90
A
Alert
No urgent crawler access problem was found in this audit.
Advise
Your most important bots appear to be reaching the site normally, so the main opportunities are lower-priority hardening and polish.
Action Step
Keep monitoring crawler access and focus next on response headers, caching, and small technical improvements.
Key Findingswhat failed first
Warnings
ETag is missing.
Passed
HTTPS is enabled.
HSTS is valid.
robots.txt is present.
Fix Priorityrecommended next steps
1Add ETag or validator headers for better cache revalidation.
2Review tracking flags and confirm only intended analytics scripts are loaded.
3Review the detailed sections below for lower-priority hardening opportunities.
4Review the detailed sections below for lower-priority hardening opportunities.
Speed
100
Excellent response path
Security
100
core protections are present
SEO
100
crawl assets are discoverable
Bot Access
34
bot responses need attention
Result Integrity98% measurement confidence · 1 conflict
LOWCSP contains 'unsafe-inline' — inline script execution is permitted, which is the most common CSP bypass vector
Replace 'unsafe-inline' with nonce-based or hash-based script allowlisting. This single change has more XSS-protection impact than any other CSP improvement.
Main fetch: ok
Security: ok
SEO: ok
20/20 bot probes succeeded
How Your Score Is Calculated
Speed 30%Security 30%SEO 25%Bot Access 15%
| Category | Weight | Your Score / 100 | Points |
|---|---|---|---|
| ⚡ Speed | 30% | 100 | 30.0 |
| 🔒 Security | 30% | 100 | 30.0 |
| 🔍 SEO | 25% | 100 | 25.0 |
| 🤖 Bot Access | 15% | 34 | 5.1 |
| Overall Score | 90.1 / 100 | ||
Brand Surface signals — favicon, OG image, Twitter card, web manifest & JSON-LD schema — contribute up to 8 pts within the SEO category, equal to a maximum of 2 pts on your overall score.
Bot Importance Hierarchy
2 ranked bot issues
Ranks crawlers by practical impact so users can tell whether a failure is mission-critical, growth-related, or lower-priority.
Tier 1
Mission Critical
Search and AI discovery bots that most directly affect visibility and retrieval.
2 issues
OAI Search
Blocked
Vertex AI
Blocked
Google
Stable
GPTBot
Stable
ChatGPT
Stable
Perplexity
Stable
Claude
Stable
Tier 2
Growth & Distribution
Bots that influence secondary reach, ecosystem visibility, and social preview distribution.
2 issues
Meta AI
Blocked
Mistral
Blocked
Bing
Stable
Amazon
Stable
Apple
Stable
Facebook
Stable
Twitter
Stable
LinkedIn
Stable
Tier 3
Reference & Baseline
Supportive or baseline agents useful for comparison and lower-priority monitoring.
stable tier
ByteDance
Stable
CommonCrawl
Stable
DuckDuck
Stable
Chrome
Stable
BotWatcher
Stable
consistent access caution anomaly / blocked
Anomaly Detection
peak Bot/Crawl spike
Asset Discovery
6/8 public assets visible
HTTPS
TLS active
Cloudflare
DYNAMIC
Compression
none
robots.txt
crawl rules live
Sitemap
34 URLs
llms.txt
AI crawler guide
Structured Data
4 schema blocks
Analytics
none detected
Map routes are derived from bot simulation responses and compliance checks. This board is audit-driven, not global telemetry.
Bot Access & Consistency34▾
✕
Bot Access & Consistency 34
Your site appears to respond differently to some crawlers, which can reduce AI search visibility and trigger cloaking concerns.
ℹ
Why this matters
AI search visibility, social previews, and crawler trust can drop when some agents receive different responses or are blocked.
✕
Different bots received different responses
Mixed status code classes: 2xx, 4xx
✕
Status codes stayed consistent
Mixed status code classes detected
✓
AI crawler guidance
llms.txt present
Bot Status Strip
Google
Bing
DuckDuck
Apple
GPTBot
Claude
Perplexity
Facebook
Twitter
LinkedIn
Chrome
BotWatcher
amazonbot
bytespider
ccbot
chatgptuser
oaisearchbot
mistralaiuser
googlevertexbot
metaexternalagent
| Bot | Result | HTTP | robots.txt | Notes |
|---|---|---|---|---|
| oaisearchbot | Review | 429 | unspecified | HTTP 429 |
| mistralaiuser | Review | 429 | unspecified | HTTP 429 |
| googlevertexbot | Review | 429 | unspecified | HTTP 429 |
| metaexternalagent | Review | 429 | unspecified | HTTP 429 |
| Googlebot 2.1 | Accessible | 200 | allowed | 28ms |
| Bingbot 2.0 | Accessible | 200 | allowed | 19ms |
| DuckDuckBot | Accessible | 200 | unspecified | 19ms |
| Applebot | Accessible | 200 | unspecified | 21ms |
| GPTBot (OpenAI) | Accessible | 200 | allowed | 27ms |
| ClaudeBot (Anthropic) | Accessible | 200 | allowed | 21ms |
| PerplexityBot | Accessible | 200 | unspecified | 41ms |
| Facebook External Hit | Accessible | 200 | unspecified | 35ms |
| Twitterbot | Accessible | 200 | unspecified | 35ms |
| LinkedInBot | Accessible | 200 | unspecified | 36ms |
| Chrome (baseline) | Accessible | 200 | unspecified | 44ms |
| BotWatcherAudit/1.0 | Accessible | 200 | unspecified | 44ms |
| amazonbot | Accessible | 200 | unspecified | 48ms |
| bytespider | Accessible | 200 | unspecified | 52ms |
| ccbot | Accessible | 200 | unspecified | 51ms |
| chatgptuser | Accessible | 200 | unspecified | 54ms |
Performance100▾
TTFB
117ms
Total Time
117ms
Body Size
124.6 KB
Status
200
Compression
none
CF Cache
DYNAMIC
✓
HTTPS
Secure TLS
✓
TTFB: 117ms
Excellent
✓
HTTP 200
OK
✕
Compression
Enable gzip or Brotli
Note 1: Uncompressed responses waste bandwidth and slow down page load times for all visitors.
Note 2: Crawlers see increased latency and may deprioritize your site in crawl schedules.
Note 3: Enable gzip or Brotli compression in your web server config (nginx: gzip on; Apache: mod_deflate).
✓
Cache-Control
public, max-age=0, must-revalidate
ℹ
ETag
Consider adding ETag
✓
Redirects: 0
No redirects
✓
Cloudflare CDN
CF-Cache-Status: DYNAMIC
Security Headers100▾
✓
HTTPS / TLS
Secure
✓
HSTS
max-age=31536000; includeSubDomains; preload
✓
Content-Security-Policy
default-src 'self'; script-src 'self' https://static.cloudflareinsights.com http…
✓
X-Content-Type-Options
nosniff
✓
Clickjacking protection
SAMEORIGIN
✓
Referrer-Policy
strict-origin-when-cross-origin
✓
Permissions-Policy
camera=(), microphone=(), geolocation=(), payment=(), usb=()
✓
Cross-Origin-Opener-Policy
same-origin
✓
Cross-Origin-Embedder-Policy
credentialless
SEO & Crawlability100▾
✓
Meta title
HandyManPro.ai — Fix It. Learn It. Own It.
✓
Meta description
HandyManPro.ai — Your home, simplified. Visual guides for every room, every season, and every fix. F…
✓
Canonical URL
https://handymanpro.ai/
✓
Viewport meta
width=device-width, initial-scale=1.0
✓
robots.txt
1 sitemap(s)
✓
Googlebot access
Allowed
✓
Sitemap.xml
34 URL(s)
✓
Open Graph
og:title = "HandyManPro.ai — Fix It. Learn It. Own It."
✓
JSON-LD Structured Data
WebSite, WebPage, WebSite, Organization
✓
llms.txt (AI compliance)
Present - AI-era ready
Third-Party & Privacy▾
Analyzes raw HTML source for third-party domains, consent tooling, render-blocking scripts, and tracking pixels. Tools injected at the edge (Cloudflare Zaraz, CF Web Analytics) or loaded dynamically via JS after page load will not appear here — use your browser's Network tab for a complete runtime picture. Results are informational and do not affect your score.
22 third-party domains
·
0 render-blocking scripts
·
✗ No consent tool
·10 tracking pixels
No analytics detected — you may be flying blind on traffic data
Ad/tracking pixels detected without a visible consent mechanism — potential GDPR/CCPA compliance gap
Third-Party Domains in Source
| anrdoezrs.net |
| awin1.com |
| awltovhc.com |
| btcminergpt.ai |
| buymeacoffee.com |
| chatgpt.com |
| dpbolvw.net |
| fonts.googleapis.com |
| fonts.gstatic.com |
| ftjcfx.com |
| handymanpro.ai |
| jdoqocy.com |
| kqzyfj.com |
| lduhtrp.net |
| llmadvisor.ai |
| + 7 more |
Tracking Pixels
| ftjcfx.com |
| ftjcfx.com |
| awltovhc.com |
| awltovhc.com |
| lduhtrp.net |
| lduhtrp.net |
| tqlkg.com |
| ftjcfx.com |
| ftjcfx.com |
| ftjcfx.com |
Platforms Detected in Source
○ Google Analytics 4○ Universal Analytics (UA)○ Google Tag Manager○ Cloudflare Web Analytics○ Cloudflare Zaraz○ Plausible○ Fathom○ Matomo / Piwik○ Hotjar○ Microsoft Clarity○ Segment○ Mixpanel○ Heap○ Amplitude○ HubSpot○ Intercom○ Adobe Analytics○ Meta (Facebook) Pixel○ TikTok Pixel○ Crisp Chat
Domain Surface▾
Probes common subdomains and non-standard HTTP/HTTPS ports to map the visible attack surface of this domain. Results are based on network-layer responses only. Informational — does not affect your score.
!
Wildcard DNS detected — subdomain results are not meaningful
A probe of a guaranteed-nonexistent subdomain (
wildcardtestconfirmationbotwatcherai.handymanpro.ai) returned HTTP 530, definitively confirming a wildcard DNS record (*.handymanpro.ai) is active and answering all subdomain requests. Individual subdomain scan results are unreliable when wildcard DNS is present and have been suppressed.Non-standard Ports
| Port | Status | HTTP | TTFB |
|---|---|---|---|
| http:8080 | Responded | 301 | 69ms |
| https:8443 | Responded | 200 | 82ms |
| http:3000 | Responded | 301 | 71ms |
| http:8000 | Responded | 301 | 74ms |
Brand Surface▾
Inspects the favicon stack, Open Graph tags, Twitter Card, web app manifest, and JSON-LD brand schema from the raw HTML. This covers what search engines, social platforms, and mobile home-screen installers see when representing your brand. Informational — does not affect your score.
No <meta name="theme-color"> — mobile browser chrome will default to white/grey instead of brand colour
Google / Platform Compliance
✓ meets recommendation ⚠ borderline or fallback ✕ fails — not declared
| Signal | Detected value | Status | Google / platform recommendation |
|---|---|---|---|
| og:image declared | Yes | ✓ | Required for rich previews on all social platforms |
| og:image dimensions | 1200×630px | ✓ | Google/OG recommend 1200×630px minimum |
| og:image aspect ratio | 1.90:1 | ✓ | 1.91:1 — exact 1200×630 satisfies this |
| og:image:alt declared | Yes | ✓ | Required for accessibility; recommended by Google |
| og:title length | 42 chars — "HandyManPro.ai — Fix It. Learn It. Own It." | ✓ | 50–60 chars; max 95 before truncation |
| og:description length | 158 chars | ✓ | 150–160 chars recommended; max 300 |
| og:site_name | HandyManPro.ai | ✓ | Shown in link previews on Facebook, LinkedIn, Slack |
| twitter:card type | summary_large_image | ✓ | "summary_large_image" for full-width preview in X/Twitter |
| twitter:image declared | Yes | ✓ | Explicit twitter:image preferred; og:image used as fallback |
| twitter:image:alt | Yes | ✓ | Required for accessibility on X/Twitter |
| twitter:title length | 42 chars | ✓ | Max 70 chars displayed in Twitter card |
| twitter:description | 158 chars | ✓ | Max 200 chars in Twitter card preview |
| Favicon: Google SERP | SVG declared | ✓ | Google Search: SVG or raster ≥48×48px to show in results |
| JSON-LD Organization | HandyManPro.ai | ✓ | Helps Google identify your brand in Knowledge Graph |
| JSON-LD logo | Declared | ✓ | Google recommends 112×112px min, max 1:1 ratio, https URL |
Coverage
✓
Favicon declared
5 <link rel="icon"> tags
✓
Google SERP-ready favicon
SVG favicon present
✓
SVG favicon
✓
Raster favicon (PNG/ICO)
✓
Apple touch icon (iOS home-screen)
✓
Web App Manifest
→ /site.webmanifest
○
theme-color meta
Favicon Preview
Open Graph Image Preview
🖼
Preview may be blocked — use Open image directly ↗ to verify the asset.
Favicon Links (5)
| href | type | sizes | rel |
|---|---|---|---|
| static/favicon.svg | image/svg+xml | — | icon |
| static/favicon.ico | image/x-icon | — | icon |
| static/favicon-16x16.png | image/png | 16x16 | icon |
| static/favicon-32x32.png | image/png | 32x32 | icon |
| static/favicon-192x192.png | image/png | 192x192 | icon |
Apple Touch Icons (1)
| href | sizes |
|---|---|
| static/apple-touch-icon.png | 180x180 |
Open Graph (Facebook / LinkedIn / Slack / Discord)
| og:image | https://handymanpro.ai/static/og-image-v2.png |
| og:image dimensions | 1200×630 |
| og:image:alt | HandyManPro.ai - Fix It. Learn It. Own It. |
| og:title | HandyManPro.ai — Fix It. Learn It. Own It. |
| og:description | HandyManPro.ai — Your home, simplified. Visual guides for every room, every season, and every fix. Free calculators and AI assistance for everyday homeowners. |
| og:site_name | HandyManPro.ai |
| og:type | website |
| og:url | https://handymanpro.ai/ |
Twitter / X Card
| twitter:card | summary_large_image |
| twitter:image | https://handymanpro.ai/static/og-image-v2.png |
| twitter:image:alt | HandyManPro.ai - Fix It. Learn It. Own It. |
| twitter:title | HandyManPro.ai — Fix It. Learn It. Own It. |
| twitter:description | HandyManPro.ai — Your home, simplified. Visual guides for every room, every season, and every fix. Free calculators and AI assistance for everyday homeowners. |
| twitter:site | — |
Brand Schema (JSON-LD)
✓
Organization schema
name: HandyManPro.ai
✓
WebSite schema
✓
Organization logo
https://handymanpro.ai/static/handymanpro-logo.png