agentsiteaudit · Checks

Website checks explained

AgentSiteAudit runs 69 checks on a web page, from security and email set-up to how ready the site is for AI agents. These guides explain the checks people ask about most: what each one looks for, why it matters, and exactly how to fix it.

Test your own website free · Read the Agent Readiness Report

AI agent readiness

• llms.txt: how to add a guide for AI agents to your website
  What an llms.txt file is, what to put in it, and how to add one to your website in five minutes. With a ready-made example and a free check.
• AI crawlers and robots.txt: let AI agents read your website
  Check whether your robots.txt blocks GPTBot, ClaudeBot, PerplexityBot and other AI crawlers, and how to allow or block them on purpose.
• Tell AI agents who your business is: name and contact details as structured data
  How to tell AI agents and search engines your business name and how to contact you, with a copy-paste Organization structured-data example.
• x402 price tags: make sure AI agents can pay for your API
  How to check that your x402 paid endpoints return a complete HTTP 402 price tag that AI agents can pay, and the most common mistakes.

Domain and email

• CAA record: choose who can issue certificates for your domain
  What a CAA record does, which certificate authorities to list for cPanel, Let's Encrypt or Cloudflare, and how to add one without breaking renewals.
• DMARC record: stop people sending fake email from your domain
  What DMARC is, why p=none is only a first step, and how to add a DMARC record safely without losing your own email.

Security

• Content Security Policy: a safety net against injected scripts
  What a Content Security Policy does, a safe way to add one with report-only first, and copy-paste examples for Apache, Nginx and Cloudflare.
• Permissions-Policy: switch off browser features your site does not use
  How the Permissions-Policy header turns off the camera, microphone, location and other browser features your website does not need, with copy-paste examples.
• HSTS: make browsers always use the secure version of your site
  What HSTS does, how long max-age should be, and how to switch it on safely in .htaccess, Nginx or Cloudflare.

SEO

• Meta description length: write the snippet people see in search
  How long a meta description should be, how to write one that earns the click, and where to set it in WordPress and plain HTML.

Written by Derek Moore, who builds and runs websites for small UK businesses. Last checked 30 October 2026.