No Web Bot Auth signing directory
Web Bot Auth is a standard that lets a verified AI agent cryptographically prove its identity when it requests your content, so you can distinguish trusted agents from anonymous scrapers and treat them differently. This check found your site publishes no signing directory for it.
Why this matters
This only matters if you want to selectively admit verified AI agents while blocking unverified scrapers; if you're not trying to make that distinction, there's no loss here. It's an early-stage standard with limited adoption so far, which makes publishing one now more of a forward-looking signal than a competitive necessity.
How to fix it
Your developer needs about half a day, and only if this applies to your goals. Publish /.well-known/http-message-signatures-directory listing the public keys of agents you operate or choose to admit as verified. Most businesses can safely leave this until scraper traffic becomes a genuine, measurable problem.
Turn website findings into an action plan
Create an account to start a Full Audit of your website, with supporting evidence and a prioritised action plan.
Start Full Audit