Export Report
OVERALL SCORE
Level 3, Bot-Aware
- AI Discoverability 38 out of 100
- Agent Ease of Use 10 out of 100
- Security & Trust 40 out of 100
- GEO, AIO and AEO 77 out of 100
- SEO 100 out of 100
- Performance and Accessibility 83 out of 100
What AI sees of your website
XBOW | Autonomous Offensive Security Platform
XBOW is an autonomous offensive security platform that delivers the depth and results of a premium pentesting engagement in a fraction of the time.
Next step
Turn this report into a fix workflow
23 failed checks are ready to move into MCP or CLI remediation. Generate a repair prompt, connect the scanner to your coding agent, or open the integration docs before your next rescan.
| Metric | Score | Status | Passed | Failed | Warning | Evidence |
|---|---|---|---|---|---|---|
| AI Discoverability | 38 | Priority fix | 7 | 15 | 1 | View details |
| Discoverability | 67 | Needs work | 5 | 4 | 0 | View details |
| Content Readiness | 38 | Priority fix | 2 | 7 | 1 | View details |
| Bot Access Control | 0 | Priority fix | 0 | 4 | 0 | View details |
| Agent Ease of Use | 10 | Priority fix | 17 | 22 | 1 | View details |
| API | 0 | Priority fix | 0 | 6 | 0 | View details |
| Auth | Not Applicable | Not Applicable | 11 | 0 | 0 | |
| MCP | 25 | Priority fix | 2 | 6 | 0 | View details |
| Skill Discovery | 5 | Priority fix | 0 | 10 | 1 | View details |
| Agent Commerce | Not Applicable | Not Applicable | 4 | 0 | 0 | |
| GEO, AIO and AEO | 77 | Mostly ready | 5 | 2 | 12 | View details |
| GEO Readiness | 88 | Mostly ready | 1 | 0 | 4 | |
| AIO Readiness | 80 | Mostly ready | 3 | 1 | 3 | View details |
| AEO Readiness | 64 | Needs work | 1 | 1 | 5 | View details |
| SEO | 100 | Strong | 11 | 0 | 0 | |
| SEO | 100 | Strong | 11 | 0 | 0 | |
| Security & Trust | 40 | Priority fix | 6 | 3 | 0 | View details |
| Security & Trust | 40 | Priority fix | 2 | 3 | 0 | View details |
| AI Training Exposure | Not Applicable | Not Applicable | 4 | 0 | 0 | |
| Performance and Accessibility | 83 | Mostly ready | 19 | 6 | 1 | View details |
| Performance | 78 | Mostly ready | 12 | 4 | 1 | View details |
| Accessibility | 91 | Strong | 7 | 2 | 0 | View details |
Prioritized recommendations
Issues ranked by score impact
44 items need attention
Agent Ease of UseAPIEstablished
API Catalog
API Catalog failed at "Fetch API catalog".
50 Fail
Agent Ease of UseAPIEstablished
API Catalog
API Catalog failed at "Fetch API catalog".
Needs attention
API Catalog
Issue
The API catalog endpoint did not return HTTP 2xx.
Why it matters
API catalogs help agents find service descriptions, documentation, and status resources without guessing API entry points.
Check name
API Catalog
Score
0/100
Status
fail
Category
API
Maturity
Established
Goal
Publish an API catalog for automated API discovery using RFC 9727.
Result
API Catalog failed at "Fetch API catalog".
Validation steps
Fetch API catalog
The API catalog endpoint did not return HTTP 2xx.
Validate RFC 9727 linkset
Response is not valid JSON.
Fetch advertised API catalog targets
API Catalog did not expose any same-origin hrefs to validate.
Evidence
{
"failedStep": "fetch",
"steps": [
{
"id": "fetch",
"title": "Fetch API catalog",
"status": "fail",
"evidence": {
"statusCode": 404,
"contentType": "text/html; charset=utf-8"
},
"issue": "The API catalog endpoint did not return HTTP 2xx.",
"howToFix": "Publish /.well-known/api-catalog."
},
{
"id": "validate",
"title": "Validate RFC 9727 linkset",
"status": "fail",
"evidence": {
"valid": false,
"compatibleContentType": false,
"issue": "Response is not valid JSON.",
"rawExcerpt": "<!DOCTYPE html>\n<html>\n <body>\n <p>Invalid .well-known request</p>\n </body>\n</html>"
},
"issue": "Response is not valid JSON.",
"howToFix": "Use application/linkset+json with service-desc, service-doc, and status relations that each include href."
},
{
"id": "target-validation",
"title": "Fetch advertised API catalog targets",
"status": "fail",
"evidence": {
"checked": [],
"failures": [
{
"reason": "No same-origin API catalog hrefs were available to fetch."
}
]
},
"issue": "API Catalog did not expose any same-origin hrefs to validate.",
"howToFix": "Make each same-origin API catalog href reachable and serve the advertised media type."
}
]
}AI DiscoverabilityDiscoverabilityEstablished
High-value schema types
High-value schema types is missing or incomplete.
50 Fail
AI DiscoverabilityDiscoverabilityEstablished
High-value schema types
High-value schema types is missing or incomplete.
Needs attention
High-value schema types
Issue
No high-value schema types (e.g. Article, Product, Service) were found.
Why it matters
High-value schema types tell agents whether a page is an article, product, event, service, or other actionable content type.
Check name
High-value schema types
Score
0/100
Status
fail
Category
Discoverability
Maturity
Established
Goal
Use schema types that describe the page's primary content or offering.
Result
High-value schema types is missing or incomplete.
Evidence
{
"found": [],
"expected": [
"Article",
"BlogPosting",
"NewsArticle",
"Product",
"SoftwareApplication",
"FAQPage",
"LocalBusiness",
"VideoObject",
"HowTo",
"Event",
"Course",
"Review",
"Service"
],
"allTypes": [
"Organization",
"WebSite"
]
}AI DiscoverabilityDiscoverabilityEstablished
Link headers
Link headers failed at "Find useful Link headers".
50 Fail
AI DiscoverabilityDiscoverabilityEstablished
Link headers
Link headers failed at "Find useful Link headers".
Needs attention
Link headers
Issue
No useful agent discovery Link headers were found.
Why it matters
Link headers let automated clients discover API catalogs, documentation, and machine-readable alternates without parsing page markup first.
Check name
Link headers
Score
0/100
Status
fail
Category
Discoverability
Maturity
Established
Goal
Include Link response headers for agent discovery using RFC 8288.
Result
Link headers failed at "Find useful Link headers".
Validation steps
Find useful Link headers
No useful agent discovery Link headers were found.
Fetch same-origin Link header targets
Link headers did not expose any same-origin targets to validate.
Evidence
{
"failedStep": "presence",
"steps": [
{
"id": "presence",
"title": "Find useful Link headers",
"status": "fail",
"evidence": {
"links": []
},
"issue": "No useful agent discovery Link headers were found.",
"howToFix": "Expose useful Link headers such as rel=\"api-catalog\", rel=\"service-doc\", and rel=\"service-desc\"."
},
{
"id": "target-validation",
"title": "Fetch same-origin Link header targets",
"status": "fail",
"evidence": {
"checked": [],
"failures": [
{
"reason": "No same-origin Link header targets were available to fetch."
}
]
},
"issue": "Link headers did not expose any same-origin targets to validate.",
"howToFix": "Make each same-origin Link href reachable and serve the advertised media type."
}
]
}Agent Ease of UseAPIEstablished
OpenAPI discovery
OpenAPI discovery failed at "Find valid OpenAPI document".
50 Fail
Agent Ease of UseAPIEstablished
OpenAPI discovery
OpenAPI discovery failed at "Find valid OpenAPI document".
Needs attention
OpenAPI discovery
Issue
OpenAPI YAML document did not match the expected shape. Content-Type "text/html; charset=utf-8" is not a recognized type; unsupported version: ; missing info block with title and version; missing paths block; no operations found.
Why it matters
OpenAPI documents let agents understand available operations, schemas, authentication, and request formats before calling an API.
Check name
OpenAPI discovery
Score
0/100
Status
fail
Category
API
Maturity
Established
Goal
Publish a valid OpenAPI or Swagger document for API discovery.
Result
OpenAPI discovery failed at "Find valid OpenAPI document".
Validation steps
Find valid OpenAPI document
OpenAPI YAML document did not match the expected shape. Content-Type "text/html; charset=utf-8" is not a recognized type; unsupported version: ; missing info block with title and version; missing paths block; no operations found.
Evidence
{
"failedStep": "fetch",
"steps": [
{
"id": "fetch",
"title": "Find valid OpenAPI document",
"status": "fail",
"evidence": {
"checked": [
{
"path": "/openapi.json",
"statusCode": 404,
"contentType": "text/html; charset=utf-8",
"valid": false,
"issue": "OpenAPI YAML document did not match the expected shape. Content-Type \"text/html; charset=utf-8\" is not a recognized type; unsupported version: ; missing info block with title and version; missing paths block; no operations found.",
"compatibleContentType": false,
"format": "yaml",
"version": "",
"pathCount": 0,
"operationCount": 0,
"rawExcerpt": "<!DOCTYPE html><!-- Last Published: Fri Jun 05 2026 15:40:43 GMT+0000 (Coordinated Universal Time) --><html data-wf-domain=\"xbow.com\" data-wf-page=\"687825cee9634cf3eb9b4a0d\" data-wf-site=\"686c11d5bee0151a3f8021bf\" data-wf-intellimize-customer-id=\"117219855\" lang=\"en\"><head><meta charset=\"utf-8\"/><link href=\"https://cdn.prod.website-files.com\" rel=\"preconnect\" crossorigin=\"anonymous\"/><title>404 | XBOW</title><meta content=\"The XBOW page you are looking for cannot be found. Please navigate back to the XBOW Home page and try again.\" name=\"description\"/><meta content=\"404 | XBOW\" property=\"og:title\"/><meta content=\"The XBOW page you are looking for cannot be found. Please navigate back to the XBOW Home page and try again.\" property=\"og:description\"/><meta content=\"404 | XBOW\" name=\"twitter:ti"
},
{
"path": "/openapi.yaml",
"statusCode": 404,
"contentType": "text/html; charset=utf-8",
"valid": false,
"issue": "OpenAPI YAML document did not match the expected shape. Content-Type \"text/html; charset=utf-8\" is not a recognized type; unsupported version: ; missing info block with title and version; missing paths block; no operations found.",
"compatibleContentType": false,
"format": "yaml",
"version": "",
"pathCount": 0,
"operationCount": 0,
"rawExcerpt": "<!DOCTYPE html><!-- Last Published: Fri Jun 05 2026 15:40:43 GMT+0000 (Coordinated Universal Time) --><html data-wf-domain=\"xbow.com\" data-wf-page=\"687825cee9634cf3eb9b4a0d\" data-wf-site=\"686c11d5bee0151a3f8021bf\" data-wf-intellimize-customer-id=\"117219855\" lang=\"en\"><head><meta charset=\"utf-8\"/><link href=\"https://cdn.prod.website-files.com\" rel=\"preconnect\" crossorigin=\"anonymous\"/><title>404 | XBOW</title><meta content=\"The XBOW page you are looking for cannot be found. Please navigate back to the XBOW Home page and try again.\" name=\"description\"/><meta content=\"404 | XBOW\" property=\"og:title\"/><meta content=\"The XBOW page you are looking for cannot be found. Please navigate back to the XBOW Home page and try again.\" property=\"og:description\"/><meta content=\"404 | XBOW\" name=\"twitter:ti"
},
{
"path": "/swagger.json",
"statusCode": 404,
"contentType": "text/html; charset=utf-8",
"valid": false,
"issue": "OpenAPI YAML document did not match the expected shape. Content-Type \"text/html; charset=utf-8\" is not a recognized type; unsupported version: ; missing info block with title and version; missing paths block; no operations found.",
"compatibleContentType": false,
"format": "yaml",
"version": "",
"pathCount": 0,
"operationCount": 0,
"rawExcerpt": "<!DOCTYPE html><!-- Last Published: Fri Jun 05 2026 15:40:43 GMT+0000 (Coordinated Universal Time) --><html data-wf-domain=\"xbow.com\" data-wf-page=\"687825cee9634cf3eb9b4a0d\" data-wf-site=\"686c11d5bee0151a3f8021bf\" data-wf-intellimize-customer-id=\"117219855\" lang=\"en\"><head><meta charset=\"utf-8\"/><link href=\"https://cdn.prod.website-files.com\" rel=\"preconnect\" crossorigin=\"anonymous\"/><title>404 | XBOW</title><meta content=\"The XBOW page you are looking for cannot be found. Please navigate back to the XBOW Home page and try again.\" name=\"description\"/><meta content=\"404 | XBOW\" property=\"og:title\"/><meta content=\"The XBOW page you are looking for cannot be found. Please navigate back to the XBOW Home page and try again.\" property=\"og:description\"/><meta content=\"404 | XBOW\" name=\"twitter:ti"
},
{
"path": "/swagger.yaml",
"statusCode": 404,
"contentType": "text/html; charset=utf-8",
"valid": false,
"issue": "OpenAPI YAML document did not match the expected shape. Content-Type \"text/html; charset=utf-8\" is not a recognized type; unsupported version: ; missing info block with title and version; missing paths block; no operations found.",
"compatibleContentType": false,
"format": "yaml",
"version": "",
"pathCount": 0,
"operationCount": 0,
"rawExcerpt": "<!DOCTYPE html><!-- Last Published: Fri Jun 05 2026 15:40:43 GMT+0000 (Coordinated Universal Time) --><html data-wf-domain=\"xbow.com\" data-wf-page=\"687825cee9634cf3eb9b4a0d\" data-wf-site=\"686c11d5bee0151a3f8021bf\" data-wf-intellimize-customer-id=\"117219855\" lang=\"en\"><head><meta charset=\"utf-8\"/><link href=\"https://cdn.prod.website-files.com\" rel=\"preconnect\" crossorigin=\"anonymous\"/><title>404 | XBOW</title><meta content=\"The XBOW page you are looking for cannot be found. Please navigate back to the XBOW Home page and try again.\" name=\"description\"/><meta content=\"404 | XBOW\" property=\"og:title\"/><meta content=\"The XBOW page you are looking for cannot be found. Please navigate back to the XBOW Home page and try again.\" property=\"og:description\"/><meta content=\"404 | XBOW\" name=\"twitter:ti"
},
{
"path": "/api/openapi.json",
"statusCode": 404,
"contentType": "text/html; charset=utf-8",
"valid": false,
"issue": "OpenAPI YAML document did not match the expected shape. Content-Type \"text/html; charset=utf-8\" is not a recognized type; unsupported version: ; missing info block with title and version; missing paths block; no operations found.",
"compatibleContentType": false,
"format": "yaml",
"version": "",
"pathCount": 0,
"operationCount": 0,
"rawExcerpt": "<!DOCTYPE html><!-- Last Published: Fri Jun 05 2026 15:40:43 GMT+0000 (Coordinated Universal Time) --><html data-wf-domain=\"xbow.com\" data-wf-page=\"687825cee9634cf3eb9b4a0d\" data-wf-site=\"686c11d5bee0151a3f8021bf\" data-wf-intellimize-customer-id=\"117219855\" lang=\"en\"><head><meta charset=\"utf-8\"/><link href=\"https://cdn.prod.website-files.com\" rel=\"preconnect\" crossorigin=\"anonymous\"/><title>404 | XBOW</title><meta content=\"The XBOW page you are looking for cannot be found. Please navigate back to the XBOW Home page and try again.\" name=\"description\"/><meta content=\"404 | XBOW\" property=\"og:title\"/><meta content=\"The XBOW page you are looking for cannot be found. Please navigate back to the XBOW Home page and try again.\" property=\"og:description\"/><meta content=\"404 | XBOW\" name=\"twitter:ti"
},
{
"path": "/api/swagger.json",
"statusCode": 404,
"contentType": "text/html; charset=utf-8",
"valid": false,
"issue": "OpenAPI YAML document did not match the expected shape. Content-Type \"text/html; charset=utf-8\" is not a recognized type; unsupported version: ; missing info block with title and version; missing paths block; no operations found.",
"compatibleContentType": false,
"format": "yaml",
"version": "",
"pathCount": 0,
"operationCount": 0,
"rawExcerpt": "<!DOCTYPE html><!-- Last Published: Fri Jun 05 2026 15:40:43 GMT+0000 (Coordinated Universal Time) --><html data-wf-domain=\"xbow.com\" data-wf-page=\"687825cee9634cf3eb9b4a0d\" data-wf-site=\"686c11d5bee0151a3f8021bf\" data-wf-intellimize-customer-id=\"117219855\" lang=\"en\"><head><meta charset=\"utf-8\"/><link href=\"https://cdn.prod.website-files.com\" rel=\"preconnect\" crossorigin=\"anonymous\"/><title>404 | XBOW</title><meta content=\"The XBOW page you are looking for cannot be found. Please navigate back to the XBOW Home page and try again.\" name=\"description\"/><meta content=\"404 | XBOW\" property=\"og:title\"/><meta content=\"The XBOW page you are looking for cannot be found. Please navigate back to the XBOW Home page and try again.\" property=\"og:description\"/><meta content=\"404 | XBOW\" name=\"twitter:ti"
},
{
"path": "/docs/openapi.json",
"statusCode": 404,
"contentType": "text/html; charset=utf-8",
"valid": false,
"issue": "OpenAPI YAML document did not match the expected shape. Content-Type \"text/html; charset=utf-8\" is not a recognized type; unsupported version: ; missing info block with title and version; missing paths block; no operations found.",
"compatibleContentType": false,
"format": "yaml",
"version": "",
"pathCount": 0,
"operationCount": 0,
"rawExcerpt": "<!DOCTYPE html><!-- Last Published: Fri Jun 05 2026 15:40:43 GMT+0000 (Coordinated Universal Time) --><html data-wf-domain=\"xbow.com\" data-wf-page=\"687825cee9634cf3eb9b4a0d\" data-wf-site=\"686c11d5bee0151a3f8021bf\" data-wf-intellimize-customer-id=\"117219855\" lang=\"en\"><head><meta charset=\"utf-8\"/><link href=\"https://cdn.prod.website-files.com\" rel=\"preconnect\" crossorigin=\"anonymous\"/><title>404 | XBOW</title><meta content=\"The XBOW page you are looking for cannot be found. Please navigate back to the XBOW Home page and try again.\" name=\"description\"/><meta content=\"404 | XBOW\" property=\"og:title\"/><meta content=\"The XBOW page you are looking for cannot be found. Please navigate back to the XBOW Home page and try again.\" property=\"og:description\"/><meta content=\"404 | XBOW\" name=\"twitter:ti"
}
]
},
"issue": "OpenAPI YAML document did not match the expected shape. Content-Type \"text/html; charset=utf-8\" is not a recognized type; unsupported version: ; missing info block with title and version; missing paths block; no operations found.",
"howToFix": "Publish a valid OpenAPI 3.x or Swagger 2.0 JSON/YAML document with info, paths, operations, and responses."
}
]
}AI DiscoverabilityBot Access ControlEstablished
AI bot rules in robots.txt
AI bot rules in robots.txt is missing or incomplete.
33 Fail
AI DiscoverabilityBot Access ControlEstablished
AI bot rules in robots.txt
AI bot rules in robots.txt is missing or incomplete.
Needs attention
AI bot rules in robots.txt
Issue
No specific User-agent rules found for major AI crawlers (GPTBot, ClaudeBot, etc.) in robots.txt.
Why it matters
Explicit AI bot rules reduce ambiguity for crawler operators and make training, indexing, or retrieval access policy auditable.
Check name
AI bot rules in robots.txt
Score
0/100
Status
fail
Category
Bot Access Control
Maturity
Established
Goal
Add User-agent rules for AI crawlers like GPTBot, Claude-Web, and others.
Result
AI bot rules in robots.txt is missing or incomplete.
Evidence
{
"expectedBots": [
"GPTBot",
"ChatGPT-User",
"ClaudeBot",
"Claude-Web",
"Anthropic-AI",
"Google-Extended",
"PerplexityBot",
"CCBot",
"Applebot-Extended",
"Meta-ExternalAgent",
"Bytespider",
"Amazonbot",
"Cohere-AI"
],
"configuredBots": []
}AI DiscoverabilityBot Access ControlInformational
Content Signal
Content Signal is missing or incomplete.
33 Fail
AI DiscoverabilityBot Access ControlInformational
Content Signal
Content Signal is missing or incomplete.
Needs attention
Content Signal
Issue
No Content Signal found in robots.txt
Why it matters
Content Signal provides a machine-readable way to communicate AI usage preferences where participating crawlers look for policy.
Check name
Content Signal
Score
0/100
Status
fail
Category
Bot Access Control
Maturity
Informational
Goal
Declare AI content usage preferences with Content Signal in robots.txt.
Result
Content Signal is missing or incomplete.
Evidence
{
"signals": [],
"ai-train": false,
"search": false,
"ai-input": false
}Security & TrustSecurity & TrustEstablished
Content-Security-Policy
Content-Security-Policy is missing or incomplete.
33 Fail
Security & TrustSecurity & TrustEstablished
Content-Security-Policy
Content-Security-Policy is missing or incomplete.
Needs attention
Content-Security-Policy
Issue
Content-Security-Policy is missing or incomplete.
Why it matters
Content Security Policy limits where scripts, styles, frames, and connections can load from, reducing the impact of injection bugs.
Check name
Content-Security-Policy
Score
0/100
Status
fail
Category
Security & Trust
Maturity
Established
Goal
Constrain script, style, frame, and resource loading with a Content-Security-Policy header.
Result
Content-Security-Policy is missing or incomplete.
Evidence
{
"header": "content-security-policy",
"value": "frame-ancestors 'self'"
}Agent Ease of UseMCPEmerging recommendation
MCP Server Card
MCP Server Card failed at "Fetch to find resource".
33 Fail
Agent Ease of UseMCPEmerging recommendation
MCP Server Card
MCP Server Card failed at "Fetch to find resource".
Needs attention
MCP Server Card
Issue
MCP Server Card was not found at the expected path.
Why it matters
MCP Server Cards help agents discover server transports, capabilities, and protocol details before opening an MCP session.
Check name
MCP Server Card
Score
0/100
Status
fail
Category
MCP
Maturity
Emerging recommendation
Goal
Publish an MCP Server Card for agent discovery.
Result
MCP Server Card failed at "Fetch to find resource".
Validation steps
Fetch to find resource
MCP Server Card was not found at the expected path.
Evidence
{
"failedStep": "fetch",
"steps": [
{
"id": "fetch",
"title": "Fetch to find resource",
"status": "fail",
"evidence": {
"checked": [
{
"path": "/.well-known/mcp/server-card.json",
"statusCode": 404,
"contentType": "text/html; charset=utf-8",
"length": 88
},
{
"path": "/.well-known/mcp/server-cards.json",
"statusCode": 404,
"contentType": "text/html; charset=utf-8",
"length": 88
},
{
"path": "/.well-known/mcp.json",
"statusCode": 404,
"contentType": "text/html; charset=utf-8",
"length": 88
}
]
},
"issue": "MCP Server Card was not found at the expected path.",
"howToFix": "Publish an MCP server card with valid transports and make each advertised local endpoint answer an MCP initialize request."
}
]
}Agent Ease of UseMCPEmerging recommendation
mcp.json
mcp.json failed at "Fetch to find resource".
33 Fail
Agent Ease of UseMCPEmerging recommendation
mcp.json
mcp.json failed at "Fetch to find resource".
Needs attention
mcp.json
Issue
mcp.json was not found at the expected path.
Why it matters
MCP clients need trustworthy server metadata, protocol version, transport details, and capability hints before connecting to a remote MCP server.
Check name
mcp.json
Score
0/100
Status
fail
Category
MCP
Maturity
Emerging recommendation
Goal
Expose a stable MCP server metadata document that points agents to the site's MCP endpoint.
Result
mcp.json failed at "Fetch to find resource".
Validation steps
Fetch to find resource
mcp.json was not found at the expected path.
Evidence
{
"failedStep": "fetch",
"steps": [
{
"id": "fetch",
"title": "Fetch to find resource",
"status": "fail",
"evidence": {
"checked": [
{
"path": "/mcp.json",
"statusCode": 404,
"contentType": "text/html; charset=utf-8",
"length": 58649
},
{
"path": "/.well-known/mcp.json",
"statusCode": 404,
"contentType": "text/html; charset=utf-8",
"length": 88
},
{
"path": "/.well-known/mcp/server-card.json",
"statusCode": 404,
"contentType": "text/html; charset=utf-8",
"length": 88
}
]
},
"issue": "mcp.json was not found at the expected path.",
"howToFix": "Publish mcp.json or an MCP server card with serverInfo, protocolVersion, transport endpoint, and capabilities."
}
]
}Security & TrustSecurity & TrustEstablished
Referrer-Policy
Referrer-Policy is missing or incomplete.
33 Fail
Security & TrustSecurity & TrustEstablished
Referrer-Policy
Referrer-Policy is missing or incomplete.
Needs attention
Referrer-Policy
Issue
Referrer-Policy is missing or incomplete.
Why it matters
Referrer-Policy controls how much URL context is sent to other origins, limiting accidental leakage of paths, queries, and identifiers.
Check name
Referrer-Policy
Score
0/100
Status
fail
Category
Security & Trust
Maturity
Established
Goal
Limit how much referrer data leaves the site.
Result
Referrer-Policy is missing or incomplete.
Evidence
{
"header": "referrer-policy",
"value": null
}AI DiscoverabilityBot Access ControlInformational
Web Bot Auth request signing
Web Bot Auth request signing failed at "Fetch to find resource".
33 Fail
AI DiscoverabilityBot Access ControlInformational
Web Bot Auth request signing
Web Bot Auth request signing failed at "Fetch to find resource".
Needs attention
Web Bot Auth request signing
Issue
Web Bot Auth request signing was not found at the expected path.
Why it matters
Web Bot Auth discovery lets servers and clients find signing keys for bot identity workflows based on HTTP Message Signatures.
Check name
Web Bot Auth request signing
Score
0/100
Status
fail
Category
Bot Access Control
Maturity
Informational
Goal
Advertise HTTP Message Signatures keys when this site operates signed bot clients or supports Web Bot Auth workflows.
Result
Web Bot Auth request signing failed at "Fetch to find resource".
Validation steps
Fetch to find resource
Web Bot Auth request signing was not found at the expected path.
Evidence
{
"failedStep": "fetch",
"steps": [
{
"id": "fetch",
"title": "Fetch to find resource",
"status": "fail",
"evidence": {
"checked": [
{
"path": "/.well-known/http-message-signatures-directory",
"statusCode": 404,
"contentType": "text/html; charset=utf-8",
"length": 88
}
]
},
"issue": "Web Bot Auth request signing was not found at the expected path.",
"howToFix": "If publishing Web Bot Auth keys, return a JSON key directory with a non-empty keys array and the draft media type."
}
]
}Agent Ease of UseMCPInformational
WebMCP manifest
WebMCP manifest failed at "Fetch to find resource".
33 Fail
Agent Ease of UseMCPInformational
WebMCP manifest
WebMCP manifest failed at "Fetch to find resource".
Needs attention
WebMCP manifest
Issue
WebMCP manifest was not found at the expected path.
Why it matters
A WebMCP manifest advertises browser-exposed tools declaratively so agents can understand available site actions before invoking them.
Check name
WebMCP manifest
Score
0/100
Status
fail
Category
MCP
Maturity
Informational
Goal
Publish a WebMCP manifest for declarative browser tool discovery when using the draft manifest convention.
Result
WebMCP manifest failed at "Fetch to find resource".
Validation steps
Fetch to find resource
WebMCP manifest was not found at the expected path.
Evidence
{
"failedStep": "fetch",
"steps": [
{
"id": "fetch",
"title": "Fetch to find resource",
"status": "fail",
"evidence": {
"checked": [
{
"path": "/.well-known/webmcp.json",
"statusCode": 404,
"contentType": "text/html; charset=utf-8",
"length": 88
},
{
"path": "/webmcp.json",
"statusCode": 404,
"contentType": "text/html; charset=utf-8",
"length": 58649
},
{
"path": "/mcp.json",
"statusCode": 404,
"contentType": "text/html; charset=utf-8",
"length": 58649
}
]
},
"issue": "WebMCP manifest was not found at the expected path.",
"howToFix": "Keep declarative WebMCP manifest discovery informational until the manifest shape stabilizes; validate tools if you publish one."
}
]
}Security & TrustSecurity & TrustEstablished
X-Content-Type-Options
X-Content-Type-Options is missing or incomplete.
33 Fail
Security & TrustSecurity & TrustEstablished
X-Content-Type-Options
X-Content-Type-Options is missing or incomplete.
Needs attention
X-Content-Type-Options
Issue
X-Content-Type-Options is missing or incomplete.
Why it matters
X-Content-Type-Options prevents browsers from treating mislabeled files as executable content, reducing content-sniffing attacks.
Check name
X-Content-Type-Options
Score
0/100
Status
fail
Category
Security & Trust
Maturity
Established
Goal
Prevent MIME sniffing for browser-loaded resources.
Result
X-Content-Type-Options is missing or incomplete.
Evidence
{
"header": "x-content-type-options",
"value": null
}AI DiscoverabilityContent ReadinessEmerging recommendation
llms.txt
llms.txt failed at "Fetch to find resource".
25 Fail
AI DiscoverabilityContent ReadinessEmerging recommendation
llms.txt
llms.txt failed at "Fetch to find resource".
Needs attention
llms.txt
Issue
llms.txt was not found at the expected path.
Why it matters
llms.txt gives language-model clients a concise, curated summary of important site context and links before they crawl broadly.
Check name
llms.txt
Score
0/100
Status
fail
Category
Content Readiness
Maturity
Emerging recommendation
Goal
Publish llms.txt to summarize agent-readable site guidance.
Result
llms.txt failed at "Fetch to find resource".
Validation steps
Fetch to find resource
llms.txt was not found at the expected path.
Evidence
{
"failedStep": "fetch",
"steps": [
{
"id": "fetch",
"title": "Fetch to find resource",
"status": "fail",
"evidence": {
"checked": [
{
"path": "/llms.txt",
"statusCode": 404,
"contentType": "text/html; charset=utf-8",
"length": 58649
},
{
"path": "/llms-full.txt",
"statusCode": 404,
"contentType": "text/html; charset=utf-8",
"length": 58649
}
]
},
"issue": "llms.txt was not found at the expected path.",
"howToFix": "Publish /llms.txt as Markdown with a clear title, concise site summary, and useful links for agents."
}
]
}AI DiscoverabilityContent ReadinessEstablished
Markdown negotiation
Markdown negotiation failed at "Markdown content type".
25 Fail
AI DiscoverabilityContent ReadinessEstablished
Markdown negotiation
Markdown negotiation failed at "Markdown content type".
Needs attention
Markdown negotiation
Issue
Content-Type "text/html; charset=utf-8" does not indicate Markdown when requested with Accept: text/markdown.
Why it matters
Markdown negotiation gives agents a cleaner representation of page content while preserving normal HTML for browsers.
Check name
Markdown negotiation
Score
0/100
Status
fail
Category
Content Readiness
Maturity
Established
Goal
Return HTML responses as markdown when agents request it.
Result
Markdown negotiation failed at "Markdown content type".
Validation steps
Markdown content type
Content-Type "text/html; charset=utf-8" does not indicate Markdown when requested with Accept: text/markdown.
Vary: Accept header
Markdown negotiation is missing Vary: Accept; current Vary header is "accept-encoding".
Structured Markdown body
Markdown response is missing a heading.
Evidence
{
"failedStep": "content-type",
"steps": [
{
"id": "content-type",
"title": "Markdown content type",
"status": "fail",
"evidence": {
"statusCode": 200,
"contentType": "text/html; charset=utf-8"
},
"issue": "Content-Type \"text/html; charset=utf-8\" does not indicate Markdown when requested with Accept: text/markdown.",
"howToFix": "Return Content-Type: text/markdown; charset=utf-8 for requests with Accept: text/markdown."
},
{
"id": "vary-accept",
"title": "Vary: Accept header",
"status": "fail",
"evidence": {
"vary": "accept-encoding"
},
"issue": "Markdown negotiation is missing Vary: Accept; current Vary header is \"accept-encoding\".",
"howToFix": "Add Vary: Accept on negotiated Markdown responses so shared caches keep HTML and Markdown variants separate."
},
{
"id": "markdown-content",
"title": "Structured Markdown body",
"status": "fail",
"evidence": {
"valid": false,
"hasHeading": false,
"wordCount": 10226,
"excerpt": "<!DOCTYPE html><!-- Last Published: Fri Jun 05 2026 15:40:43 GMT+0000 (Coordinated Universal Time) --><html data-wf-domain=\"xbow.com\" data-wf-page=\"696a27a093138040b72e7546\" data-wf-site=\"686c11d5bee0151a3f8021bf\" data-wf-intellimize-custom",
"issue": "Markdown response is missing a heading."
},
"issue": "Markdown response is missing a heading.",
"howToFix": "Return Markdown with at least one heading and substantive page content, including useful links or instructions for agents."
}
]
}AI DiscoverabilityContent ReadinessEstablished
Semantic HTML
Semantic HTML is missing or incomplete.
25 Fail
AI DiscoverabilityContent ReadinessEstablished
Semantic HTML
Semantic HTML is missing or incomplete.
Needs attention
Semantic HTML
Issue
Semantic HTML is incomplete: missing <footer> landmark; 3 links missing accessible names.
Details
Why it matters
Semantic HTML gives browsers, assistive technology, search systems, and agents reliable landmarks, headings, controls, form semantics, and image context.
Check name
Semantic HTML
Score
0/100
Status
fail
Category
Content Readiness
Maturity
Established
Goal
Expose readable page structure through semantic HTML and accessible controls.
Result
Semantic HTML is missing or incomplete.
Evidence
{
"main": true,
"nav": true,
"footer": false,
"meaningfulH1": true,
"headingOrder": true,
"accessibleLinks": false,
"accessibleButtons": true,
"imageAltCoverage": true,
"formAutocompleteCoverage": true,
"details": {
"inaccessibleLinks": [
"<a href=\"/\" id=\"w-node-_95dd024a-f0e3-337a-220d-3dd56cf833d4-6cf833d2\" aria-current=\"page\" class=\"navbar_logo_link w-nav-brand w--current\"><svg xmlns=\"http://www.w3.org/2000/svg\" width=\"100%\" viewBox=\"0 0 139 27\" fill=\"none\" class=\"navbar_logo\"><path fill-rule=\"evenodd\" clip-rule=\"evenodd\" d=\"M81.536 0C85.2678 6.0448e-07 87.99 0.544387 90.3098 1.6331C92.6533 2.69813 94.4643 4.22459 95.7425 6.21264C97.0445 8.17705 97.6955 10.4966 97.6955 13.171C97.6955 14.4964 97.5299 15.751 97.1985 16.9344C96.86",
"<a href=\"https://youtu.be/w4L2bM1BLzI\" class=\"ds_lightbox_component w-inline-block\"><img src=\"https://cdn.prod.website-files.com/686c11d5bee0151a3f8021bf/6939dd774ab98d1c1477a4e8_4a2fc0531add96b3d21f1f9faf953251_VideoframeYoutube.avif\" loading=\"lazy\" alt class=\"ds_lightbox_thumbnail\"><svg xmlns=\"http://www.w3.org/2000/svg\" width=\"100%\" viewBox=\"0 0 43 43\" fill=\"none\" class=\"ds_video_play_icon\"><ellipse cx=\"21.2215\" cy=\"21.2215\" rx=\"21.2215\" ry=\"21.2215\" fill=\"#FCFCFC\" fill-opacity=\"0.2\"/><path d",
"<a href=\"/\" aria-current=\"page\" class=\"ds_footer_logo_link w-nav-brand w--current\"><svg xmlns=\"http://www.w3.org/2000/svg\" width=\"100%\" viewBox=\"0 0 139 27\" fill=\"none\" class=\"ds_footer_logo\"><path fill-rule=\"evenodd\" clip-rule=\"evenodd\" d=\"M81.536 0C85.2678 6.0448e-07 87.99 0.544387 90.3098 1.6331C92.6533 2.69813 94.4643 4.22459 95.7425 6.21264C97.0445 8.17705 97.6955 10.4966 97.6955 13.171C97.6955 14.4964 97.5299 15.751 97.1985 16.9344C96.8671 18.0941 96.3817 19.171 95.7425 20.165C95.1034 21.1"
],
"inaccessibleButtons": [],
"missingAutocompleteInputs": [],
"imagesMissingAlt": [],
"skippedHeadingLevels": []
},
"counts": {
"h1": 1,
"headings": 16,
"links": 39,
"inaccessibleLinks": 3,
"buttons": 0,
"inaccessibleButtons": 0,
"images": 24,
"imagesWithAlt": 24,
"autocompleteInputs": 0,
"inputsWithAutocomplete": 0,
"missingAutocompleteInputs": 0
}
}Agent Ease of UseSkill DiscoveryEmerging recommendation
A2A Agent Card
A2A Agent Card failed at "Fetch to find resource".
20 Fail
Agent Ease of UseSkill DiscoveryEmerging recommendation
A2A Agent Card
A2A Agent Card failed at "Fetch to find resource".
Needs attention
A2A Agent Card
Issue
A2A Agent Card was not found at the expected path.
Why it matters
A2A Agent Cards let compatible clients discover agent skills, input and output modes, and the endpoint used to invoke those skills.
Check name
A2A Agent Card
Score
0/100
Status
fail
Category
Skill Discovery
Maturity
Emerging recommendation
Goal
Publish an agent card so A2A-compatible clients can discover capabilities.
Result
A2A Agent Card failed at "Fetch to find resource".
Validation steps
Fetch to find resource
A2A Agent Card was not found at the expected path.
Evidence
{
"failedStep": "fetch",
"steps": [
{
"id": "fetch",
"title": "Fetch to find resource",
"status": "fail",
"evidence": {
"checked": [
{
"path": "/.well-known/agent-card.json",
"statusCode": 404,
"contentType": "text/html; charset=utf-8",
"length": 88
},
{
"path": "/.well-known/a2a/agent-card.json",
"statusCode": 404,
"contentType": "text/html; charset=utf-8",
"length": 88
},
{
"path": "/agent-card.json",
"statusCode": 404,
"contentType": "text/html; charset=utf-8",
"length": 58649
}
]
},
"issue": "A2A Agent Card was not found at the expected path.",
"howToFix": "Publish an A2A Agent Card with required skill details and make the advertised url answer A2A JSON-RPC requests."
}
]
}Agent Ease of UseSkill DiscoveryEmerging recommendation
Agent Skills index
Agent Skills index failed at "Fetch to find resource".
20 Fail
Agent Ease of UseSkill DiscoveryEmerging recommendation
Agent Skills index
Agent Skills index failed at "Fetch to find resource".
Needs attention
Agent Skills index
Issue
Agent Skills index was not found at the expected path.
Why it matters
An Agent Skills index lets clients find task-specific SKILL.md documents that describe how to use site capabilities correctly.
Check name
Agent Skills index
Score
0/100
Status
fail
Category
Skill Discovery
Maturity
Emerging recommendation
Goal
Publish an agent skills discovery index.
Result
Agent Skills index failed at "Fetch to find resource".
Validation steps
Fetch to find resource
Agent Skills index was not found at the expected path.
Evidence
{
"failedStep": "fetch",
"steps": [
{
"id": "fetch",
"title": "Fetch to find resource",
"status": "fail",
"evidence": {
"checked": [
{
"path": "/.well-known/agent-skills/index.json",
"statusCode": 404,
"contentType": "text/html; charset=utf-8",
"length": 88
},
{
"path": "/.well-known/skills/index.json",
"statusCode": 404,
"contentType": "text/html; charset=utf-8",
"length": 88
}
]
},
"issue": "Agent Skills index was not found at the expected path.",
"howToFix": "Publish an index with a non-empty skills array and reachable SKILL.md URLs."
}
]
}Agent Ease of UseSkill DiscoveryEmerging recommendation
agent.json
agent.json failed at "Fetch to find resource".
20 Fail
Agent Ease of UseSkill DiscoveryEmerging recommendation
agent.json
agent.json failed at "Fetch to find resource".
Needs attention
agent.json
Issue
agent.json was not found at the expected path.
Why it matters
agent.json is an emerging machine-readable manifest for declaring what a website does, how agents authenticate, and which actions or protocols are available.
Check name
agent.json
Score
0/100
Status
fail
Category
Skill Discovery
Maturity
Emerging recommendation
Goal
Publish the singular Agent Web Protocol agent.json manifest without confusing it with the separate agents.json directory convention.
Result
agent.json failed at "Fetch to find resource".
Validation steps
Fetch to find resource
agent.json was not found at the expected path.
Evidence
{
"failedStep": "fetch",
"steps": [
{
"id": "fetch",
"title": "Fetch to find resource",
"status": "fail",
"evidence": {
"checked": [
{
"path": "/.well-known/agent.json",
"statusCode": 404,
"contentType": "text/html; charset=utf-8",
"length": 88
},
{
"path": "/agent.json",
"statusCode": 404,
"contentType": "text/html; charset=utf-8",
"length": 58649
}
]
},
"issue": "agent.json was not found at the expected path.",
"howToFix": "Publish agent.json with awp_version, domain, intent, and typed actions that point to real same-origin API or protocol endpoints."
}
]
}Agent Ease of UseSkill DiscoveryInformational
agents.json
agents.json failed at "Fetch to find resource".
20 Fail
Agent Ease of UseSkill DiscoveryInformational
agents.json
agents.json failed at "Fetch to find resource".
Needs attention
agents.json
Issue
agents.json was not found at the expected path.
Why it matters
agents.json gives clients a simple directory of agent-facing capabilities and contacts when a site chooses to advertise them.
Check name
agents.json
Score
0/100
Status
fail
Category
Skill Discovery
Maturity
Informational
Goal
Publish an agents.json directory for agent-facing capabilities and contacts when using this convention.
Result
agents.json failed at "Fetch to find resource".
Validation steps
Fetch to find resource
agents.json was not found at the expected path.
Evidence
{
"failedStep": "fetch",
"steps": [
{
"id": "fetch",
"title": "Fetch to find resource",
"status": "fail",
"evidence": {
"checked": [
{
"path": "/.well-known/agents.json",
"statusCode": 404,
"contentType": "text/html; charset=utf-8",
"length": 88
},
{
"path": "/agents.json",
"statusCode": 404,
"contentType": "text/html; charset=utf-8",
"length": 58649
}
]
},
"issue": "agents.json was not found at the expected path.",
"howToFix": "If this site uses agents.json, publish JSON with an agents array containing name and url for each agent."
}
]
}AI DiscoverabilityContent ReadinessEstablished
Content freshness signals
Content freshness signals is partially implemented.
19 Warning
AI DiscoverabilityContent ReadinessEstablished
Content freshness signals
Content freshness signals is partially implemented.
Needs attention
Content freshness signals
Issue
Content freshness signals are incomplete: missing dateModified/datePublished in JSON-LD; missing meta or <time> freshness tags.
Why it matters
Freshness signals help agents decide whether content is current enough to cite, summarize, or compare against newer sources.
Check name
Content freshness signals
Score
25/100
Status
warning
Category
Content Readiness
Maturity
Established
Goal
Expose modified and published dates for freshness-aware retrieval and ranking.
Result
Content freshness signals is partially implemented.
Evidence
{
"lastModified": "Sun, 07 Jun 2026 06:31:51 GMT",
"schemaDates": [],
"metaDateCount": 0,
"timeDateCount": 0
}Agent Ease of UseSkill DiscoveryEmerging recommendation
DNS-AID Agent Discovery
DNS-AID Agent Discovery failed at "Resolve DNS-AID SVCB/HTTPS records".
15 Fail
Agent Ease of UseSkill DiscoveryEmerging recommendation
DNS-AID Agent Discovery
DNS-AID Agent Discovery failed at "Resolve DNS-AID SVCB/HTTPS records".
Needs attention
DNS-AID Agent Discovery
Issue
No DNS-AID entrypoint records were found under _agents.
Why it matters
DNS-AID lets agents discover index, A2A, and other agent entrypoints before fetching HTTP metadata, while DNSSEC can authenticate the discovery zone.
Check name
DNS-AID Agent Discovery
Score
25/100
Status
fail
Category
Skill Discovery
Maturity
Emerging recommendation
Goal
Publish DNS for AI Discovery records under _agents for DNS-based agent entrypoint discovery.
Result
DNS-AID Agent Discovery failed at "Resolve DNS-AID SVCB/HTTPS records".
Validation steps
Resolve DNS-AID SVCB/HTTPS records
No DNS-AID entrypoint records were found under _agents.
Validate alpn and endpoint parameters
Include alpn and endpoint service parameters in each DNS-AID record so agents know the protocol and target entrypoint.
Check DNSSEC material
DNSSEC material was not visible for the hostname or parent zone from this resolver.
Evidence
{
"failedStep": "svcb-https-records",
"steps": [
{
"id": "svcb-https-records",
"title": "Resolve DNS-AID SVCB/HTTPS records",
"status": "fail",
"evidence": {
"hostname": "xbow.com",
"probes": [
{
"name": "_index._agents.xbow.com",
"found": false,
"recordCount": 1,
"records": [],
"hasAlpn": false,
"hasEndpoint": false
},
{
"name": "_a2a._agents.xbow.com",
"found": false,
"recordCount": 1,
"records": [],
"hasAlpn": false,
"hasEndpoint": false
}
]
},
"issue": "No DNS-AID entrypoint records were found under _agents.",
"howToFix": "Publish ServiceMode SVCB/HTTPS records such as _index._agents.example.com or _a2a._agents.example.com."
},
{
"id": "service-params",
"title": "Validate alpn and endpoint parameters",
"status": "informational",
"evidence": {
"discovered": []
},
"howToFix": "Include alpn and endpoint service parameters in each DNS-AID record so agents know the protocol and target entrypoint."
},
{
"id": "dnssec",
"title": "Check DNSSEC material",
"status": "warning",
"evidence": {
"hasDnssecMaterial": false,
"checked": [
{
"name": "xbow.com",
"dnssecTypes": [],
"dnssecRecordCount": 0
}
]
},
"issue": "DNSSEC material was not visible for the hostname or parent zone from this resolver.",
"howToFix": "Sign the public discovery zone with DNSSEC so validating resolvers can return authenticated data."
}
]
}GEO, AIO and AEOGEO, AIO & AEOEmerging recommendation
AIO: Source and trust signals
AIO: Source and trust signals scored 40/100 and needs a fix.
9 Fail
GEO, AIO and AEOGEO, AIO & AEOEmerging recommendation
AIO: Source and trust signals
AIO: Source and trust signals scored 40/100 and needs a fix.
Needs attention
AIO: Source and trust signals
Issue
Missing AIO trust signals: author, publisher, freshnessDate.
Details
Why it matters
AI Overviews depend on Google-search eligibility, useful visible content, consistent structured data, answer-first sections, trust signals, and preview controls that permit snippets.
Check name
AIO: Source and trust signals
Score
40/100
Status
fail
Category
GEO, AIO & AEO
Maturity
Emerging recommendation
Goal
Make page content eligible and useful for Google AI Overviews and AI Mode extraction.
Result
AIO: Source and trust signals scored 40/100 and needs a fix.
Evidence
{
"signals": {
"author": false,
"publisher": false,
"freshnessDate": false,
"aboutOrContact": true,
"policyLinks": true
},
"missing": [
"author",
"publisher",
"freshnessDate"
],
"authorMeta": "",
"schemaAuthors": [],
"schemaPublishers": [],
"schemaDates": [],
"visibleDates": [],
"aboutLinks": [
{
"href": "/about",
"text": "About",
"html": "<a href=\"/about\" class=\"navbar_link is-dd w-nav-link\">About</a>"
},
{
"href": "/about",
"text": "About",
"html": "<a href=\"/about\" class=\"ds_footer_link\">About</a>"
},
{
"href": "https://www.linkedin.com/company/xbow",
"text": "Linkedin",
"html": "<a href=\"https://www.linkedin.com/company/xbow\" target=\"_blank\" class=\"ds_footer_link\">Linkedin</a>"
}
],
"contactLinks": [
{
"href": "/contact",
"text": "Get a demo",
"html": "<a data-wf--button--variant=\"base\" href=\"/contact\" class=\"ds_button w-button\">Get a demo</a>"
},
{
"href": "/contact",
"text": "Get a demo",
"html": "<a data-wf--button--variant=\"base\" href=\"/contact\" class=\"ds_button w-button\">Get a demo</a>"
},
{
"href": "/contact",
"text": "Get a demo",
"html": "<a data-wf--button--variant=\"base\" href=\"/contact\" class=\"ds_button w-button\" style=\"translate: none; rotate: none; scale: none; opacity: 0.7859; transform: translate3d(0px, 3.4253px, 0px);\">Get a demo</a>"
},
{
"href": "/contact",
"text": "GET A DEMO",
"html": "<a data-wf--button--variant=\"secondary\" href=\"/contact\" class=\"ds_button w-variant-9e23dfd2-8ac8-b247-6e26-6edad5a2b40f w-button\">GET A DEMO</a>"
}
],
"privacyLinks": [
{
"href": "/terms-of-use",
"text": "Terms of Use",
"html": "<a href=\"/terms-of-use\" class=\"ds_footer_link\">Terms of Use</a>"
},
{
"href": "/terms-and-conditions",
"text": "Terms and Conditions",
"html": "<a href=\"/terms-and-conditions\" class=\"ds_footer_link\">Terms and Conditions</a>"
},
{
"href": "/privacy-policy",
"text": "Privacy Policy",
"html": "<a href=\"/privacy-policy\" class=\"ds_footer_link\">Privacy Policy</a>"
}
],
"score": 40,
"weight": 20
}GEO, AIO and AEOGEO, AIO & AEOEmerging recommendation
AEO: Answer evidence and trust
AEO: Answer evidence and trust scored 40/100 and needs a fix.
5 Fail
GEO, AIO and AEOGEO, AIO & AEOEmerging recommendation
AEO: Answer evidence and trust
AEO: Answer evidence and trust scored 40/100 and needs a fix.
Needs attention
AEO: Answer evidence and trust
Issue
Missing AIO trust signals: author, publisher, freshnessDate.
Details
Why it matters
Answer engines need concise answers, question-led structure, entity clarity, visible evidence, and trust signals that can be extracted without relying on search-only metadata checks.
Check name
AEO: Answer evidence and trust
Score
40/100
Status
fail
Category
GEO, AIO & AEO
Maturity
Emerging recommendation
Goal
Make page content easy for answer engines and assistants to answer from directly.
Result
AEO: Answer evidence and trust scored 40/100 and needs a fix.
Evidence
{
"signals": {
"author": false,
"publisher": false,
"freshnessDate": false,
"aboutOrContact": true,
"policyLinks": true
},
"missing": [
"author",
"publisher",
"freshnessDate"
],
"authorMeta": "",
"schemaAuthors": [],
"schemaPublishers": [],
"schemaDates": [],
"visibleDates": [],
"aboutLinks": [
{
"href": "/about",
"text": "About",
"html": "<a href=\"/about\" class=\"navbar_link is-dd w-nav-link\">About</a>"
},
{
"href": "/about",
"text": "About",
"html": "<a href=\"/about\" class=\"ds_footer_link\">About</a>"
},
{
"href": "https://www.linkedin.com/company/xbow",
"text": "Linkedin",
"html": "<a href=\"https://www.linkedin.com/company/xbow\" target=\"_blank\" class=\"ds_footer_link\">Linkedin</a>"
}
],
"contactLinks": [
{
"href": "/contact",
"text": "Get a demo",
"html": "<a data-wf--button--variant=\"base\" href=\"/contact\" class=\"ds_button w-button\">Get a demo</a>"
},
{
"href": "/contact",
"text": "Get a demo",
"html": "<a data-wf--button--variant=\"base\" href=\"/contact\" class=\"ds_button w-button\">Get a demo</a>"
},
{
"href": "/contact",
"text": "Get a demo",
"html": "<a data-wf--button--variant=\"base\" href=\"/contact\" class=\"ds_button w-button\" style=\"translate: none; rotate: none; scale: none; opacity: 0.7859; transform: translate3d(0px, 3.4253px, 0px);\">Get a demo</a>"
},
{
"href": "/contact",
"text": "GET A DEMO",
"html": "<a data-wf--button--variant=\"secondary\" href=\"/contact\" class=\"ds_button w-variant-9e23dfd2-8ac8-b247-6e26-6edad5a2b40f w-button\">GET A DEMO</a>"
}
],
"privacyLinks": [
{
"href": "/terms-of-use",
"text": "Terms of Use",
"html": "<a href=\"/terms-of-use\" class=\"ds_footer_link\">Terms of Use</a>"
},
{
"href": "/terms-and-conditions",
"text": "Terms and Conditions",
"html": "<a href=\"/terms-and-conditions\" class=\"ds_footer_link\">Terms and Conditions</a>"
},
{
"href": "/privacy-policy",
"text": "Privacy Policy",
"html": "<a href=\"/privacy-policy\" class=\"ds_footer_link\">Privacy Policy</a>"
}
],
"score": 40,
"weight": 22
}GEO, AIO and AEOGEO, AIO & AEOEmerging recommendation
AEO: Answer-first sections
AEO: Answer-first sections scored 65/100 and needs improvement.
4 Warning
GEO, AIO and AEOGEO, AIO & AEOEmerging recommendation
AEO: Answer-first sections
AEO: Answer-first sections scored 65/100 and needs improvement.
Needs attention
AEO: Answer-first sections
Issue
10 section(s) may benefit from a clearer opening answer; this is optional for feature/card sections.
Details
Why it matters
Answer engines need concise answers, question-led structure, entity clarity, visible evidence, and trust signals that can be extracted without relying on search-only metadata checks.
Check name
AEO: Answer-first sections
Score
65/100
Status
warning
Category
GEO, AIO & AEO
Maturity
Emerging recommendation
Goal
Make page content easy for answer engines and assistants to answer from directly.
Result
AEO: Answer-first sections scored 65/100 and needs improvement.
Evidence
{
"sectionCount": 15,
"passing": 5,
"failing": [
{
"heading": "Independently Validated Through Top Industry Bug Bounty Programs",
"headingHtml": "<h2 class=\"ds-heading-style-h3\">Independently Validated Through Top Industry Bug Bounty Programs</h2>",
"firstParagraph": "Can an autonomous system really match the depth of human security research?Yes.",
"paragraphHtml": "<p class=\"ds-text-style-regular max-w-40ch\"><em>Can an autonomous system really match the depth of human security research?<br>‍</em><br>Yes.</p>",
"words": 13,
"direct": false,
"issue": "First paragraph is 13 words and does not look like a concise direct answer."
},
{
"heading": "Used By Leading Security Teams",
"headingHtml": "<h2 class=\"ds-heading-style-h5\">Used By Leading Security Teams</h2>",
"firstParagraph": "",
"paragraphHtml": "",
"words": 0,
"direct": false,
"issue": "No paragraph follows this heading."
},
{
"heading": "Differen-tiation",
"headingHtml": "<h2 class=\"ds-heading-style-d1 text-align-center\">Differen<span class=\"diff_mob_hyphen\">-</span>tiation</h2>",
"firstParagraph": "",
"paragraphHtml": "",
"words": 0,
"direct": false,
"issue": "No paragraph follows this heading."
},
{
"heading": "Prove What’s Exploitable",
"headingHtml": "<h3 class=\"ds-heading-style-h5\">Prove What’s Exploitable</h3>",
"firstParagraph": "XBOW independently validates every potential finding through real exploitation. No theoretical risk. No scanner noise. Teams get reproducible proof they can trust and act on with confidence.",
"paragraphHtml": "<p class=\"ds-text-style-regular ds-text-color-secondary\">XBOW independently validates every potential finding through real exploitation. No theoretical risk. No scanner noise. Teams get reproducible proof they can trust and act on with confidence.</p>",
"words": 27,
"direct": false,
"issue": "First paragraph is 27 words and does not look like a concise direct answer."
},
{
"heading": "XBOW Delivers Security Outcomes That Matter",
"headingHtml": "<h2 class=\"ds-heading-style-h3\">XBOW Delivers Security Outcomes That Matter</h2>",
"firstParagraph": "",
"paragraphHtml": "",
"words": 0,
"direct": false,
"issue": "No paragraph follows this heading."
},
{
"heading": "Reduce Real Breach Risk",
"headingHtml": "<h3 class=\"ds-heading-style-h6\">Reduce Real <br>Breach Risk</h3>",
"firstParagraph": "Focus teams on vulnerabilites that are actually exploitable",
"paragraphHtml": "<p class=\"ds-text-style-regular ds-text-color-secondary\">Focus teams on vulnerabilites that are actually exploitable</p>",
"words": 8,
"direct": false,
"issue": "First paragraph is 8 words and does not look like a concise direct answer."
},
{
"heading": "Shorter Path From Test to Fix",
"headingHtml": "<h3 class=\"ds-heading-style-h6\">Shorter Path From Test to Fix</h3>",
"firstParagraph": "Compress the testing cycle with parallel execution, and reproducible findings",
"paragraphHtml": "<p class=\"ds-text-style-regular ds-text-color-secondary\">Compress the testing cycle with parallel execution, and reproducible findings</p>",
"words": 10,
"direct": false,
"issue": "First paragraph is 10 words and does not look like a concise direct answer."
},
{
"heading": "Keep Pace With Modern Development",
"headingHtml": "<h3 class=\"ds-heading-style-h6\">Keep Pace With Modern Development</h3>",
"firstParagraph": "Run deep exploit-validated testing, without slowing releases",
"paragraphHtml": "<p class=\"ds-text-style-regular ds-text-color-secondary\">Run deep exploit-validated testing, without slowing releases</p>",
"words": 7,
"direct": false,
"issue": "First paragraph is 7 words and does not look like a concise direct answer."
},
{
"heading": "Meet Compliance With Confidence",
"headingHtml": "<h3 class=\"ds-heading-style-h6\">Meet Compliance With Confidence</h3>",
"firstParagraph": "Make pentesting more than an annual checkbox",
"paragraphHtml": "<p class=\"ds-text-style-regular ds-text-color-secondary\">Make pentesting more than an annual checkbox</p>",
"words": 7,
"direct": false,
"issue": "First paragraph is 7 words and does not look like a concise direct answer."
},
{
"heading": "Watch XBOW hunt for vulnerabilities in your applications",
"headingHtml": "<h2 class=\"ds-heading-style-h3 max-w-20ch\">Watch XBOW hunt for vulnerabilities
in your applications</h2>",
"firstParagraph": "",
"paragraphHtml": "",
"words": 0,
"direct": false,
"issue": "No paragraph follows this heading."
}
],
"score": 65,
"weight": 28
}GEO, AIO and AEOGEO, AIO & AEOEmerging recommendation
AEO: Question-led structure
AEO: Question-led structure scored 50/100 and needs improvement.
3 Warning
GEO, AIO and AEOGEO, AIO & AEOEmerging recommendation
AEO: Question-led structure
AEO: Question-led structure scored 50/100 and needs improvement.
Needs attention
AEO: Question-led structure
Issue
No question-led h2 sections or FAQ pattern was detected.
Details
Why it matters
Answer engines need concise answers, question-led structure, entity clarity, visible evidence, and trust signals that can be extracted without relying on search-only metadata checks.
Check name
AEO: Question-led structure
Score
50/100
Status
warning
Category
GEO, AIO & AEO
Maturity
Emerging recommendation
Goal
Make page content easy for answer engines and assistants to answer from directly.
Result
AEO: Question-led structure scored 50/100 and needs improvement.
Evidence
{
"h2Count": 7,
"questionH2s": [],
"hasFaq": false,
"score": 50,
"weight": 18
}GEO, AIO and AEOGEO, AIO & AEOEmerging recommendation
GEO: Explanatory content depth
GEO: Explanatory content depth scored 75/100 and needs improvement.
2 Warning
GEO, AIO and AEOGEO, AIO & AEOEmerging recommendation
GEO: Explanatory content depth
GEO: Explanatory content depth scored 75/100 and needs improvement.
Needs attention
GEO: Explanatory content depth
Issue
2 explanatory paragraph(s) could be stronger for citation or AI extraction.
Details
Why it matters
Generative engines favor pages with self-contained answer passages, clear entities, structured data, summaries, FAQ patterns, and crawler-accessible HTML that can be cited without extra interpretation.
Check name
GEO: Explanatory content depth
Score
75/100
Status
warning
Category
GEO, AIO & AEO
Maturity
Emerging recommendation
Goal
Make page content easy for AI answer engines to extract, cite, and attribute.
Result
GEO: Explanatory content depth scored 75/100 and needs improvement.
Evidence
{
"candidatePassages": 2,
"citablePassages": 0,
"failingCandidateParagraphs": [
{
"index": 6,
"heading": "H2: AI Attackers Never Sleep",
"text": "Coding assistants, vibe coding. AI is increasing the quantity of code, but it’s also enabling attackers to operate around the clock. Traditional pentesting can’t keep up. Teams need to manage a growing gap between what was built, what was tested, and what is actually exploitable.",
"words": 47,
"hasEvidence": false,
"reasons": [
"Too short for a citation-ready passage (47 words; target 80-220).",
"Missing a named source, statistic, date, percentage, report, or other evidence signal."
],
"html": "<p class=\"ds-text-style-regular max-w-50ch\">Coding assistants, vibe coding. AI is increasing the quantity of code, but it’s also enabling attackers to operate around the clock. Traditional pentesting can’t keep up. Teams need to manage a growing gap between what was built, what was tested, and what is actually exploitable.</p>"
},
{
"index": 7,
"heading": "H2: Autonomous Offensive Security, Built for Depth, Proof, and Speed",
"text": "XBOW turns penetration testing into a machine-scale offensive security system.The XBOW platform executes targeted attacks autonomously, allowing teams to explore deeper attack paths than traditional pentesting.Every potential finding is independently validated through real exploitation, so teams get clear, reproducible proof without waiting on manual validation cycles — freeing security teams to spend more time o...",
"words": 72,
"hasEvidence": false,
"reasons": [
"Too short for a citation-ready passage (72 words; target 80-220).",
"Missing a named source, statistic, date, percentage, report, or other evidence signal."
],
"html": "<p class=\"ds-text-style-regular max-w-40ch\">XBOW turns penetration testing into a machine-scale offensive security system.<br>The XBOW platform executes targeted attacks autonomously, allowing teams to explore deeper attack paths than traditional pentesting.<br>‍<br>Every potential finding is independently validated through real exploitation, so teams get clear, reproducible proof without waiting on manual validation cycles — freeing security teams to spend more time on investig..."
}
],
"citableParagraphs": [],
"score": 75,
"weight": 18
}GEO, AIO and AEOGEO, AIO & AEOEmerging recommendation
AIO: Answer block readiness
AIO: Answer block readiness scored 65/100 and needs improvement.
2 Warning
GEO, AIO and AEOGEO, AIO & AEOEmerging recommendation
AIO: Answer block readiness
AIO: Answer block readiness scored 65/100 and needs improvement.
Needs attention
AIO: Answer block readiness
Issue
10 section(s) may benefit from a clearer opening answer; this is optional for feature/card sections.
Details
Why it matters
AI Overviews depend on Google-search eligibility, useful visible content, consistent structured data, answer-first sections, trust signals, and preview controls that permit snippets.
Check name
AIO: Answer block readiness
Score
65/100
Status
warning
Category
GEO, AIO & AEO
Maturity
Emerging recommendation
Goal
Make page content eligible and useful for Google AI Overviews and AI Mode extraction.
Result
AIO: Answer block readiness scored 65/100 and needs improvement.
Evidence
{
"sectionCount": 15,
"passing": 5,
"failing": [
{
"heading": "Independently Validated Through Top Industry Bug Bounty Programs",
"headingHtml": "<h2 class=\"ds-heading-style-h3\">Independently Validated Through Top Industry Bug Bounty Programs</h2>",
"firstParagraph": "Can an autonomous system really match the depth of human security research?Yes.",
"paragraphHtml": "<p class=\"ds-text-style-regular max-w-40ch\"><em>Can an autonomous system really match the depth of human security research?<br>‍</em><br>Yes.</p>",
"words": 13,
"direct": false,
"issue": "First paragraph is 13 words and does not look like a concise direct answer."
},
{
"heading": "Used By Leading Security Teams",
"headingHtml": "<h2 class=\"ds-heading-style-h5\">Used By Leading Security Teams</h2>",
"firstParagraph": "",
"paragraphHtml": "",
"words": 0,
"direct": false,
"issue": "No paragraph follows this heading."
},
{
"heading": "Differen-tiation",
"headingHtml": "<h2 class=\"ds-heading-style-d1 text-align-center\">Differen<span class=\"diff_mob_hyphen\">-</span>tiation</h2>",
"firstParagraph": "",
"paragraphHtml": "",
"words": 0,
"direct": false,
"issue": "No paragraph follows this heading."
},
{
"heading": "Prove What’s Exploitable",
"headingHtml": "<h3 class=\"ds-heading-style-h5\">Prove What’s Exploitable</h3>",
"firstParagraph": "XBOW independently validates every potential finding through real exploitation. No theoretical risk. No scanner noise. Teams get reproducible proof they can trust and act on with confidence.",
"paragraphHtml": "<p class=\"ds-text-style-regular ds-text-color-secondary\">XBOW independently validates every potential finding through real exploitation. No theoretical risk. No scanner noise. Teams get reproducible proof they can trust and act on with confidence.</p>",
"words": 27,
"direct": false,
"issue": "First paragraph is 27 words and does not look like a concise direct answer."
},
{
"heading": "XBOW Delivers Security Outcomes That Matter",
"headingHtml": "<h2 class=\"ds-heading-style-h3\">XBOW Delivers Security Outcomes That Matter</h2>",
"firstParagraph": "",
"paragraphHtml": "",
"words": 0,
"direct": false,
"issue": "No paragraph follows this heading."
},
{
"heading": "Reduce Real Breach Risk",
"headingHtml": "<h3 class=\"ds-heading-style-h6\">Reduce Real <br>Breach Risk</h3>",
"firstParagraph": "Focus teams on vulnerabilites that are actually exploitable",
"paragraphHtml": "<p class=\"ds-text-style-regular ds-text-color-secondary\">Focus teams on vulnerabilites that are actually exploitable</p>",
"words": 8,
"direct": false,
"issue": "First paragraph is 8 words and does not look like a concise direct answer."
},
{
"heading": "Shorter Path From Test to Fix",
"headingHtml": "<h3 class=\"ds-heading-style-h6\">Shorter Path From Test to Fix</h3>",
"firstParagraph": "Compress the testing cycle with parallel execution, and reproducible findings",
"paragraphHtml": "<p class=\"ds-text-style-regular ds-text-color-secondary\">Compress the testing cycle with parallel execution, and reproducible findings</p>",
"words": 10,
"direct": false,
"issue": "First paragraph is 10 words and does not look like a concise direct answer."
},
{
"heading": "Keep Pace With Modern Development",
"headingHtml": "<h3 class=\"ds-heading-style-h6\">Keep Pace With Modern Development</h3>",
"firstParagraph": "Run deep exploit-validated testing, without slowing releases",
"paragraphHtml": "<p class=\"ds-text-style-regular ds-text-color-secondary\">Run deep exploit-validated testing, without slowing releases</p>",
"words": 7,
"direct": false,
"issue": "First paragraph is 7 words and does not look like a concise direct answer."
},
{
"heading": "Meet Compliance With Confidence",
"headingHtml": "<h3 class=\"ds-heading-style-h6\">Meet Compliance With Confidence</h3>",
"firstParagraph": "Make pentesting more than an annual checkbox",
"paragraphHtml": "<p class=\"ds-text-style-regular ds-text-color-secondary\">Make pentesting more than an annual checkbox</p>",
"words": 7,
"direct": false,
"issue": "First paragraph is 7 words and does not look like a concise direct answer."
},
{
"heading": "Watch XBOW hunt for vulnerabilities in your applications",
"headingHtml": "<h2 class=\"ds-heading-style-h3 max-w-20ch\">Watch XBOW hunt for vulnerabilities
in your applications</h2>",
"firstParagraph": "",
"paragraphHtml": "",
"words": 0,
"direct": false,
"issue": "No paragraph follows this heading."
}
],
"score": 65,
"weight": 8
}GEO, AIO and AEOGEO, AIO & AEOEmerging recommendation
GEO: Entity clarity
GEO: Entity clarity scored 87/100 and needs improvement.
2 Warning
GEO, AIO and AEOGEO, AIO & AEOEmerging recommendation
GEO: Entity clarity
GEO: Entity clarity scored 87/100 and needs improvement.
Needs attention
GEO: Entity clarity
Issue
Title/H1 terms missing from description: intelligence, hacker, speed, machine.
Details
Why it matters
Generative engines favor pages with self-contained answer passages, clear entities, structured data, summaries, FAQ patterns, and crawler-accessible HTML that can be cited without extra interpretation.
Check name
GEO: Entity clarity
Score
87/100
Status
warning
Category
GEO, AIO & AEO
Maturity
Emerging recommendation
Goal
Make page content easy for AI answer engines to extract, cite, and attribute.
Result
GEO: Entity clarity scored 87/100 and needs improvement.
Evidence
{
"title": "XBOW | Autonomous Offensive Security Platform",
"h1": "The Intelligence of a Hacker at the Speed of a Machine",
"description": "XBOW is an autonomous offensive security platform that delivers the depth and results of a premium pentesting engagement in a fraction of the time.",
"topicOverlap": 0.5555555555555556,
"topicTerms": [
"xbow",
"autonomous",
"offensive",
"security",
"platform",
"intelligence",
"hacker",
"speed",
"machine"
],
"descriptionTerms": [
"xbow",
"autonomous",
"offensive",
"security",
"platform",
"delivers",
"depth",
"results",
"premium",
"pentesting",
"engagement",
"fraction",
"time"
],
"missingFromDescription": [
"intelligence",
"hacker",
"speed",
"machine"
],
"score": 87,
"weight": 28
}GEO, AIO and AEOGEO, AIO & AEOEmerging recommendation
GEO: Extraction-friendly structure
GEO: Extraction-friendly structure scored 85/100 and needs improvement.
2 Warning
GEO, AIO and AEOGEO, AIO & AEOEmerging recommendation
GEO: Extraction-friendly structure
GEO: Extraction-friendly structure scored 85/100 and needs improvement.
Needs attention
GEO: Extraction-friendly structure
Issue
Missing extraction signals: optional top summary / TL;DR / key takeaways block, table with <thead> only if the page already has tabular/comparative data, ordered list only if the page explains a workflow/process, optional visible FAQ or FAQPage schema.
Details
Why it matters
Generative engines favor pages with self-contained answer passages, clear entities, structured data, summaries, FAQ patterns, and crawler-accessible HTML that can be cited without extra interpretation.
Check name
GEO: Extraction-friendly structure
Score
85/100
Status
warning
Category
GEO, AIO & AEO
Maturity
Emerging recommendation
Goal
Make page content easy for AI answer engines to extract, cite, and attribute.
Result
GEO: Extraction-friendly structure scored 85/100 and needs improvement.
Evidence
{
"hasSummary": false,
"tableCount": 0,
"tablesWithHead": 0,
"tablesMissingThead": [],
"orderedLists": 0,
"hasFaq": false,
"definitionPatterns": 6,
"schemaBlocks": 1,
"missingSignals": [
"optional top summary / TL;DR / key takeaways block",
"table with <thead> only if the page already has tabular/comparative data",
"ordered list only if the page explains a workflow/process",
"optional visible FAQ or FAQPage schema"
],
"score": 85,
"weight": 24
}GEO, AIO and AEOGEO, AIO & AEOEmerging recommendation
AIO: Page experience for AIO
AIO: Page experience for AIO scored 80/100 and needs improvement.
2 Warning
GEO, AIO and AEOGEO, AIO & AEOEmerging recommendation
AIO: Page experience for AIO
AIO: Page experience for AIO scored 80/100 and needs improvement.
Needs attention
AIO: Page experience for AIO
Issue
24 image(s) are missing width/height attributes.
Details
Why it matters
AI Overviews depend on Google-search eligibility, useful visible content, consistent structured data, answer-first sections, trust signals, and preview controls that permit snippets.
Check name
AIO: Page experience for AIO
Score
80/100
Status
warning
Category
GEO, AIO & AEO
Maturity
Emerging recommendation
Goal
Make page content eligible and useful for Google AI Overviews and AI Mode extraction.
Result
AIO: Page experience for AIO scored 80/100 and needs improvement.
Evidence
{
"viewportContent": "width=device-width, initial-scale=1",
"visibleWords": 551,
"htmlBytes": 97785,
"imagesMissingDimensions": [
{
"src": "https://cdn.prod.website-files.com/686c11d5bee0151a3f8021bf/69709974cc8aeb0d7c0d42ab_xbow-x-blurred-1-side.avif",
"width": "",
"height": "",
"loading": "lazy",
"html": "<img src=\"https://cdn.prod.website-files.com/686c11d5bee0151a3f8021bf/69709974cc8aeb0d7c0d42ab_xbow-x-blurred-1-side.avif\" loading=\"lazy\" aria-hidden=\"true\" alt class=\"ds_section_bg_x is-sm\" style=\"opacity: 0;\">"
},
{
"src": "https://cdn.prod.website-files.com/686c11d5bee0151a3f8021d6/698f16a2b47fb226f33d5a14_ukg-logo.png",
"width": "",
"height": "",
"loading": "lazy",
"html": "<img src=\"https://cdn.prod.website-files.com/686c11d5bee0151a3f8021d6/698f16a2b47fb226f33d5a14_ukg-logo.png\" loading=\"lazy\" alt class=\"ds_logo_grid_img\">"
},
{
"src": "https://cdn.prod.website-files.com/686c11d5bee0151a3f8021d6/698f1684925a126665c5fa5c_moderna-logo.png",
"width": "",
"height": "",
"loading": "lazy",
"html": "<img src=\"https://cdn.prod.website-files.com/686c11d5bee0151a3f8021d6/698f1684925a126665c5fa5c_moderna-logo.png\" loading=\"lazy\" alt class=\"ds_logo_grid_img\">"
},
{
"src": "https://cdn.prod.website-files.com/686c11d5bee0151a3f8021d6/69ca694555ecd338db16aca5_pingid.png",
"width": "",
"height": "",
"loading": "lazy",
"html": "<img src=\"https://cdn.prod.website-files.com/686c11d5bee0151a3f8021d6/69ca694555ecd338db16aca5_pingid.png\" loading=\"lazy\" alt class=\"ds_logo_grid_img\">"
},
{
"src": "https://cdn.prod.website-files.com/686c11d5bee0151a3f8021d6/69a068fa42d09f97c8cd7e27_samsung-sds-logo.png",
"width": "",
"height": "",
"loading": "lazy",
"html": "<img src=\"https://cdn.prod.website-files.com/686c11d5bee0151a3f8021d6/69a068fa42d09f97c8cd7e27_samsung-sds-logo.png\" loading=\"lazy\" alt class=\"ds_logo_grid_img\">"
},
{
"src": "https://cdn.prod.website-files.com/686c11d5bee0151a3f8021d6/698f16afef10bc55139cdcb2_five9-logo.png",
"width": "",
"height": "",
"loading": "lazy",
"html": "<img src=\"https://cdn.prod.website-files.com/686c11d5bee0151a3f8021d6/698f16afef10bc55139cdcb2_five9-logo.png\" loading=\"lazy\" alt class=\"ds_logo_grid_img\">"
},
{
"src": "https://cdn.prod.website-files.com/686c11d5bee0151a3f8021d6/698f16c22f2b3c5cf7025178_tyler-tech.png",
"width": "",
"height": "",
"loading": "lazy",
"html": "<img src=\"https://cdn.prod.website-files.com/686c11d5bee0151a3f8021d6/698f16c22f2b3c5cf7025178_tyler-tech.png\" loading=\"lazy\" alt class=\"ds_logo_grid_img\">"
},
{
"src": "https://cdn.prod.website-files.com/686c11d5bee0151a3f8021d6/6a0dde53a290ea1179eb58b5_nexon-logo-02.jpg",
"width": "",
"height": "",
"loading": "lazy",
"html": "<img src=\"https://cdn.prod.website-files.com/686c11d5bee0151a3f8021d6/6a0dde53a290ea1179eb58b5_nexon-logo-02.jpg\" loading=\"lazy\" alt class=\"ds_logo_grid_img\">"
},
{
"src": "https://cdn.prod.website-files.com/686c11d5bee0151a3f8021d6/698f167b8d72df0a604c3bc6_seznam-logo.png",
"width": "",
"height": "",
"loading": "lazy",
"html": "<img src=\"https://cdn.prod.website-files.com/686c11d5bee0151a3f8021d6/698f167b8d72df0a604c3bc6_seznam-logo.png\" loading=\"lazy\" alt class=\"ds_logo_grid_img\">"
},
{
"src": "https://cdn.prod.website-files.com/686c11d5bee0151a3f8021bf/69707fcc309f2cc9e05cba73_xbow-new-hero-bg.avif",
"width": "",
"height": "",
"loading": "lazy",
"html": "<img src=\"https://cdn.prod.website-files.com/686c11d5bee0151a3f8021bf/69707fcc309f2cc9e05cba73_xbow-new-hero-bg.avif\" loading=\"lazy\" alt class=\"home_hero_bg_img\" style=\"translate: none; rotate: none; scale: none; opacity: 0; transform: translate(0px, 29.9988%);\">"
},
{
"src": "https://cdn.prod.website-files.com/686c11d5bee0151a3f8021bf/69722f246eada64a60f1c478_Frame%202225423.avif",
"width": "",
"height": "",
"loading": "lazy",
"html": "<img src=\"https://cdn.prod.website-files.com/686c11d5bee0151a3f8021bf/69722f246eada64a60f1c478_Frame%202225423.avif\" loading=\"lazy\" sizes=\"(max-width: 479px) 93vw, (max-width: 767px) 96vw, (max-width: 991px) 97vw, (max-width: 1987px) 98vw, 1948px\" srcset=\"https://cdn.prod.website-files.com/686c11d5bee0151a3f8021bf/69722f246eada64a60f1c478_Frame%202225423-p-500.png 500w, https://cdn.prod.website-files.com/686c11d5bee0151a3f8021bf/69722f246eada64a60f1c478_Frame%202225423-p-800.png 800w, https:/..."
},
{
"src": "https://cdn.prod.website-files.com/686c11d5bee0151a3f8021bf/696e4a7517f1b290e5b68596_xbow-solution.svg",
"width": "",
"height": "",
"loading": "lazy",
"html": "<img src=\"https://cdn.prod.website-files.com/686c11d5bee0151a3f8021bf/696e4a7517f1b290e5b68596_xbow-solution.svg\" loading=\"lazy\" alt class=\"full-width\">"
},
{
"src": "https://cdn.prod.website-files.com/686c11d5bee0151a3f8021bf/697712e2b64335e9c4b2dde4_Frame%202147225369.webp",
"width": "",
"height": "",
"loading": "lazy",
"html": "<img src=\"https://cdn.prod.website-files.com/686c11d5bee0151a3f8021bf/697712e2b64335e9c4b2dde4_Frame%202147225369.webp\" loading=\"lazy\" sizes=\"100vw\" srcset=\"https://cdn.prod.website-files.com/686c11d5bee0151a3f8021bf/697712e2b64335e9c4b2dde4_Frame%202147225369-p-500.png 500w, https://cdn.prod.website-files.com/686c11d5bee0151a3f8021bf/697712e2b64335e9c4b2dde4_Frame%202147225369-p-800.png 800w, https://cdn.prod.website-files.com/686c11d5bee0151a3f8021bf/697712e2b64335e9c4b2dde4_Frame%202147225..."
},
{
"src": "https://cdn.prod.website-files.com/686c11d5bee0151a3f8021bf/697712e2d6e6c1b84af00fe0_Frame%202147225369-1.webp",
"width": "",
"height": "",
"loading": "lazy",
"html": "<img src=\"https://cdn.prod.website-files.com/686c11d5bee0151a3f8021bf/697712e2d6e6c1b84af00fe0_Frame%202147225369-1.webp\" loading=\"lazy\" sizes=\"100vw\" srcset=\"https://cdn.prod.website-files.com/686c11d5bee0151a3f8021bf/697712e2d6e6c1b84af00fe0_Frame%202147225369-1-p-500.png 500w, https://cdn.prod.website-files.com/686c11d5bee0151a3f8021bf/697712e2d6e6c1b84af00fe0_Frame%202147225369-1.webp 897w\" alt>"
},
{
"src": "https://cdn.prod.website-files.com/686c11d5bee0151a3f8021bf/697712e23923a91a4957ef85_Frame%202147225369-2.webp",
"width": "",
"height": "",
"loading": "lazy",
"html": "<img src=\"https://cdn.prod.website-files.com/686c11d5bee0151a3f8021bf/697712e23923a91a4957ef85_Frame%202147225369-2.webp\" loading=\"lazy\" sizes=\"100vw\" srcset=\"https://cdn.prod.website-files.com/686c11d5bee0151a3f8021bf/697712e23923a91a4957ef85_Frame%202147225369-2-p-500.png 500w, https://cdn.prod.website-files.com/686c11d5bee0151a3f8021bf/697712e23923a91a4957ef85_Frame%202147225369-2.webp 897w\" alt>"
},
{
"src": "https://cdn.prod.website-files.com/686c11d5bee0151a3f8021bf/697712e2bc1876574c66814c_Frame%202147225369-3.webp",
"width": "",
"height": "",
"loading": "lazy",
"html": "<img src=\"https://cdn.prod.website-files.com/686c11d5bee0151a3f8021bf/697712e2bc1876574c66814c_Frame%202147225369-3.webp\" loading=\"lazy\" sizes=\"100vw\" srcset=\"https://cdn.prod.website-files.com/686c11d5bee0151a3f8021bf/697712e2bc1876574c66814c_Frame%202147225369-3-p-500.webp 500w, https://cdn.prod.website-files.com/686c11d5bee0151a3f8021bf/697712e2bc1876574c66814c_Frame%202147225369-3-p-800.webp 800w, https://cdn.prod.website-files.com/686c11d5bee0151a3f8021bf/697712e2bc1876574c66814c_Frame%2..."
},
{
"src": "https://cdn.prod.website-files.com/686c11d5bee0151a3f8021bf/696e50b9a11a002bc4b74f81_cases-1.avif",
"width": "",
"height": "",
"loading": "lazy",
"html": "<img src=\"https://cdn.prod.website-files.com/686c11d5bee0151a3f8021bf/696e50b9a11a002bc4b74f81_cases-1.avif\" loading=\"lazy\" alt class=\"full-width\">"
},
{
"src": "https://cdn.prod.website-files.com/686c11d5bee0151a3f8021bf/696e50b9c4853940c342e6c4_cases-2.avif",
"width": "",
"height": "",
"loading": "lazy",
"html": "<img src=\"https://cdn.prod.website-files.com/686c11d5bee0151a3f8021bf/696e50b9c4853940c342e6c4_cases-2.avif\" loading=\"lazy\" sizes=\"100vw\" srcset=\"https://cdn.prod.website-files.com/686c11d5bee0151a3f8021bf/696e50b9c4853940c342e6c4_cases-2-p-500.png 500w, https://cdn.prod.website-files.com/686c11d5bee0151a3f8021bf/696e50b9c4853940c342e6c4_cases-2.avif 800w\" alt class=\"full-width\">"
},
{
"src": "https://cdn.prod.website-files.com/686c11d5bee0151a3f8021bf/6971cdf8388ee0df40a37b63_Frame%2021472252754.avif",
"width": "",
"height": "",
"loading": "lazy",
"html": "<img src=\"https://cdn.prod.website-files.com/686c11d5bee0151a3f8021bf/6971cdf8388ee0df40a37b63_Frame%2021472252754.avif\" loading=\"lazy\" alt class=\"full-width\">"
},
{
"src": "https://cdn.prod.website-files.com/686c11d5bee0151a3f8021bf/696e50b902ad6e609db20cb6_cases-3.avif",
"width": "",
"height": "",
"loading": "lazy",
"html": "<img src=\"https://cdn.prod.website-files.com/686c11d5bee0151a3f8021bf/696e50b902ad6e609db20cb6_cases-3.avif\" loading=\"lazy\" alt class=\"full-width\">"
},
{
"src": "https://cdn.prod.website-files.com/686c11d5bee0151a3f8021bf/696e4f8a44fc807614eaa149_xbow-x-bg-2.avif",
"width": "",
"height": "",
"loading": "lazy",
"html": "<img class=\"ds_cases_section_bg_x\" src=\"https://cdn.prod.website-files.com/686c11d5bee0151a3f8021bf/696e4f8a44fc807614eaa149_xbow-x-bg-2.avif\" alt aria-hidden=\"true\" sizes=\"100vw\" loading=\"lazy\" srcset=\"https://cdn.prod.website-files.com/686c11d5bee0151a3f8021bf/696e4f8a44fc807614eaa149_xbow-x-bg-2-p-500.png 500w, https://cdn.prod.website-files.com/686c11d5bee0151a3f8021bf/696e4f8a44fc807614eaa149_xbow-x-bg-2.avif 2024w\">"
},
{
"src": "https://cdn.prod.website-files.com/686c11d5bee0151a3f8021bf/6939dd774ab98d1c1477a4e8_4a2fc0531add96b3d21f1f9faf953251_VideoframeYoutube.avif",
"width": "",
"height": "",
"loading": "lazy",
"html": "<img src=\"https://cdn.prod.website-files.com/686c11d5bee0151a3f8021bf/6939dd774ab98d1c1477a4e8_4a2fc0531add96b3d21f1f9faf953251_VideoframeYoutube.avif\" loading=\"lazy\" alt class=\"ds_lightbox_thumbnail\">"
},
{
"src": "https://cdn.prod.website-files.com/686c11d5bee0151a3f8021bf/6972297254d1225b4a24decb_Frame%20214724625068.avif",
"width": "",
"height": "",
"loading": "lazy",
"html": "<img src=\"https://cdn.prod.website-files.com/686c11d5bee0151a3f8021bf/6972297254d1225b4a24decb_Frame%20214724625068.avif\" loading=\"lazy\" sizes=\"100vw\" srcset=\"https://cdn.prod.website-files.com/686c11d5bee0151a3f8021bf/6972297254d1225b4a24decb_Frame%20214724625068-p-500.avif 500w, https://cdn.prod.website-files.com/686c11d5bee0151a3f8021bf/6972297254d1225b4a24decb_Frame%20214724625068-p-800.avif 800w, https://cdn.prod.website-files.com/686c11d5bee0151a3f8021bf/6972297254d1225b4a24decb_Frame%2..."
},
{
"src": "https://cdn.prod.website-files.com/686c11d5bee0151a3f8021bf/696a2609ed3460d6b0fbcfdf_xbow-footer-bg%20(2).avif",
"width": "",
"height": "",
"loading": "lazy",
"html": "<img src=\"https://cdn.prod.website-files.com/686c11d5bee0151a3f8021bf/696a2609ed3460d6b0fbcfdf_xbow-footer-bg%20(2).avif\" loading=\"lazy\" alt class=\"ds_footer_bg\">"
}
],
"possibleDialogs": [],
"score": 80,
"weight": 10
}GEO, AIO and AEOGEO, AIO & AEOEmerging recommendation
AEO: Answer intent coverage
AEO: Answer intent coverage scored 70/100 and needs improvement.
1 Warning
GEO, AIO and AEOGEO, AIO & AEOEmerging recommendation
AEO: Answer intent coverage
AEO: Answer intent coverage scored 70/100 and needs improvement.
Needs attention
AEO: Answer intent coverage
Issue
Missing likely AI Overview intent sections: what, how, cost, compare.
Details
Why it matters
Answer engines need concise answers, question-led structure, entity clarity, visible evidence, and trust signals that can be extracted without relying on search-only metadata checks.
Check name
AEO: Answer intent coverage
Score
70/100
Status
warning
Category
GEO, AIO & AEO
Maturity
Emerging recommendation
Goal
Make page content easy for answer engines and assistants to answer from directly.
Result
AEO: Answer intent coverage scored 70/100 and needs improvement.
Evidence
{
"headings": [
{
"text": "Independently Validated Through Top Industry Bug Bounty Programs",
"html": "<h2 class=\"ds-heading-style-h3\">Independently Validated Through Top Industry Bug Bounty Programs</h2>"
},
{
"text": "Used By Leading Security Teams",
"html": "<h2 class=\"ds-heading-style-h5\">Used By Leading Security Teams</h2>"
},
{
"text": "AI Attackers Never Sleep",
"html": "<h2 class=\"ds-heading-style-h3\">AI Attackers Never Sleep</h2>"
},
{
"text": "Autonomous Offensive Security, Built for Depth, Proof, and Speed",
"html": "<h2 class=\"ds-heading-style-h3\">Autonomous Offensive Security, Built for Depth, Proof, and Speed</h2>"
},
{
"text": "Differen-tiation",
"html": "<h2 class=\"ds-heading-style-d1 text-align-center\">Differen<span class=\"diff_mob_hyphen\">-</span>tiation</h2>"
},
{
"text": "XBOW Delivers Security Outcomes That Matter",
"html": "<h2 class=\"ds-heading-style-h3\">XBOW Delivers Security Outcomes That Matter</h2>"
},
{
"text": "Watch XBOW hunt for vulnerabilities in your applications",
"html": "<h2 class=\"ds-heading-style-h3 max-w-20ch\">Watch XBOW hunt for vulnerabilities
in your applications</h2>"
}
],
"expected": [
{
"id": "what",
"label": "What is XBOW?",
"pattern": {}
},
{
"id": "how",
"label": "How does XBOW work?",
"pattern": {}
},
{
"id": "benefits",
"label": "Why use XBOW?",
"pattern": {}
},
{
"id": "cost",
"label": "Is XBOW free or paid?",
"pattern": {}
},
{
"id": "compare",
"label": "How does XBOW compare with alternatives?",
"pattern": {}
}
],
"missing": [
{
"id": "what",
"label": "What is XBOW?",
"pattern": {}
},
{
"id": "how",
"label": "How does XBOW work?",
"pattern": {}
},
{
"id": "cost",
"label": "Is XBOW free or paid?",
"pattern": {}
},
{
"id": "compare",
"label": "How does XBOW compare with alternatives?",
"pattern": {}
}
],
"score": 70,
"weight": 8
}GEO, AIO and AEOGEO, AIO & AEOEmerging recommendation
AEO: Entity and definition clarity
AEO: Entity and definition clarity scored 89/100 and needs improvement.
1 Warning
GEO, AIO and AEOGEO, AIO & AEOEmerging recommendation
AEO: Entity and definition clarity
AEO: Entity and definition clarity scored 89/100 and needs improvement.
Needs attention
AEO: Entity and definition clarity
Issue
Entity or definition gaps: intelligence, hacker, speed, machine.
Details
Why it matters
Answer engines need concise answers, question-led structure, entity clarity, visible evidence, and trust signals that can be extracted without relying on search-only metadata checks.
Check name
AEO: Entity and definition clarity
Score
89/100
Status
warning
Category
GEO, AIO & AEO
Maturity
Emerging recommendation
Goal
Make page content easy for answer engines and assistants to answer from directly.
Result
AEO: Entity and definition clarity scored 89/100 and needs improvement.
Evidence
{
"title": "XBOW | Autonomous Offensive Security Platform",
"h1": "The Intelligence of a Hacker at the Speed of a Machine",
"description": "XBOW is an autonomous offensive security platform that delivers the depth and results of a premium pentesting engagement in a fraction of the time.",
"topicOverlap": 0.5555555555555556,
"definitionCount": 6,
"topicTerms": [
"xbow",
"autonomous",
"offensive",
"security",
"platform",
"intelligence",
"hacker",
"speed",
"machine"
],
"descriptionTerms": [
"xbow",
"autonomous",
"offensive",
"security",
"platform",
"delivers",
"depth",
"results",
"premium",
"pentesting",
"engagement",
"fraction",
"time"
],
"missingFromDescription": [
"intelligence",
"hacker",
"speed",
"machine"
],
"score": 89,
"weight": 18
}Agent Ease of UseAPIEmerging recommendation
AI context endpoint
AI context endpoint is informational for this page.
Informational
Agent Ease of UseAPIEmerging recommendation
AI context endpoint
AI context endpoint is informational for this page.
Needs attention
AI context endpoint
Issue
AI context endpoint is informational for this page.
Why it matters
A context endpoint gives agents a small, low-latency summary of product purpose, safe actions, and canonical machine-readable resources without scraping the whole site.
Check name
AI context endpoint
Score
100/100
Status
informational
Category
API
Maturity
Emerging recommendation
Goal
Expose a compact API context endpoint agents can fetch before deciding which public API or discovery resource to use.
Result
AI context endpoint is informational for this page.
Validation steps
Fetch to find resource
AI context endpoint was not found at the expected path.
Evidence
{
"steps": [
{
"id": "fetch",
"title": "Fetch to find resource",
"status": "informational",
"evidence": {
"checked": [
{
"path": "/api/ai/context",
"statusCode": 404,
"contentType": "text/html; charset=utf-8",
"length": 58649
},
{
"path": "/api/context",
"statusCode": 404,
"contentType": "text/html; charset=utf-8",
"length": 58649
},
{
"path": "/context",
"statusCode": 404,
"contentType": "text/html; charset=utf-8",
"length": 58649
}
]
},
"issue": "AI context endpoint was not found at the expected path.",
"howToFix": "Publish a concise JSON or Markdown AI context endpoint describing the product, public actions, and machine-readable resources."
}
]
}GEO, AIO and AEOGEO, AIO & AEOEmerging recommendation
AIO: Query intent coverage
AIO: Query intent coverage is informational for this page.
Informational
GEO, AIO and AEOGEO, AIO & AEOEmerging recommendation
AIO: Query intent coverage
AIO: Query intent coverage is informational for this page.
Needs attention
AIO: Query intent coverage
Issue
Missing likely AI Overview intent sections: what, how, cost, compare.
Details
Why it matters
AI Overviews depend on Google-search eligibility, useful visible content, consistent structured data, answer-first sections, trust signals, and preview controls that permit snippets.
Check name
AIO: Query intent coverage
Score
70/100
Status
informational
Category
GEO, AIO & AEO
Maturity
Emerging recommendation
Goal
Make page content eligible and useful for Google AI Overviews and AI Mode extraction.
Result
AIO: Query intent coverage is informational for this page.
Evidence
{
"headings": [
{
"text": "Independently Validated Through Top Industry Bug Bounty Programs",
"html": "<h2 class=\"ds-heading-style-h3\">Independently Validated Through Top Industry Bug Bounty Programs</h2>"
},
{
"text": "Used By Leading Security Teams",
"html": "<h2 class=\"ds-heading-style-h5\">Used By Leading Security Teams</h2>"
},
{
"text": "AI Attackers Never Sleep",
"html": "<h2 class=\"ds-heading-style-h3\">AI Attackers Never Sleep</h2>"
},
{
"text": "Autonomous Offensive Security, Built for Depth, Proof, and Speed",
"html": "<h2 class=\"ds-heading-style-h3\">Autonomous Offensive Security, Built for Depth, Proof, and Speed</h2>"
},
{
"text": "Differen-tiation",
"html": "<h2 class=\"ds-heading-style-d1 text-align-center\">Differen<span class=\"diff_mob_hyphen\">-</span>tiation</h2>"
},
{
"text": "XBOW Delivers Security Outcomes That Matter",
"html": "<h2 class=\"ds-heading-style-h3\">XBOW Delivers Security Outcomes That Matter</h2>"
},
{
"text": "Watch XBOW hunt for vulnerabilities in your applications",
"html": "<h2 class=\"ds-heading-style-h3 max-w-20ch\">Watch XBOW hunt for vulnerabilities
in your applications</h2>"
}
],
"expected": [
{
"id": "what",
"label": "What is XBOW?",
"pattern": {}
},
{
"id": "how",
"label": "How does XBOW work?",
"pattern": {}
},
{
"id": "benefits",
"label": "Why use XBOW?",
"pattern": {}
},
{
"id": "cost",
"label": "Is XBOW free or paid?",
"pattern": {}
},
{
"id": "compare",
"label": "How does XBOW compare with alternatives?",
"pattern": {}
}
],
"missing": [
{
"id": "what",
"label": "What is XBOW?",
"pattern": {}
},
{
"id": "how",
"label": "How does XBOW work?",
"pattern": {}
},
{
"id": "cost",
"label": "Is XBOW free or paid?",
"pattern": {}
},
{
"id": "compare",
"label": "How does XBOW compare with alternatives?",
"pattern": {}
}
],
"score": 70,
"weight": 4
}GEO, AIO and AEOGEO, AIO & AEOEmerging recommendation
GEO: Q&A and FAQ opportunities
GEO: Q&A and FAQ opportunities is informational for this page.
Informational
GEO, AIO and AEOGEO, AIO & AEOEmerging recommendation
GEO: Q&A and FAQ opportunities
GEO: Q&A and FAQ opportunities is informational for this page.
Needs attention
GEO: Q&A and FAQ opportunities
Issue
7 h2 heading(s) are not phrased as questions; this is optional and only useful where Q&A wording is natural. No visible FAQ or FAQPage schema was detected; this is optional unless the page answers common questions.
Details
Why it matters
Generative engines favor pages with self-contained answer passages, clear entities, structured data, summaries, FAQ patterns, and crawler-accessible HTML that can be cited without extra interpretation.
Check name
GEO: Q&A and FAQ opportunities
Score
75/100
Status
informational
Category
GEO, AIO & AEO
Maturity
Emerging recommendation
Goal
Make page content easy for AI answer engines to extract, cite, and attribute.
Result
GEO: Q&A and FAQ opportunities is informational for this page.
Evidence
{
"h2Count": 7,
"questionH2s": 0,
"hasFaq": false,
"nonQuestionH2s": [
{
"index": 1,
"text": "Independently Validated Through Top Industry Bug Bounty Programs",
"isQuestion": false,
"html": "<h2 class=\"ds-heading-style-h3\">Independently Validated Through Top Industry Bug Bounty Programs</h2>"
},
{
"index": 2,
"text": "Used By Leading Security Teams",
"isQuestion": false,
"html": "<h2 class=\"ds-heading-style-h5\">Used By Leading Security Teams</h2>"
},
{
"index": 3,
"text": "AI Attackers Never Sleep",
"isQuestion": false,
"html": "<h2 class=\"ds-heading-style-h3\">AI Attackers Never Sleep</h2>"
},
{
"index": 4,
"text": "Autonomous Offensive Security, Built for Depth, Proof, and Speed",
"isQuestion": false,
"html": "<h2 class=\"ds-heading-style-h3\">Autonomous Offensive Security, Built for Depth, Proof, and Speed</h2>"
},
{
"index": 5,
"text": "Differen-tiation",
"isQuestion": false,
"html": "<h2 class=\"ds-heading-style-d1 text-align-center\">Differen<span class=\"diff_mob_hyphen\">-</span>tiation</h2>"
},
{
"index": 6,
"text": "XBOW Delivers Security Outcomes That Matter",
"isQuestion": false,
"html": "<h2 class=\"ds-heading-style-h3\">XBOW Delivers Security Outcomes That Matter</h2>"
},
{
"index": 7,
"text": "Watch XBOW hunt for vulnerabilities in your applications",
"isQuestion": false,
"html": "<h2 class=\"ds-heading-style-h3 max-w-20ch\">Watch XBOW hunt for vulnerabilities
in your applications</h2>"
}
],
"score": 75,
"weight": 4
}AI DiscoverabilityDiscoverabilityEstablished
IndexNow key
IndexNow key is informational for this page.
Informational
AI DiscoverabilityDiscoverabilityEstablished
IndexNow key
IndexNow key is informational for this page.
Needs attention
IndexNow key
Issue
IndexNow key is informational for this page.
Why it matters
IndexNow lets sites notify participating search engines about changed URLs, but ownership verification requires a UTF-8 key file whose filename matches the key.
Check name
IndexNow key
Score
100/100
Status
informational
Category
Discoverability
Maturity
Established
Goal
Verify that IndexNow ownership key placement is detectable when the site advertises it.
Result
IndexNow key is informational for this page.
Validation steps
Find advertised IndexNow key location
No IndexNow key location was advertised in HTML, Link headers, or robots.txt.
Fetch and validate IndexNow key file
No discoverable IndexNow key file was found.
Evidence
{
"steps": [
{
"id": "advertised-location",
"title": "Find advertised IndexNow key location",
"status": "informational",
"evidence": {
"advertised": []
},
"issue": "No IndexNow key location was advertised in HTML, Link headers, or robots.txt.",
"howToFix": "Advertise the key location with robots.txt IndexNow-Key, rel=\"indexnow-key\", or meta name=\"indexnow-key-location\" if you want scanners to verify it."
},
{
"id": "fetch-key",
"title": "Fetch and validate IndexNow key file",
"status": "informational",
"evidence": {
"advertised": [],
"checked": []
},
"issue": "No discoverable IndexNow key file was found.",
"howToFix": "Host a UTF-8 text file named {key}.txt using a 32-character hexadecimal key whose body exactly matches the key."
}
]
}Performance and AccessibilityAccessibilityBrowser audit
Background and foreground colors do not have a sufficient contrast ratio.
50 Fail
Performance and AccessibilityAccessibilityBrowser audit
Background and foreground colors do not have a sufficient contrast ratio.
Check name
Background and foreground colors do not have a sufficient contrast ratio.
Score
0/100
Status
fail
Device
desktop
Category
Accessibility
Fix guidance
Low-contrast text is difficult or impossible for many users to read. [Learn how to provide sufficient color contrast](https://dequeuniversity.com/rules/axe/4.11/color-contrast).
References
https://web.dev/learn/accessibility/Evidence
{
"description": "Low-contrast text is difficult or impossible for many users to read. [Learn how to provide sufficient color contrast](https://dequeuniversity.com/rules/axe/4.11/color-contrast)."
}Performance and AccessibilityAccessibilityBrowser audit
Elements use prohibited ARIA attributes
50 Fail
Performance and AccessibilityAccessibilityBrowser audit
Elements use prohibited ARIA attributes
Check name
Elements use prohibited ARIA attributes
Score
0/100
Status
fail
Device
desktop
Category
Accessibility
Fix guidance
Using ARIA attributes in roles where they are prohibited can mean that important information is not communicated to users of assistive technologies. [Learn more about prohibited ARIA roles](https://dequeuniversity.com/rules/axe/4.11/aria-prohibited-attr).
References
https://web.dev/learn/accessibility/Evidence
{
"description": "Using ARIA attributes in roles where they are prohibited can mean that important information is not communicated to users of assistive technologies. [Learn more about prohibited ARIA roles](https://dequeuniversity.com/rules/axe/4.11/aria-prohibited-attr)."
}Performance and AccessibilityPerformanceBrowser audit
Links do not have a discernible name
20 Fail
Performance and AccessibilityPerformanceBrowser audit
Links do not have a discernible name
Check name
Links do not have a discernible name
Score
0/100
Status
fail
Device
desktop
Category
Performance
Fix guidance
Link text (and alternate text for images, when used as links) that is discernible, unique, and focusable improves the navigation experience for screen reader users. [Learn how to make links accessible](https://dequeuniversity.com/rules/axe/4.11/link-name).
References
https://web.dev/learn/performance/Evidence
{
"description": "Link text (and alternate text for images, when used as links) that is discernible, unique, and focusable improves the navigation experience for screen reader users. [Learn how to make links accessible](https://dequeuniversity.com/rules/axe/4.11/link-name)."
}Performance and AccessibilityPerformanceBrowser audit
Network dependency tree
20 Fail
Performance and AccessibilityPerformanceBrowser audit
Network dependency tree
Check name
Network dependency tree
Score
0/100
Status
fail
Device
desktop
Category
Performance
Fix guidance
[Avoid chaining critical requests](https://developer.chrome.com/docs/performance/insights/network-dependency-tree) by reducing the length of chains, reducing the download size of resources, or deferring the download of unnecessary resources to improve page load.
References
https://web.dev/learn/performance/Evidence
{
"description": "[Avoid chaining critical requests](https://developer.chrome.com/docs/performance/insights/network-dependency-tree) by reducing the length of chains, reducing the download size of resources, or deferring the download of unnecessary resources to improve page load."
}Performance and AccessibilityPerformanceBrowser audit
Use efficient cache lifetimes
20 Fail
Performance and AccessibilityPerformanceBrowser audit
Use efficient cache lifetimes
Check name
Use efficient cache lifetimes
Score
0/100
Status
fail
Device
desktop
Category
Performance
Estimated savings
Est savings of 176 KiB
Fix guidance
A long cache lifetime can speed up repeat visits to your page. [Learn more about caching](https://developer.chrome.com/docs/performance/insights/cache).
References
https://web.dev/learn/performance/Evidence
{
"displayValue": "Est savings of 176 KiB",
"description": "A long cache lifetime can speed up repeat visits to your page. [Learn more about caching](https://developer.chrome.com/docs/performance/insights/cache)."
}Performance and AccessibilityPerformanceBrowser audit
Legacy JavaScript
10 Warning
Performance and AccessibilityPerformanceBrowser audit
Legacy JavaScript
Check name
Legacy JavaScript
Score
50/100
Status
warning
Device
desktop
Category
Performance
Estimated savings
Est savings of 1 KiB
Fix guidance
Polyfills and transforms enable older browsers to use new JavaScript features. However, many aren't necessary for modern browsers. Consider modifying your JavaScript build process to not transpile [Baseline](https://web.dev/articles/baseline-and-polyfills) features, unless you know you must support older browsers. [Learn why most sites can deploy ES6+ code without transpiling](https://developer.chrome.com/docs/performance/insights/legacy-javascript)
References
https://web.dev/learn/performance/Evidence
{
"displayValue": "Est savings of 1 KiB",
"description": "Polyfills and transforms enable older browsers to use new JavaScript features. However, many aren't necessary for modern browsers. Consider modifying your JavaScript build process to not transpile [Baseline](https://web.dev/articles/baseline-and-polyfills) features, unless you know you must support older browsers. [Learn why most sites can deploy ES6+ code without transpiling](https://developer.chrome.com/docs/performance/insights/legacy-javascript)"
}Performance and AccessibilityPerformanceBrowser audit
Loading performance
3 Fail
Performance and AccessibilityPerformanceBrowser audit
Loading performance
Check name
Loading performance
Score
83/100
Status
fail
Device
desktop
Category
Performance
Fix guidance
Review the grouped loading performance checks and improve the failing sub-checks listed in evidence.
References
https://web.dev/learn/performance/Evidence
{
"checks": [
{
"id": "speed-index",
"title": "Speed Index",
"score": 85,
"displayValue": "1.4 s",
"numericValue": 1432.5609545114248
},
{
"id": "server-response-time",
"title": "Initial server response time was short",
"score": 100,
"displayValue": "Root document took 0 ms",
"numericValue": 4
},
{
"id": "total-blocking-time",
"title": "Total Blocking Time",
"score": 79,
"displayValue": "200 ms",
"numericValue": 203.00000000000045
},
{
"id": "interactive",
"title": "Time to Interactive",
"score": 86,
"displayValue": "2.7 s",
"numericValue": 2658.894706895483
},
{
"id": "first-contentful-paint",
"title": "First Contentful Paint",
"score": 99,
"displayValue": "0.6 s",
"numericValue": 581.0132335918584
},
{
"id": "network-rtt",
"title": "Network Round Trip Times",
"score": 100,
"displayValue": "10 ms",
"numericValue": 13.617809999999999
},
{
"id": "largest-contentful-paint",
"title": "Largest Contentful Paint",
"score": 43,
"displayValue": "2.6 s",
"numericValue": 2616.988414142801
},
{
"id": "max-potential-fid",
"title": "Max Potential First Input Delay",
"score": 69,
"displayValue": "190 ms",
"numericValue": 194.00000000000045
}
]
}Fix with MCP or CLI
Use this report as the handoff into remediation. Generate a coding-agent prompt with the failing checks attached, or jump to the MCP and CLI setup docs before your next rescan.
Score history
Public scan score over time
Public reports for this website origin. Select any point or report link to open that canonical report.
| Scan date | Score | Readiness | Report |
|---|---|---|---|
| 57/100 | Level 3, Bot-Aware | Current report |