{ "version": "0.2.0", "rubricVersion": "0.9", "target": "https://cloudflare.com", "host": "cloudflare.com", "https": true, "measured": { "origin": "https://www.cloudflare.com", "host": "www.cloudflare.com", "https": true, "url": "https://www.cloudflare.com/" }, "redirect": { "from": "https://cloudflare.com/", "to": "https://www.cloudflare.com/", "status": 301, "hops": 1, "chain": [ { "url": "https://cloudflare.com/", "status": 301 } ], "sameSite": true }, "scannedAt": "2026-10-20T17:05:39.352Z", "durationMs": 4251, "requests": 89, "score": 88.5, "parts": { "standards": { "score": 92.4, "share": 0.7, "points": { "earned": 93.75, "available": 101.5 }, "counts": { "pass": 16, "warn": 4, "fail": 1, "na": 7, "total": 28 } }, "conventions": { "score": 79.4, "share": 0.3, "points": { "earned": 6.75, "available": 8.5 }, "counts": { "pass": 6, "warn": 1, "fail": 1, "na": 0, "total": 8 } } }, "previous": null, "level": 5, "levelName": "Agent-native", "levelBlurb": "The action surface is discoverable, its auth is described, and its status is published.", "levelCeiling": 5, "verdict": "Agent-native", "confidence": 100, "confidenceLabel": "high", "fingerprint": "53b19edfed7ea4ff0fa43e4aa5ef50c2354074259610da27c840862fdfbac45a", "modules": { "commerce": { "inScope": false, "signals": [] }, "agentApi": { "inScope": true, "kinds": [ "rest-api" ], "signals": [ { "kind": "rest-api", "evidence": "Link rel=\"api-catalog\" on the homepage" }, { "kind": "rest-api", "evidence": "/openapi.json is an OpenAPI 3.1 document" }, { "kind": "rest-api", "evidence": "homepage links https://developers.cloudflare.com/" } ] } }, "isCommerce": false, "commerceSignals": [], "blocked": null, "blockedNote": null, "deadline": { "ms": 60000, "reached": false }, "profile": { "id": "api", "identified": true, "declared": false, "ambiguous": [], "evidence": [ "API / developer platform (score 7), matched: An OpenAPI document responds; A documentation path responds; A developer portal responds." ], "scores": [ { "id": "api", "score": 7, "signals": [ "An OpenAPI document responds", "A documentation path responds", "A developer portal responds" ] }, { "id": "saas", "score": 4, "signals": [ "A pricing page responds", "A documentation path responds" ] }, { "id": "ecommerce", "score": 1, "signals": [ "The homepage links a product listing" ] }, { "id": "services", "score": 1, "signals": [ "A pricing path responds" ] } ] }, "categories": [ { "id": "discoverability", "label": "Discoverability", "score": 98, "counted": true, "pass": 5, "warn": 1, "fail": 0, "na": 0, "total": 6, "unscored": { "present": 0, "defective": 0, "absent": 0 } }, { "id": "content", "label": "Content", "score": 90.3, "counted": true, "pass": 7, "warn": 2, "fail": 0, "na": 1, "total": 10, "unscored": { "present": 0, "defective": 0, "absent": 1 } }, { "id": "botaccess", "label": "Crawler access", "score": 100, "counted": true, "pass": 1, "warn": 0, "fail": 0, "na": 0, "total": 1, "unscored": { "present": 0, "defective": 1, "absent": 1 } }, { "id": "protocol", "label": "API and agent", "score": 89.1, "counted": true, "pass": 3, "warn": 1, "fail": 1, "na": 1, "total": 6, "unscored": { "present": 1, "defective": 1, "absent": 2 } }, { "id": "commerce", "label": "Commerce", "score": null, "counted": false, "pass": 0, "warn": 0, "fail": 0, "na": 5, "total": 5, "unscored": { "present": 0, "defective": 0, "absent": 0 } } ], "checks": [ { "id": "reachable", "category": "discoverability", "module": "core", "tier": "essential", "weight": 3, "conditional": false, "label": "Readable homepage", "why": "The homepage is the first URL every agent requests. An error or an empty page gives it nothing to read.", "skill": "agent-access", "standards": [], "status": "pass", "points": 1, "counted": true, "excluded": null, "detail": "Measured at https://www.cloudflare.com/, where https://cloudflare.com/ redirects (HTTP 301). HTTP 200 text/html, 1303 KB, 1092 words of visible text.", "evidence": "HTTP 200 · text/html · 1303 KB · final https://www.cloudflare.com/", "fix": null, "part": "standards" }, { "id": "robots-txt", "category": "botaccess", "module": "core", "tier": "essential", "weight": 2, "conditional": false, "label": "robots.txt crawl policy", "why": "Crawlers read robots.txt before they fetch a page (RFC 9309). Its Sitemap line tells them where the URL list is.", "skill": "robots-txt", "standards": [ "RFC 9309" ], "status": "pass", "points": 1, "counted": true, "excluded": null, "detail": "/robots.txt has 9 groups and 9 rules across all groups, and 1 Sitemap line.", "evidence": "HTTP 200 · text/plain · 1.1 KB · # Robots.txt for www.cloudflare.com User-agent: * Allow: / # Sitemap Sitemap: https://www.cloudflare.com/sitemap.xml # AI/LLM friendly cont…", "fix": null, "part": "standards" }, { "id": "sitemap-xml", "category": "discoverability", "module": "core", "tier": "essential", "weight": 2, "conditional": false, "label": "XML sitemap", "why": "A sitemap lists the URLs a site wants crawled. Google says a small, well-linked site may not need one.", "skill": "sitemap", "standards": [], "status": "pass", "points": 1, "counted": true, "excluded": null, "detail": "Sitemap https://www.cloudflare.com/sitemap.xml parses and lists 1011 URLs, each with .", "evidence": "HTTP 200 · application/xml · 1591 KB · root ", "fix": null, "part": "standards" }, { "id": "llms-txt", "category": "discoverability", "module": "core", "tier": "recommended", "weight": 1, "conditional": false, "label": "/llms.txt published and well-structured", "why": "A 2024 proposal for a markdown index of a site. Google Search does not use it.", "skill": "llms-txt", "standards": [ "llmstxt.org" ], "status": "pass", "points": 1, "counted": true, "excluded": null, "detail": "/llms.txt opens with H1 \"Cloudflare\", with 12 H2 link sections and 90 links, 16.8 KB. The scan requested 7 links it names, and each answered 2xx. Not requested: 7 links on another origin and 76 same-origin links (the scan samples up to 6).", "evidence": "HTTP 200 · text/plain · 16.8 KB · headings: Cloudflare | About Cloudflare | Developer Platform - Compute | Developer Platform - Storage | Developer Platform - AI |…", "fix": null, "part": "conventions" }, { "id": "link-headers", "category": "discoverability", "module": "core", "tier": "recommended", "weight": 1, "conditional": false, "label": "Discovery via Link response headers", "why": "A Link header (RFC 8288) points a client at a resource before it parses the HTML.", "skill": "link-headers", "standards": [ "RFC 8288" ], "status": "pass", "points": 1, "counted": true, "excluded": null, "detail": "The homepage Link header names the OpenAPI document at /openapi.json (rel=service-desc) and /llms.txt (rel=service-doc). It does not name a markdown variant of the homepage.", "evidence": "link: ; rel=\"api-catalog\", ; rel=\"service-desc\", ; rel=\"service-desc\", ; rel=\"service-desc\", ; rel=\"service-doc\", ", "fix": null, "part": "standards" }, { "id": "http-caching", "category": "discoverability", "module": "core", "tier": "recommended", "weight": 1, "conditional": false, "label": "HTTP caching of the homepage", "why": "Cache-Control says how long the homepage may be reused. A validator lets a crawler ask whether it changed, and a 304 answer skips the body.", "skill": "http-caching", "standards": [ "RFC 9111", "RFC 9110" ], "status": "warn", "points": 0.5, "counted": true, "excluded": null, "detail": "The homepage sends Cache-Control \"max-age=10\" and no ETag or Last-Modified header, so a crawler cannot ask whether it changed, and no conditional request was made.", "evidence": "Cache-Control: max-age=10 · ETag: (none) · Last-Modified: (none) · no conditional GET", "fix": "ETag: \"\"\n", "fixNote": "Most servers send an ETag or a Last-Modified header for a static page and answer If-None-Match with 304 Not Modified. A page rendered on each request needs the framework to set them.", "part": "standards" }, { "id": "indexing-directives", "category": "discoverability", "module": "core", "tier": "essential", "weight": 2, "conditional": false, "label": "Homepage indexable: no noindex directive", "why": "A noindex in a meta tag or in a response header keeps the page out of search results. Bing keeps it out of Copilot too.", "skill": "indexing-directives", "standards": [], "status": "pass", "points": 1, "counted": true, "excluded": null, "detail": "No noindex: the homepage has no robots meta tag for robots, bingbot or googlebot, and no X-Robots-Tag header.", "evidence": "no robots meta tag for robots, bingbot or googlebot, no X-Robots-Tag header", "fix": null, "part": "standards" }, { "id": "not-found-status", "category": "discoverability", "module": "core", "tier": "recommended", "weight": 1, "conditional": false, "label": "A real 404 for a missing page", "why": "A URL that does not exist answers 404 or 410 (RFC 9110). A 200 there makes every mistyped link look like a page.", "skill": "not-found-status", "standards": [ "RFC 9110" ], "status": "pass", "points": 1, "counted": true, "excluded": null, "detail": "/aws-probe-b7f46872c3f5, a path that does not exist, answered HTTP 404 after a redirect to https://www.cloudflare.com/aws-probe-b7f46872c3f5/.", "evidence": "HTTP 404 · text/html · first 16 KB read · final https://www.cloudflare.com/aws-probe-b7f46872c3f5/", "fix": null, "part": "standards" }, { "id": "structured-errors", "category": "discoverability", "module": "core", "tier": "recommended", "weight": 1, "conditional": false, "label": "Structured errors for JSON requests", "why": "An agent that asks for JSON and gets an HTML error page has to read a page meant for people. RFC 9457 defines a JSON error format.", "skill": "problem-details", "standards": [ "RFC 9457" ], "status": "fail", "points": 0, "counted": true, "excluded": null, "detail": "Not used: /aws-probe-b7f46872c3f5, asked for JSON, answered HTTP 404 with an HTML page, not a JSON error.", "evidence": "HTTP 404 · text/html · first 16 KB read · final https://www.cloudflare.com/aws-probe-b7f46872c3f5/", "fix": "{\n \"type\": \"about:blank\",\n \"title\": \"Not Found\",\n \"status\": 404,\n \"detail\": \"Nothing is published at this address.\"\n}\n", "fixNote": "Send this with Content-Type: application/problem+json and the status 404 when a request for a missing path asks for JSON. Browsers can keep the HTML page (RFC 9457).", "part": "conventions" }, { "id": "llms-full", "category": "discoverability", "module": "core", "tier": "recommended", "weight": 1, "conditional": false, "label": "/llms-full.txt expanded context", "why": "A convention that puts a site's text in one file. The llms.txt proposal does not define it.", "skill": "llms-full-txt", "standards": [], "status": "pass", "points": 1, "counted": true, "excluded": null, "detail": "/llms-full.txt carries 17307 words of page text in 166 KB. /llms.txt links it.", "evidence": "HTTP 200 · text/plain · 166 KB · # Cloudflare - Full Documentation > This is the expanded llms.txt for Cloudflare, containing full content from all page…", "fix": null, "part": "conventions" }, { "id": "markdown-negotiation", "category": "content", "module": "core", "tier": "recommended", "weight": 1, "conditional": false, "label": "Markdown content negotiation", "why": "Some coding agents ask for text/markdown. Google Search does not use markdown.", "skill": "markdown-negotiation", "standards": [ "RFC 9110" ], "status": "pass", "points": 1, "counted": true, "excluded": null, "detail": "The homepage serves text/markdown to `Accept: text/markdown, text/html;q=0.5`, with Vary: Accept, accept-encoding (HTTP 200).", "evidence": "HTTP 200 · text/markdown · Vary: Accept, accept-encoding · markdown body: yes", "fix": null, "part": "conventions" }, { "id": "headings", "category": "content", "module": "core", "tier": "essential", "weight": 2, "conditional": false, "label": "Semantic heading structure", "why": "Headings outline the page for screen readers and for any client that splits text by section.", "skill": "semantic-headings", "standards": [ "WCAG 2.2" ], "status": "pass", "points": 1, "counted": true, "excluded": null, "detail": "2 H1s, 4 H2s, and 12 H3s in an outline of 51 headings. It jumps from H2 to H6, which the WAI tutorial advises against; more than one H1 is valid HTML.", "evidence": "outline: H1 H2 H6 H6 H3 H3 H3 H2 H3 H2 H3 H3 H2 H3 H4 H4 H4 H4 H6 H6 H6 H4 H4 H4 H6 H4 H6 H6 H6 H6 H6 H6 H6 H6 H6 H4 H6 H6 H6 H6 (first 40 of 51)", "fix": null, "part": "standards" }, { "id": "meta", "category": "content", "module": "core", "tier": "essential", "weight": 2, "conditional": false, "label": "Title and description", "why": "The title and the description say what a page is about. Google uses them for the title link and the snippet.", "skill": "page-metadata", "standards": [], "status": "warn", "points": 0.5, "counted": true, "excluded": null, "detail": "Title \"Cloudflare: Build for the agent era\" (35 characters) and a description of 68 characters. The first H1 \"Everything we learned from powering 20% of the Internet—yours by defa…\" shares 0 of 3 words with the title, brand names aside. The other H1 does not reflect it either. Microsoft's guide to AI search answers (October 2025) asks for an H1 that matches the title or closely reflects it.", "evidence": "title (35 characters): Cloudflare: Build for the agent era · description (68 characters): Welcome to Cloudflare - Powering the next generation of applications · first H1: Everything we learned from powering 20% of the Internet—yours by default", "fix": null, "fixNote": "Give the first H1 and the title the same subject. Either can change, and brand names do not count.", "part": "standards" }, { "id": "jsonld", "category": "content", "module": "core", "tier": "essential", "weight": 3, "conditional": false, "label": "JSON-LD structured data", "why": "Structured data names the entity a page describes. Google reads JSON-LD, Microdata and RDFa alike.", "skill": "structured-data", "standards": [ "schema.org" ], "status": "pass", "points": 1, "counted": true, "excluded": null, "detail": "3 JSON-LD blocks parse, and the page entity, Organization \"Cloudflare\", is stated under a schema.org @context.", "evidence": "JSON-LD: 3 blocks, 3 parsed · schema.org @context: yes · Microdata: 0 items · RDFa: 0 items · top-level types: Organization, WebSite, WebPage", "fix": null, "part": "standards" }, { "id": "lang", "category": "content", "module": "core", "tier": "recommended", "weight": 1, "conditional": false, "label": "Language declaration and multilingual access", "why": "The lang attribute names the language of the text. WCAG 3.1.1 requires it at level A. Google reads hreflang, not lang.", "skill": "language-declaration", "standards": [ "WCAG 2.2", "BCP 47" ], "status": "pass", "points": 1, "counted": true, "excluded": null, "detail": "html lang=\"en\" with 10 hreflang alternates (x-default, es-es, fr-fr, de-de, it-it, pt-br), each with an absolute href, and one refers to this page.", "evidence": "html lang=\"en\" · alternates: x-default -> https://www.cloudflare.com/, es-es -> https://www.cloudflare.com/es-es/, fr-fr -> https://www.cloudflare.com/fr-fr/, de-de -> https://www.cloudflare.com/de-de/, it-it -> https://www.cloudflare.com/it-it/, pt-br -> https://www.cloudflare.com/pt-br/, zh-cn -> https://www.cloudflare.com/zh-cn/, ja-jp -> https://www.cloudflare.com/ja-jp/, …", "fix": null, "part": "standards" }, { "id": "no-js-fallback", "category": "content", "module": "core", "tier": "essential", "weight": 3, "conditional": false, "label": "Content that needs no JavaScript", "why": "Several AI crawlers do not run JavaScript. Text that appears only after scripts run is invisible to them.", "skill": "server-rendering", "standards": [], "status": "pass", "points": 1, "counted": true, "excluded": null, "detail": "6984 characters of text are in the HTML before any script runs.", "evidence": "static text: 6984 characters · inside