Classify AI crawler rules [fail]! No explicit User-agent rules were found for major AI crawler tokens.INFOClassify AI crawler rulesINFOParsing User-agent groups and Allow/Disallow records for known AI crawler tokens evaluatedPath="/"INFOEvaluating exact User-agent matches before wildcard fallback exactAiPolicyCount=0 totalCrawlerTokens=18FAILNo explicit AI crawler User-agent groups were found examplesExpected=["GPTBot","OAI-SearchBot","ClaudeBot","Google-Extended","CCBot"]FAILCompare explicit AI crawler coverage actual=0 expected="> 0 explicit non-search AI crawler policies" missingTokens=["GPTBot","OAI-SearchBot","ChatGPT-User","ClaudeBot","Claude-SearchBot","Claude-User","Google-Extended","Applebot-Extended","Amazonbot","Amzn-SearchBot","Amzn-User","PerplexityBot"]INFOResolved effective root-path policy for crawler tokens blocked=0 allowed=21 unspecified=0

Evaluate script execution [fail]! script-src allows dangerous script schemes: data:, blob:.INFOEvaluate script executionINFOInspect effective script directive effectiveDirective="script-src" sources=["'self'","'unsafe-inline'","'unsafe-eval'","data:","blob:","*.6sc.co","*.6sense.com","*.ads-twitter.com","*.clarity.ms","*.cloudflareinsights.com","*.doubleclick.net","*.g2.com","*.google-analytics.com","*.google.com","*.googleadservices.com","*.googleapis.com","*.googlesyndication.com","*.googletagmanager.com","*.greenhouse.io","*.hotjar.com","*.knock-ai.com","*.parsely.com","*.sentry-cdn.com","*.storylane.io","*.teamme.link","*.visualwebsiteoptimizer.com","*.wistia.com","*.wistia.net","*.wp.com","analytics.ahrefs.com","analytics.tiktok.com","bat.bing.com","cdn.cookielaw.org","cdn.inspectlet.com","cdn.noibu.com","cdn.parsely.com","cdn.salesfire.co.uk","cdnjs.cloudflare.com","connect.facebook.net","dev.orca.security","dev.visualwebsiteoptimizer.com","euob.itstarsbuilding.com","googleads.g.doubleclick.net","hm.baidu.com","j.6sc.co","js.zi-scripts.com","munchkin.marketo.net","obseu.itstarsbuilding.com","orca.security","pagead2.googlesyndication.com","s.pinimg.com","s.yimg.jp","s0.wp.com","sb.scorecardresearch.com","snap.licdn.com","static.ads-twitter.com","static.chartbeat.com","static.cloudflareinsights.com","static.hotjar.com","static.wdgtsrc.com","stats.wp.com","teammate.link","tracking.g2crowd.com","translate-pa.googleapis.com","translate.googleapis.com","try.orca.security","unpkg.com","widgets.wp.com","www.gstatic.cn","www.gstatic.com","www.redditstatic.com","yoast.com","*.claydar.com"]FAILCompare script execution posture actual={"hasNonce":false,"hasHash":false,"hasStrictDynamic":false,"hasUnsafeInline":true,"hasUnsafeEval":true,"hasWildcardHost":true,"hasBroadScheme":false,"dangerousSchemes":["data:","blob:"]} expected="constrained script sources without unsafe execution allowances" issue="script-src allows dangerous script schemes: data:, blob:."FAILscript-src allows dangerous script schemes: data:, blob:.Review hardening directives [warning]! CSP is missing recommended hardening directives: base-uri.INFOReview hardening directivesINFOInspect CSP hardening directives objectSrc=["'self'","*.wistia.com"] formAction=["'self'","*.facebook.com","*.orca.security","orca.security","translate.googleapis.com"] frameAncestors=["'self'","orca.security"] formCount=2WARNCompare recommended hardening coverage actual=["base-uri"] expected="no missing object-src/base-uri/form-action requirements" issue="CSP is missing recommended hardening directives: base-uri."WARNCSP is missing recommended hardening directives: base-uri.