SiteVerdict — AI Search Readiness Checker
Pricing
Pay per event
Check if ChatGPT, Claude, Perplexity & Google AI Overviews can find and cite your site: robots.txt matrix for 20 AI bots, llms.txt, CDN blocking signals, JS-only content, structured data and trust signals. Scores 0-100 with copy-paste fixes.
URL privacy: the dataset, reports, OUTPUT, monitoring snapshots, alerts and the run log show URLs without query strings, fragments or credentials (?[redacted]); each row has a urlHash (first 16 hex characters of the SHA-256 of the checked URL) to match rows to your input. Same-page links (#anchor, empty or same-query links) are left out of the llms.txt draft and link lists, so the query string of the URL you entered is not repeated there.
Every start URL is checked before anything is loaded (IP literals in every encoding, internal names, DNS answer); a private, loopback, link-local, cloud-metadata or internal target gets an error row "refused: private-network protection; not charged" and is never contacted or charged.
All plain HTTP fetches (pages, robots.txt, sitemaps, llms.txt, access-log download, IP-range lists) use a DNS-pinned transport that re-checks every redirect hop; the same applies to Chromium (rendering, screenshots, PDF logos), which now runs through a local checking proxy (shared SiteVerdict guard, src/ssrf-guard.ts + src/netguard.ts).
webhookUrl, slackWebhookUrl, reportLogoUrl and accessLogUrl must resolve to public hosts; otherwise they are ignored with a warning. Webhooks never follow redirects.
OUTPUT gains privateNetworkProtection (refused targets, browser requests blocked). No change to scoring or pricing.
url / inputUrl, per-page url, OUTPUT.results[].url, reports, monitoring snapshots, alerts and log lines no longer contain the query string, fragment or credentials of the URL you entered: they become ?[redacted] / #[redacted], paths are capped at 120 characters. New urlHash field (first 16 hex of SHA-256 of the full checked URL) as a join key. Monitoring baselines are still keyed by the full URL, so existing baselines keep matching.og:url and canonical snippets use the page address without its query string.OUTPUT.privateNetworkProtection.browserRequestsBlocked is now filled in (it was read after the browser had closed and was always empty).defaultMemoryMbytes (was 4096 MB (no key set); peak 260 MB). Measured on the example input: same output, see the public-15 remediation log. You can still choose more memory per run. No change to inputs, outputs or pricing.Flagship upgrade. Benchmarked on 25 public sites; see BENCHMARK.md.
Removed (compliance)
AI crawlers
CDN / WAF AI blocking (new honest model)
confirmed / likely / possible / unlikely, built from evidence:
AI usage preferences (new)
Raw vs JavaScript-rendered (rewritten)
Entity and structured data
{"@id"} reference node is no longer reported as missing @type.Citability (new sub-score)
Multi-page audit (new)
llms.txt
Monitoring and alerts (new)
Reports
AI fix (new, optional, user's own key)
Scoring
<meta name="Description"> was missed before.New pay-per-event events
page-audited, render-comparison, pdf-report, ai-fix-generated, site-rechecked-unchanged, change-alert-sent, access-log-analysedFirst release: robots.txt matrix for 20 AI agents, passive CDN detection, opt-in UA probe, raw/rendered word ratio, structure and trust checks, llms.txt validation, 0–100 score, top fixes, HTML report.