ranchbutch.com

Standards-mode <!doctype html> present.

<html> declares a language.

Character encoding declared.

Responsive viewport meta present.

Page has a non-empty <title>.

Meta description present.

Canonical link present.

No favicon/app-icon links found.

No theme-color — mobile browser UI will not match your brand.

No color-scheme — form controls and scrollbars will not adapt to dark mode.

Open Graph tags present.

No feed discovery link found — only relevant if the site publishes a feed.

Feed content quality cannot be assessed from a page scan.

No popover attributes — only applies if the page has popovers/menus.

robots.txt is served.

An XML sitemap is present or referenced.

Sitemap index in use.

No image/video sitemap extensions detected.

URL path is clean and readable.

http:// redirects to https with a 3xx status.

Nonexistent paths return a real 404/410.

Indexing is not being blocked by robots meta / X-Robots-Tag.

Exactly one <h1> heading.

33 internal links found.

No JSON-LD — add schema.org structured data for rich results.

No breadcrumb structured data or navigation found.

IndexNow integration cannot be detected from a page scan.

Colour contrast requires rendering analysis — review with an automated contrast checker.

All 14 images declare alt text.

2 form fields but only 0 label/aria-label associations — label every input.

Keyboard operability needs interactive testing.

Focus-indicator visibility needs rendering review.

No skip link — keyboard users must tab through the nav on every page.

Semantic landmark elements in use.

No obvious ARIA misuse, but full review needs assistive-tech testing.

Link-text quality needs manual review.

No empty links or buttons detected.

Form-error accessibility needs interactive testing.

Document language is declared.

No inline prefers-reduced-motion rule — verify external CSS respects reduced motion.

No accessibility-overlay widget detected.

Audio/video present without caption <track>s or transcripts.

No data tables on the page.

Touch-target sizing needs rendering measurement.

Not used — only relevant for collapsible/accordion content.

Could not confirm use of native interactive elements.

CSS selector strategy needs source review.

Page is served over HTTPS.

No Strict-Transport-Security header — browsers will not enforce HTTPS.

No CSP header — the page has no defence-in-depth against injected scripts.

No /.well-known/security.txt — researchers have no disclosure contact.

No X-Content-Type-Options: nosniff — browsers may MIME-sniff responses.

No frame-ancestors or X-Frame-Options — the page can be framed for clickjacking.

No Referrer-Policy — full URLs may leak to third parties.

No Permissions-Policy — powerful browser features are not locked down.

Cross-origin scripts use integrity hashes.

3/3 cookies missing Secure/HttpOnly/SameSite.

CAA records are not collected by the scanner — check your DNS provider.

DNSSEC status is not collected by the scanner.

No /.well-known/ resources found.

No change-password redirect — recommended if the site has accounts.

Not present — only relevant for OIDC identity providers.

Not present — recommended if the site exposes public APIs.

Not present — only relevant for federated identity.

Not present — only needed for iOS Universal Links.

Not present — only needed for Android App Links.

Not present — only relevant for Fediverse servers.

Not present — optional prefetch-proxy control file.

No agent-readiness signals (no llms.txt, no structured data).

No /llms.txt — agents have no curated map of your key content.

No /llms-full.txt — optional full-content variant.

No Markdown source endpoint detected — recommended for content/doc sites.

robots.txt has no explicit AI-crawler rules — state your stance on GPTBot/ClaudeBot/etc.

No Content-Signal directives — optional usage-preference signalling.

Web Bot Auth support cannot be detected from a scan.

URL has no obvious session/volatile parameters.

No structured data — agents must scrape prose instead of reading typed facts.

No machine-readable alternates detected — recommended for listings/data pages.

No HTTP Link header — recommended to surface related resources to agents.

No MCP/tool discovery endpoint — optional.

No A2A agent card — optional.

Agent Skills discovery cannot be detected automatically.

DNS-AID records are not collected by the scanner.

NLWeb support cannot be detected automatically.

WebMCP support cannot be detected automatically.

Schemamap support cannot be detected automatically.

Lab load completed in 1580ms (a proxy). Confirm LCP/INP/CLS with field data.

None of 13 raster images use WebP/AVIF — convert from PNG/JPEG.

loading="lazy" is used.

No resource hints — preconnect to critical origins and preload the LCP asset.

Cache-Control set on the document (public, s-maxage=0).

Not set — optional; helps cache/prefetch URLs that differ only by tracking params.

Document is compressed (gzip).

No inline font-display/preload — ensure web fonts use font-display: swap to avoid invisible text.

2 render-blocking stylesheet(s) in <head>.

0/4 external scripts use defer/async/module — add defer to the rest.

Protocol version not captured — verify HTTP/2/3 is enabled at your edge/CDN.

No Speculation Rules — optionally prerender/prefetch likely next pages.

No resource hints found on the page.

No View Transitions detected — optional polish for navigations.

BFCache eligibility needs runtime testing.

No content-visibility detected — optional offscreen-render optimisation.

No CSS containment detected — optional.

Not detected — optional.

No scrollbar-gutter — optional; prevents layout shift when scrollbars toggle.

No privacy policy link found — link one from every page (usually the footer).

Cookies are set but no consent manager was detected — non-essential cookies need consent.

GPC handling is server-side and cannot be confirmed from a scan.

1 third-party script origin(s) — audit each for data collection.

No analytics detected, or an unrecognised provider.

Data-minimisation practices need a manual review of forms and backend.

Missing pages return 404 with a substantial (likely custom) error page.

Maintenance behaviour can only be observed during downtime.

No service worker detected — optional offline/PWA support.

No <link rel="manifest"> — add a web app manifest for installability.

Monitoring is operational and cannot be detected from the page.