informational

Issue

The OAuth Protected Resource metadata endpoint did not return HTTP 2xx.

Why it matters

Protected Resource metadata tells agents which authorization servers protect an API and how to connect authentication challenges to the right resource.

Check name

OAuth Protected Resource

Score

0/100

Status

informational

Category

Auth

Maturity

Emerging recommendation

Goal

Publish OAuth Protected Resource Metadata so agents can discover how to authenticate.

Result

OAuth Protected Resource has an informational finding because the page appears to support authentication.

Validation steps

Fetch protected resource metadata
The OAuth Protected Resource metadata endpoint did not return HTTP 2xx.
Validate protected resource metadata
Response is not valid JSON.
Validate protected resource identity
Protected resource metadata `resource` did not match the resource identifier used to retrieve it.
Probe protected API Bearer challenge
No protected route with a 401 Bearer challenge was detected; metadata alone does not prove a protected resource.

Evidence

{
  "failedStep": "fetch",
  "steps": [
    {
      "id": "fetch",
      "title": "Fetch protected resource metadata",
      "status": "fail",
      "evidence": {
        "path": "/.well-known/oauth-protected-resource",
        "statusCode": 403,
        "contentType": "text/html; charset=utf-8"
      },
      "issue": "The OAuth Protected Resource metadata endpoint did not return HTTP 2xx.",
      "howToFix": "Publish /.well-known/oauth-protected-resource JSON."
    },
    {
      "id": "metadata",
      "title": "Validate protected resource metadata",
      "status": "fail",
      "evidence": {
        "valid": false,
        "compatibleContentType": false,
        "issue": "Response is not valid JSON.",
        "rawExcerpt": "<html>\r\n<head><title>403 Forbidden</title></head>\r\n<body>\r\n<center><h1>403 Forbidden</h1></center>\r\n<hr><center>Duo/1.0</center>\r\n</body>\r\n</html>\r\n"
      },
      "issue": "Response is not valid JSON.",
      "howToFix": "Publish resource and authorization_servers as absolute URLs."
    },
    {
      "id": "resource-identity",
      "title": "Validate protected resource identity",
      "status": "fail",
      "evidence": {
        "expectedResource": "https://duo.com"
      },
      "issue": "Protected resource metadata `resource` did not match the resource identifier used to retrieve it.",
      "howToFix": "Set `resource` to the origin/resource identifier represented by /.well-known/oauth-protected-resource."
    },
    {
      "id": "protected-route-challenge",
      "title": "Probe protected API Bearer challenge",
      "status": "informational",
      "evidence": {
        "checked": [
          {
            "path": "/api/admin/scans",
            "statusCode": 404,
            "wwwAuthenticate": {
              "valid": false,
              "present": false
            },
            "expectedMetadataUrl": "https://duo.com/.well-known/oauth-protected-resource",
            "metadataUrlMatches": true,
            "resourceMatchesRequestContext": true
          },
          {
            "path": "/api/admin/summary",
            "statusCode": 404,
            "wwwAuthenticate": {
              "valid": false,
              "present": false
            },
            "expectedMetadataUrl": "https://duo.com/.well-known/oauth-protected-resource",
            "metadataUrlMatches": true,
            "resourceMatchesRequestContext": true
          },
          {
            "path": "/api/scans",
            "statusCode": 404,
            "wwwAuthenticate": {
              "valid": false,
              "present": false
            },
            "expectedMetadataUrl": "https://duo.com/.well-known/oauth-protected-resource",
            "metadataUrlMatches": true,
            "resourceMatchesRequestContext": true
          }
        ]
      },
      "issue": "No protected route with a 401 Bearer challenge was detected; metadata alone does not prove a protected resource.",
      "howToFix": "When this site exposes bearer-protected APIs, return 401 with WWW-Authenticate: Bearer and link resource_metadata."
    }
  ],
  "authApplicability": {
    "supportsAuth": true,
    "score": 17,
    "signals": [
      {
        "source": "link:href",
        "weight": 3,
        "match": "auth link"
      },
      {
        "source": "visible-text",
        "weight": 3,
        "match": "login"
      },
      {
        "source": "visible-text",
        "weight": 3,
        "match": "sign up"
      },
      {
        "source": "visible-text",
        "weight": 3,
        "match": "single sign-on"
      },
      {
        "source": "visible-text",
        "weight": 3,
        "match": "sso"
      },
      {
        "source": "visible-text",
        "weight": 2,
        "match": "admin login"
      }
    ]
  },
  "resourceFetchSucceeded": false
}

Performance and AccessibilityBest PracticesBrowser audit

Browser errors were logged to the console

100 Fail

Check name

Browser errors were logged to the console

Score

0/100

Status

fail

Device

desktop

Category

Best Practices

Fix guidance

Errors logged to the console indicate unresolved problems. They can come from network request failures and other browser concerns. [Learn more about this errors in console diagnostic audit](https://developer.chrome.com/docs/lighthouse/best-practices/errors-in-console/)

References

https://developer.chrome.com/docs/lighthouse/best-practices/

Evidence

{
  "description": "Errors logged to the console indicate unresolved problems. They can come from network request failures and other browser concerns. [Learn more about this errors in console diagnostic audit](https://developer.chrome.com/docs/lighthouse/best-practices/errors-in-console/)"
}

Performance and AccessibilityPerformanceBrowser audit

Font display

20 Fail

Check name

Font display

Score

0/100

Status

fail

Device

desktop

Category

Performance

Estimated savings

Est savings of 340 ms

Fix guidance

Consider setting [font-display](https://developer.chrome.com/docs/performance/insights/font-display) to swap or optional to ensure text is consistently visible. swap can be further optimized to mitigate layout shifts with [font metric overrides](https://developer.chrome.com/blog/font-fallbacks).

References

https://web.dev/learn/performance/

Evidence

{
  "displayValue": "Est savings of 340 ms",
  "description": "Consider setting [font-display](https://developer.chrome.com/docs/performance/insights/font-display) to swap or optional to ensure text is consistently visible. swap can be further optimized to mitigate layout shifts with [font metric overrides](https://developer.chrome.com/blog/font-fallbacks)."
}

Performance and AccessibilityPerformanceBrowser audit

Forced reflow

20 Fail

Check name

Forced reflow

Score

0/100

Status

fail

Device

desktop

Category

Performance

Fix guidance

A forced reflow occurs when JavaScript queries geometric properties (such as offsetWidth) after styles have been invalidated by a change to the DOM state. This can result in poor performance. Learn more about [forced reflows](https://developer.chrome.com/docs/performance/insights/forced-reflow) and possible mitigations.

References

https://web.dev/learn/performance/

Evidence

{
  "description": "A forced reflow occurs when JavaScript queries geometric properties (such as offsetWidth) after styles have been invalidated by a change to the DOM state. This can result in poor performance. Learn more about [forced reflows](https://developer.chrome.com/docs/performance/insights/forced-reflow) and possible mitigations."
}

Performance and AccessibilityPerformanceBrowser audit

Legacy JavaScript

20 Fail

Check name

Legacy JavaScript

Score

0/100

Status

fail

Device

desktop

Category

Performance

Estimated savings

Est savings of 15 KiB

Fix guidance

Polyfills and transforms enable older browsers to use new JavaScript features. However, many aren't necessary for modern browsers. Consider modifying your JavaScript build process to not transpile [Baseline](https://web.dev/articles/baseline-and-polyfills) features, unless you know you must support older browsers. [Learn why most sites can deploy ES6+ code without transpiling](https://developer.chrome.com/docs/performance/insights/legacy-javascript)

References

https://web.dev/learn/performance/

Evidence

{
  "displayValue": "Est savings of 15 KiB",
  "description": "Polyfills and transforms enable older browsers to use new JavaScript features. However, many aren't necessary for modern browsers. Consider modifying your JavaScript build process to not transpile [Baseline](https://web.dev/articles/baseline-and-polyfills) features, unless you know you must support older browsers. [Learn why most sites can deploy ES6+ code without transpiling](https://developer.chrome.com/docs/performance/insights/legacy-javascript)"
}

Performance and AccessibilityPerformanceBrowser audit

Avoid enormous network payloads

10 Warning

Check name

Avoid enormous network payloads

Score

50/100

Status

warning

Device

desktop

Category

Performance

Estimated savings

Total size was 3,931 KiB

Fix guidance

Large network payloads cost users real money and are highly correlated with long load times. [Learn how to reduce payload sizes](https://developer.chrome.com/docs/lighthouse/performance/total-byte-weight/).

References

https://web.dev/learn/performance/

Evidence

{
  "displayValue": "Total size was 3,931 KiB",
  "description": "Large network payloads cost users real money and are highly correlated with long load times. [Learn how to reduce payload sizes](https://developer.chrome.com/docs/lighthouse/performance/total-byte-weight/).",
  "numericValue": 4025155
}

Performance and AccessibilityPerformanceBrowser audit

Loading performance

3 Fail

Check name

Loading performance

Score

84/100

Status

fail

Device

desktop

Category

Performance

Fix guidance

Review the grouped loading performance checks and improve the failing sub-checks listed in evidence.

References

https://web.dev/learn/performance/

Evidence

{
  "checks": [
    {
      "id": "largest-contentful-paint",
      "title": "Largest Contentful Paint",
      "score": 45,
      "displayValue": "2.6 s",
      "numericValue": 2559.6159735230067
    },
    {
      "id": "total-blocking-time",
      "title": "Total Blocking Time",
      "score": 97,
      "displayValue": "100 ms",
      "numericValue": 103
    },
    {
      "id": "first-contentful-paint",
      "title": "First Contentful Paint",
      "score": 91,
      "displayValue": "0.9 s",
      "numericValue": 890.841551399216
    },
    {
      "id": "network-rtt",
      "title": "Network Round Trip Times",
      "score": 100,
      "displayValue": "0 ms",
      "numericValue": 2.134035
    },
    {
      "id": "server-response-time",
      "title": "Initial server response time was short",
      "score": 100,
      "displayValue": "Root document took 0 ms",
      "numericValue": 4
    },
    {
      "id": "interactive",
      "title": "Time to Interactive",
      "score": 88,
      "displayValue": "2.6 s",
      "numericValue": 2565.616261060667
    },
    {
      "id": "speed-index",
      "title": "Speed Index",
      "score": 68,
      "displayValue": "1.9 s",
      "numericValue": 1865.2062535088385
    },
    {
      "id": "max-potential-fid",
      "title": "Max Potential First Input Delay",
      "score": 83,
      "displayValue": "150 ms",
      "numericValue": 151
    }
  ]
}

Fix with MCP or CLI

Use this report as the handoff into remediation. Generate a coding-agent prompt with the failing checks attached, or jump to the MCP and CLI setup docs before your next rescan.

Score history

Public scan score over time

Public reports for this website origin. Select any point or report link to open that canonical report.

1 reports

Public score history report links
Scan date	Score	Readiness	Report
Jun 8, 2026	65/100	Level 3, Bot-Aware	Current report