cecuro.ai

Visit website
25 points reservedThese are assessed in deep review.26/100

Website score

9 high-impact issues should be verified and fixed before launch.

Checked Sep 19, 2026 · 59 signals reviewed · 100% evidence coverage
26 of 75 free points · 25 points checked in deep review

It follows public journeys, checks recovery from public dead ends, and opens independent public sources. Developer/API and purchase paths are reviewed only when the website exposes them. It never signs in, submits forms, or makes changes.

Explore deep review for cecuro.ai $99 once · Private report · Public evidence only

Verify access first

The scanner did not receive a readable public homepage.

It observed HTTP 400 · 42 readable characters. The content findings below describe that response and may differ from what a normal visitor receives. Check bot protection, routing, and server rendering before changing page copy.

Verify: Request the homepage with the Launch Ready user agent and confirm the final response is HTTP 200–399 and contains the product copy a visitor should read.

Start here

What needs your attention.

18 total

View 14 more findings
Fix first
Page titleProduct clarity

Use a concise, specific title that identifies the product and page.

FoundMissing
Next step

Write a concise title that names the product and its specific outcome. Keep it unique to this page.

Verify

Inspect the final page source and confirm one title is present, roughly 10–70 characters, and matches the visible page purpose.

Fix first
Substantive sampled pagesProduct clarity

Public pages should expose substantive content without a login or challenge wall. An unresolved selected page withholds the score rather than being discarded.

Found0/1 attempted pages substantive
Next step

Publish at least one linked product, pricing, documentation, or trust page with substantive public copy. Do not make essential launch information depend on a sign-in or JavaScript-only route.

Verify

Open the linked page in a fresh private browser window and with JavaScript disabled; its purpose and key information should still be clear.

Fix first
Unknown-path HTTP contractTechnical reliability

Missing pages should return 404 or 410 instead of a successful app shell. A collection error is not graded as a product failure.

FoundHTTP 400
Next step

Return HTTP 404 or 410 for a made-up path. Keep a helpful human error page, but do not return the successful application shell with HTTP 200.

Verify

Run `curl -sS -o /dev/null -w '%{http_code}\n' https://your-domain.example/a-path-that-does-not-exist`; it should print 404 or 410.

Fix first
Mobile viewportTechnical reliability

A responsive viewport lets the page render at the correct width on mobile devices.

FoundMissing
Next step

Add `<meta name="viewport" content="width=device-width, initial-scale=1">` to the document head.

Verify

Load the page in a narrow mobile viewport and confirm it renders at the viewport width without unintended horizontal scrolling.

Fix first
Primary product actionProduct clarity

Make the next step explicit with clear action language and a valid destination.

FoundNo common action phrase detected
Next step

Give the homepage one explicit next step, such as “Start free”, “See pricing”, or “Book a demo”, and link it to a working public destination.

Verify

From the initial HTML, follow the primary call to action and confirm it reaches the intended public page without an unexpected error.

Important
Accessible document landmarksTechnical reliability

Semantic landmarks make the page structure understandable without visual layout.

Found0/4 common landmarks; main missing
Next step

Review the observed evidence for “Accessible document landmarks”, make the smallest change that satisfies the stated requirement, and preserve intentional behavior.

Verify

Run a fresh public check after deployment and confirm the observed value changes as expected.

Important
Canonical URLSearch & AI discovery

Declare a valid preferred public URL. A cross-origin canonical may be intentional, but should be reviewed before launch.

FoundMissing
Next step

Add one canonical link pointing to the preferred public URL for this page.

Verify

Inspect the homepage source and confirm the canonical URL resolves to the intended final page.

Important
Heading structureProduct clarity

Use one H1 and avoid skipping heading levels so readers and agents can follow the document outline.

FoundH1 0 · H2 0 · H3 0 · max skip 0
Next step

Use one descriptive H1, then H2 and H3 headings in order. Do not use styled text in place of document structure.

Verify

Inspect the heading outline in browser developer tools or an accessibility tree; it should start at H1 and not skip levels unnecessarily.

Important
Meta descriptionProduct clarity

Summarize the product, audience, and value clearly for search and link previews.

FoundMissing
Next step

Add a 70–180 character description naming the product, intended customer, and practical value.

Verify

Inspect the final page source and confirm one non-empty meta description is present.

Important
Security header qualityTechnical reliability

Evaluate CSP scope and HSTS duration instead of header presence alone.

FoundCSP 0 directives · wildcard no · HSTS 15552000s
Next step

Add HSTS after confirming every production route is HTTPS, then deploy a scoped Content-Security-Policy. Start CSP in report-only mode if you need to discover required third-party origins safely.

Verify

Inspect the final homepage response headers. Confirm Strict-Transport-Security has a long max-age and CSP does not rely on broad wildcards.

Important
Metadata completenessSearch & AI discovery

Canonical URL, language, Open Graph image, and Open Graph type improve attribution and previews.

Foundcanonical no · lang no · og:image no · og:type no
Next step

Review the observed evidence for “Metadata completeness”, make the smallest change that satisfies the stated requirement, and preserve intentional behavior.

Verify

Run a fresh public check after deployment and confirm the observed value changes as expected.

Important
Structured-data qualitySearch & AI discovery

Use relevant JSON-LD types with enough identity fields to resolve the organization or product.

FoundNo parseable JSON-LD types
Next step

Add accurate Organization and WebSite JSON-LD. Add SoftwareApplication only when it truthfully describes the product.

Verify

Validate the rendered JSON-LD with a structured-data tester and make sure names, URLs, and claims match the visible site.

Improve
Open Graph metadataSearch & AI discovery

Provide a title, description, type, and image for reliable launch-link previews.

Foundtitle/description no · image no
Next step

Add Open Graph title and description fields that match the public page message.

Verify

Inspect the final HTML or a social-preview debugger and confirm both fields are non-empty and specific.

Improve
Document languageProduct clarity

Declare the content language with a valid html lang attribute.

FoundMissing
Next step

Review the observed evidence for “Document language”, make the smallest change that satisfies the stated requirement, and preserve intentional behavior.

Verify

Run a fresh public check after deployment and confirm the observed value changes as expected.

The overview

Results by category.

Product clarityExplanatory points10/95
Trust & safetyExplanatory points55/100
Technical reliabilityExplanatory points40/115
Search & AI discoveryExplanatory points30/85
View all checks and evidence 15 passed · 21 need review
fail
Trust anchor pages · 0/45 points

About, contact, privacy, and terms pages receive credit only after a distinct, substantive same-origin response is observed. Collection errors are unresolved evidence.

Score rationale: Operator, contact, and policy pages are strong verification surfaces.

web · static · verified · read-onlyabout: not linked · privacy: not linked · terms: not linked · contact: not linked
fail
AI crawler reachability · 0/30 points

The homepage is requested with common crawler and user-fetch agent identifiers. Transport errors are uncertainty, not a product failure.

Score rationale: User-requested and search agents must be able to retrieve public content.

web · active-public · verified · read-only0/3 user-agents received readable content
fail
Public homepage reachability · 0/30 points

The homepage must return a readable successful response before a score can be published.

Score rationale: A public launch surface must return a readable successful response.

web · active-public · verified · read-onlyHTTP 400 · 42 readable characters
fail
Content in initial HTML · 0/25 points

Meaningful copy should be available without JavaScript execution.

Score rationale: Agents and search crawlers need meaningful server-rendered content.

web · static · verified · read-only9 words · 42 characters · 100% content ratio
fail
Page title · 0/15 points

Use a concise, specific title that identifies the product and page.

Score rationale: A specific title is a primary identity and navigation signal.

web · static · verified · read-onlyMissing
fail
Substantive sampled pages · 0/15 points

Public pages should expose substantive content without a login or challenge wall. An unresolved selected page withholds the score rather than being discarded.

Score rationale: One healthy homepage should not hide empty public product pages.

web · active-public · verified · read-only0/1 attempted pages substantive
fail
Unknown-path HTTP contract · 0/15 points

Missing pages should return 404 or 410 instead of a successful app shell. A collection error is not graded as a product failure.

Score rationale: Correct 404/410 responses prevent false-success application shells.

web · active-public · verified · read-onlyHTTP 400
fail
Accessible document landmarks · 0/10 points

Semantic landmarks make the page structure understandable without visual layout.

Score rationale: Semantic landmarks make static documents navigable.

web · static · verified · read-only0/4 common landmarks; main missing
fail
Canonical URL · 0/10 points

Declare a valid preferred public URL. A cross-origin canonical may be intentional, but should be reviewed before launch.

Score rationale: Canonical identity consolidates duplicate URLs.

web · static · verified · read-onlyMissing
fail
Heading structure · 0/10 points

Use one H1 and avoid skipping heading levels so readers and agents can follow the document outline.

Score rationale: A coherent outline improves comprehension and accessibility.

web · static · verified · read-onlyH1 0 · H2 0 · H3 0 · max skip 0
fail
Meta description · 0/10 points

Summarize the product, audience, and value clearly for search and link previews.

Score rationale: A useful summary improves search and link interpretation.

web · static · verified · read-onlyMissing
fail
Mobile viewport · 0/10 points

A responsive viewport lets the page render at the correct width on mobile devices.

Score rationale: Mobile rendering is a launch baseline.

web · static · verified · read-onlyMissing
fail
Security header quality · 0/10 points

Evaluate CSP scope and HSTS duration instead of header presence alone.

Score rationale: Policy quality matters more than header presence alone.

web · static · verified · read-onlyCSP 0 directives · wildcard no · HSTS 15552000s
partial
Primary product action · 7.5/15 points

Make the next step explicit with clear action language and a valid destination.

Score rationale: Visitors need an unambiguous next step.

web · static · verified · read-onlyNo common action phrase detected
fail
Open Graph metadata · 0/5 points

Provide a title, description, type, and image for reliable launch-link previews.

Score rationale: Complete previews improve launch-link distribution.

web · static · verified · read-onlytitle/description no · image no
fail
Structured-data quality · 0/5 points

Use relevant JSON-LD types with enough identity fields to resolve the organization or product.

Score rationale: Structured identity data helps machines resolve the product.

web · static · verified · read-onlyNo parseable JSON-LD types
partial
Metadata completeness · 0/5 points

Canonical URL, language, Open Graph image, and Open Graph type improve attribution and previews.

Score rationale: Core attribution metadata improves previews and entity resolution.

web · static · verified · read-onlycanonical no · lang no · og:image no · og:type no
partial
Document language · 2.5/5 points

Declare the content language with a valid html lang attribute.

Score rationale: Declared language helps assistive technology and parsers.

web · static · verified · read-onlyMissing
fail
Helpful 404 response · diagnostic

A missing page should give a reader a recovery path such as home, docs, search, or sitemap. Collection errors are uncertainty, not a target failure.

Score rationale: Diagnostic evidence that does not affect the public-web score.

web · static · experimental · read-onlyHTTP 400
fail
llms.txt link health · diagnostic

Links declared for agents should resolve to real public content.

Score rationale: Diagnostic evidence that does not affect the public-web score.

web · static · experimental · read-only0/2 sampled links healthy
partial
Agent when-to-use guidance · diagnostic

Tell agents which jobs the product is appropriate for and where to begin.

Score rationale: Diagnostic evidence that does not affect the public-web score.

web · static · experimental · read-onlyNo explicit guidance detected
pass
DMARC email policy · 10/10 points

DMARC quarantine or reject policies reduce spoofing once mail sources are aligned. DNS collection failures are reported as unresolved evidence.

Score rationale: Applicable sending domains benefit from anti-spoofing enforcement.

web · active-public · verified · read-only

MX records show that the domain receives mail.

p=quarantine · reporting yes
pass
Homepage indexing directives · 20/20 points

The public homepage should not accidentally declare noindex.

Score rationale: Accidental noindex makes a launch effectively undiscoverable.

web · static · verified · read-onlyNo noindex directive
pass
HTTPS delivery · 35/35 points

The public product should finish on an encrypted HTTPS origin.

Score rationale: Public production traffic must use encrypted transport.

web · active-public · verified · read-onlyhttps://cecuro.ai
pass
llms.txt · diagnostic

A useful llms.txt provides a concise product summary and links to canonical resources.

Score rationale: Diagnostic evidence that does not affect the public-web score.

web · static · experimental · read-only5866 characters · 21 links
pass
llms.txt structure · diagnostic

Use a title, summary, and described sections so the file works as a navigation index.

Score rationale: Diagnostic evidence that does not affect the public-web score.

web · static · experimental · read-onlytitle yes · summary yes · sections yes
pass
Markdown code fences · diagnostic

Unbalanced code fences can hide the remainder of a Markdown document from parsers.

Score rationale: Diagnostic evidence that does not affect the public-web score.

web · static · experimental · read-onlyBalanced
pass
Mixed-content references · 10/10 points

HTTPS pages should not reference insecure HTTP assets.

Score rationale: Insecure subresources undermine HTTPS delivery.

web · static · verified · read-onlyNone detected
pass
Native interactive controls · diagnostic

Prefer native links, buttons, and form controls over clickable generic elements.

Score rationale: Diagnostic evidence that does not affect the public-web score.

web · static · experimental · read-only0 native · 0 non-native patterns
pass
No challenge or login wall · 20/20 points

The public homepage should not require a challenge or sign-in before its content can be read.

Score rationale: A public launch surface must be reachable without an unintended gate.

web · static · verified · read-onlyNo challenge/login language detected
pass
Page context budget · diagnostic

Keep extracted page content within a practical agent context budget.

Score rationale: Diagnostic evidence that does not affect the public-web score.

web · static · experimental · read-only1 pages sampled · largest 42 characters
pass
Redirect hygiene · 10/10 points

Use HTTP redirects and avoid meta-refresh or JavaScript-only redirect stubs.

Score rationale: Server redirects are more reliable than client-only redirect stubs.

web · active-public · verified · read-only0 HTTP redirect(s)
pass
robots.txt agent policy · diagnostic

User-requested retrieval and search access affect discoverability; training opt-outs are reported but do not lower this result. Collection errors are uncertainty, not a target failure.

Score rationale: Declared policy is diagnostic; observed public retrieval determines scored access.

web · static · experimental · read-onlyChatGPT-User: allowed · Claude-User: allowed · OAI-SearchBot: allowed · Claude-SearchBot: allowed · PerplexityBot: allowed · GPTBot: allowed (training) · ClaudeBot: allowed (training) · Google-Extended: allowed (training)
pass
Sitemap freshness metadata · diagnostic

Accurate lastmod values help crawlers prioritize changed pages.

Score rationale: Diagnostic evidence that does not affect the public-web score.

web · static · experimental · read-only100% of entries include lastmod
pass
Sitemap validity · 10/10 points

Publish a valid sitemap or sitemap index for canonical public URLs. A collection error is not graded as absence.

Score rationale: A valid sitemap provides a bounded discovery map.

web · active-public · verified · read-only296 locations
pass
SPF email policy · 10/10 points

A valid SPF policy helps recipients identify authorized senders; excessive DNS lookups can invalidate it. DNS collection failures are reported as unresolved evidence.

Score rationale: Applicable sending domains need a valid sender policy.

web · active-public · verified · read-only

MX records show that the domain receives mail.

~all · 2 lookup mechanism(s)
not applicable
A2A agent card · diagnostic

Products offering an A2A agent can publish a machine-readable agent card.

Score rationale: Diagnostic evidence that does not affect the public-web score.

web · static · experimental · read-only

Optional diagnostic is not required for the applicable public-web score.

Not discovered
not applicable
Agent authentication discovery · diagnostic

Products with agent authentication can publish machine-readable issuer, authorization, or documentation metadata.

Score rationale: Diagnostic evidence that does not affect the public-web score.

oauth · static · experimental · read-only

No valid OAuth metadata was observed.

Not discovered
not applicable
Agent authentication document · diagnostic

Products with authentication can expose concise public setup and recovery guidance in auth.md.

Score rationale: Diagnostic evidence that does not affect the public-web score.

oauth · static · experimental · read-only

No valid OAuth metadata was observed.

Not discovered
not applicable
Agent resource catalogs · diagnostic

Emerging catalogs can advertise APIs, agents, skills, and MCP surfaces from a well-known location.

Score rationale: Diagnostic evidence that does not affect the public-web score.

web · static · experimental · read-only

Optional diagnostic is not required for the applicable public-web score.

ARD not found · AI catalog not found · API catalog not found
not applicable
Agent Skills index · diagnostic

A published Agent Skills index should be valid JSON and enumerate usable skill artifacts.

Score rationale: Diagnostic evidence that does not affect the public-web score.

sdk · static · experimental · read-only

SDK validation is not implemented by the light collector.

Not discovered
not applicable
Developer portal · diagnostic

Products with developer interfaces should expose a predictable developer entry point.

Score rationale: Diagnostic evidence that does not affect the public-web score.

web · static · experimental · read-only

Optional diagnostic is not required for the applicable public-web score.

Not discovered
not applicable
Domain contact email · diagnostic

A contact address on the product domain can strengthen operator identity and support trust.

Score rationale: Diagnostic evidence that does not affect the public-web score.

web · static · experimental · read-only

Optional diagnostic is not required for the applicable public-web score.

Not observed
not applicable
HTTP Link discovery · diagnostic

HTTP Link headers can advertise machine-readable alternates and capability descriptions without relying on guessed paths.

Score rationale: Diagnostic evidence that does not affect the public-web score.

web · static · experimental · read-only

Optional diagnostic is not required for the applicable public-web score.

No discovery Link header observed
not applicable
Machine-readable pricing page · diagnostic

A concise pricing.md can help agents explain plans, but it is optional and never substitutes for a clear public pricing page.

Score rationale: Diagnostic evidence that does not affect the public-web score.

web · static · experimental · read-only

Optional diagnostic is not required for the applicable public-web score.

Not discovered
not applicable
Markdown alternate discovery · diagnostic

Advertise a Markdown representation through content negotiation or an alternate link.

Score rationale: Diagnostic evidence that does not affect the public-web score.

web · static · experimental · read-only

Optional diagnostic is not required for the applicable public-web score.

Not advertised
not applicable
Markdown content negotiation · diagnostic

Canonical pages can optionally serve Markdown when requested and must vary caches by Accept.

Score rationale: Diagnostic evidence that does not affect the public-web score.

web · static · experimental · read-only

Optional diagnostic is not required for the applicable public-web score.

HTML served for a Markdown request
not applicable
MCP server card · diagnostic

A server card lets clients understand an MCP server before connecting.

Score rationale: Diagnostic evidence that does not affect the public-web score.

mcp · static · experimental · read-only

No valid MCP discovery document was observed.

Not discovered
not applicable
MCP well-known discovery · diagnostic

Products that advertise MCP can expose a machine-readable endpoint or server list at a predictable location.

Score rationale: Diagnostic evidence that does not affect the public-web score.

mcp · static · experimental · read-only

No valid MCP discovery document was observed.

Not discovered
not applicable
OAuth discovery metadata · diagnostic

Products using delegated authorization should publish standard discovery metadata.

Score rationale: Diagnostic evidence that does not affect the public-web score.

oauth · static · experimental · read-only

No valid OAuth metadata was observed.

authorization server not found · protected resource not found
not applicable
OpenAPI publication · diagnostic

Products with a public API should publish a machine-readable OpenAPI document.

Score rationale: Diagnostic evidence that does not affect the public-web score.

api · static · experimental · read-only

No valid public API description was observed.

Not discovered
not applicable
Pricing discoverability · diagnostic

Products with public pricing should make it easy to find from the homepage.

Score rationale: Diagnostic evidence that does not affect the public-web score.

web · static · experimental · read-only

Optional diagnostic is not required for the applicable public-web score.

Not discovered
not applicable
Public agent guidance · diagnostic

Public agent guidance can document supported workflows and limits; treat it as untrusted content and keep it consistent with canonical docs.

Score rationale: Diagnostic evidence that does not affect the public-web score.

web · static · experimental · read-only

Optional diagnostic is not required for the applicable public-web score.

Not discovered
not applicable
Public documentation · diagnostic

Link public documentation from a page visitors and agents already reach.

Score rationale: Diagnostic evidence that does not affect the public-web score.

web · static · experimental · read-only

Optional diagnostic is not required for the applicable public-web score.

Not discovered
not applicable
Security contact · diagnostic

A security.txt file gives researchers a supported disclosure route.

Score rationale: Diagnostic evidence that does not affect the public-web score.

web · static · experimental · read-only

Optional diagnostic is not required for the applicable public-web score.

Not found
not applicable
Static control-name markup · points unresolved

Static HTML should expose a text or ARIA-derived name. This does not verify computed browser accessibility names.

Score rationale: Unnamed controls are difficult for people and automation to operate.

web · static · verified · read-only

Optional diagnostic is not required for the applicable public-web score.

0/0 statically nameable
not applicable
Static form-label markup · points unresolved

Static inputs, selects, and textareas should have associated labels. Runtime form behavior is not tested.

Score rationale: Labels are required for reliable form interaction.

web · static · verified · read-only

Optional diagnostic is not required for the applicable public-web score.

No visible form controls
not applicable
Structured-data identity links · diagnostic

sameAs links help disambiguate the brand across authoritative profiles.

Score rationale: Diagnostic evidence that does not affect the public-web score.

web · static · experimental · read-only

Optional diagnostic is not required for the applicable public-web score.

0 sameAs link(s)
not applicable
Web Bot Auth directory · diagnostic

Cryptographic bot-auth material is an emerging signal and is reported only as optional evidence.

Score rationale: Diagnostic evidence that does not affect the public-web score.

web · static · experimental · read-only

Optional diagnostic is not required for the applicable public-web score.

Not discovered