01
Discovery and access
20 points
Whether agents can reach and render content: crawl accessibility, rendering without fragile client-side dependencies, bot and access policies, and discovery paths.
Example evidence Fetch and render logs, robots and access policy review, sitemap coverage.
Checks in this scan
- robots.txt is published2
- AI agents are allowed to read the site5
- Agent requests are not blocked or challenged4
- XML sitemap is published and referenced3
- llms.txt guidance file is published1
- Content is present without running scripts4
- Internal links are present in the HTML1
02
Content comprehension
20 points
Whether agents can understand what they find: semantic structure, structured data, and clarity and consistency of product, pricing and service information.
Example evidence Schema validation, extraction accuracy tests against source of truth.
Checks in this scan
- Pages have a title and description2
- Headings form a clear outline3
- Semantic landmarks are used3
- Structured data describes the organisation and offers4
- Social and preview metadata1
- Canonical URL and language are declared2
- Images carry text alternatives2
- Link text says where the link goes1
- Journey pages carry substantive text2
03
Navigation and interaction
20 points
Whether agents can operate the interface: labelled forms and controls, predictable state, accessible names and interpretable errors.
Example evidence Accessibility tree inspection, interaction traces.
Checks in this scan
- Form fields have programmatic labels6
- Buttons have accessible names3
- Links have accessible names2
- Controls use native elements2
- Personal data fields support autofill2
- Inputs use meaningful types2
- Key forms are not gated by visual challenges2
- Status and errors are exposed to assistive tech1
04
Task completion
25 points
Whether agents can finish defined, authorised journeys accurately, and recover when something goes wrong.
Example evidence Completion rates across repeated runs, step counts, failure analysis.
Indicative in the automated scan. The scan checks that each journey has a findable, readable, operable path. It does not complete the journey.
Checks in this scan
- Entry points for standard sector tasks are discoverable9
- Site search is available3
- Journey pages are reachable4
- Journey pages work without scripts3
- Forms declare where and how they submit3
- Machine-actionable interfaces are published2
- URLs are stable and shareable1
05
Trust and governance
15 points
Permissions, authentication patterns, human approval points, safe handling of actions, and verifiable outcomes.
Example evidence Policy review, approval flow tests, confirmation evidence.
Indicative in the automated scan. Approval flows and confirmation evidence need a full assessment to test properly.
Checks in this scan
- HTTPS is enforced with HSTS3
- Security headers are set3
- A security contact is published2
- A position on AI agents is published3
- Sign-in uses standard patterns2
- Privacy and terms are linked2