Start with a report-only policy, review required origins, then enforce it to reduce script-injection risk.
gojiberry.ai
Visit websiteWebsite check complete
Needs work
1 issue should be fixed before launch.
Checked Sep 16, 2026 · 52 public signals · light scan · methodology 2026.09.1Start here
What needs your attention.
View 8 more findings
Add accurate Organization and WebSite JSON-LD. Use SoftwareApplication data when it describes the product truthfully.
Review CDN, WAF, and crawler rules for the failed user-agents. A user-agent probe is useful evidence but should be verified against provider IP ranges and server logs.
ChatGPT-User: reachable; GPTBot: reachable; ClaudeBot: HTTP 403Add a clearly linked about page before launch so visitors can verify who is behind the product and what they agree to.
Add a clearly linked contact page before launch so visitors can verify who is behind the product and what they agree to.
Use CSP frame-ancestors or X-Frame-Options unless embedding the product is intentional.
Use a main landmark and sequential headings so browsers, assistive technology, and agents can understand the page outline.
main missing; max heading skip 0Consider publishing a concise, maintained llms.txt that points AI agents to canonical product, pricing, documentation, and policy pages.
The overview
Results by category.
View all checks and evidence 23 passed · 8 need review
Semantic landmarks make the page structure understandable without visual layout.
0/4 common landmarks; main missingUse one H1 and avoid skipping heading levels so readers and agents can follow the document outline.
H1 0 · H2 0 · H3 0 · max skip 0Evaluate CSP scope and HSTS duration instead of header presence alone.
CSP 0 directives · wildcard no · HSTS 31536000sUse relevant JSON-LD types with enough identity fields to resolve the organization or product.
No parseable JSON-LD typesAbout, contact, privacy, and terms pages let visitors verify who operates the product.
about: no · privacy: no · terms: no · contact: noThe homepage is requested with common crawler and user-fetch agent identifiers.
2/3 user-agents received readable contentA missing page should give a reader a recovery path such as home, docs, search, or sitemap.
21682 readable charactersMake the next step explicit with clear action language and a valid destination.
No common action phrase detectedDeclare the preferred public URL so crawlers consolidate duplicate variants.
https://gojiberry.ai/Meaningful copy should be available without JavaScript execution.
604 words · 46253 characters · 61.7% content ratioDMARC quarantine or reject policies reduce spoofing once mail sources are aligned.
p=reject · reporting yesDeclare the content language with a valid html lang attribute.
enThe public homepage should not accidentally declare noindex.
No noindex directiveThe public product should finish on an encrypted HTTPS origin.
https://gojiberry.aiAdvertise a Markdown representation through content negotiation or an alternate link.
https://gojiberry.ai/Canonical pages can optionally serve Markdown when requested and must vary caches by Accept.
text/markdown; charset=utf-8; Vary: Accept-Encoding, AcceptSummarize the product, audience, and value clearly for search and link previews.
163 charactersCanonical URL, language, Open Graph image, and Open Graph type improve attribution and previews.
canonical yes · lang en · og:image yes · og:type websiteHTTPS pages should not reference insecure HTTP assets.
None detectedA responsive viewport lets the page render at the correct width on mobile devices.
width=device-widthPrefer native links, buttons, and form controls over clickable generic elements.
0 native · 0 non-native patternsThe public homepage should not require a challenge or sign-in before its content can be read.
No challenge/login language detectedProvide a title, description, type, and image for reliable launch-link previews.
title/description yes · image yesKeep extracted page content within a practical agent context budget.
1 pages sampled · largest 46,253 charactersUse a concise, specific title that identifies the product and page.
69 characters · Gojiberry AI - Grow your sales with warm leads & high intent outreachUse HTTP redirects and avoid meta-refresh or JavaScript-only redirect stubs.
0 HTTP redirect(s)Crawler policies should intentionally distinguish training, search indexing, and user-requested retrieval.
ChatGPT-User: allowed · GPTBot: allowed · ClaudeBot: allowed · Claude-User: allowed · PerplexityBot: allowed · Google-Extended: allowedPublish a valid sitemap or sitemap index for canonical public URLs.
2 locations in sitemap indexA valid SPF policy helps recipients identify authorized senders; excessive DNS lookups can invalidate it.
~all · 2 lookup mechanism(s)Public pages should expose substantive content without a login or challenge wall.
1/1 sampled pagesMissing pages should return 404 or 410 instead of a successful app shell.
HTTP 404Products offering an A2A agent can publish a machine-readable agent card.
Not discoveredInteractive elements need a text or ARIA-derived name.
0/0 statically nameableProducts with authentication can expose concise public setup and recovery guidance in auth.md.
Not discoveredEmerging catalogs can advertise APIs, agents, skills, and MCP surfaces from a well-known location.
ARD not found · API catalog not foundA published Agent Skills index should be valid JSON and enumerate usable skill artifacts.
Not discoveredTell agents which jobs the product is appropriate for and where to begin.
No explicit guidance detectedProducts with developer interfaces should expose a predictable developer entry point.
Not discoveredA contact address on the product domain can strengthen operator identity and support trust.
Not observedInputs, selects, and textareas should have associated labels.
No visible form controlsA useful llms.txt provides a concise product summary and links to canonical resources.
0 characters · 0 linksLinks declared for agents should resolve to real public content.
No links sampledUse a title, summary, and described sections so the file works as a navigation index.
title no · summary no · sections noUnbalanced code fences can hide the remainder of a Markdown document from parsers.
No valid llms.txt discoveredA server card lets clients understand an MCP server before connecting.
Not discoveredProducts using delegated authorization should publish standard discovery metadata.
authorization server not found · protected resource not foundProducts with a public API should publish a machine-readable OpenAPI document.
Not discoveredProducts with public pricing should make it easy to find from the homepage.
Not discoveredLink public documentation from a page visitors and agents already reach.
Not discoveredA security.txt file gives researchers a supported disclosure route.
Not foundAccurate lastmod values help crawlers prioritize changed pages.
0% of entries include lastmodsameAs links help disambiguate the brand across authoritative profiles.
0 sameAs link(s)