This is a real scan of 8 of our own live sites, run on August 22, 2026
Nothing on this page is written by hand or edited for effect. It is the report the pipeline produced, rendered exactly as a buyer receives it — the same findings, the same wording, the same fixes. We ran it on our own sites because a sample of someone else’s is not ours to publish.
Report rep_sample · catalog v1.0.0 · how it was produced is stated in full under Method below.
Our own fleet
8 sites · scanned August 22, 2026 · catalog v1.0.0
By severity
- 8High
- 24Low
Method: Each site was fetched over the public internet on 2026-08-22 — no credentials, no access to your code. We read the homepage, robots.txt, the sitemap, the certificate, a sample of the pages your sitemap lists and a sample of the links on your homepage, then applied 24 checks. Every finding below states what we actually observed, so you can re-run it yourself.
One fix, several sites
These failures appear on more than one site, which usually means one shared template or one shared config rather than several separate problems.
- High
Shared links show a preview image
8 sitesOn: vowcraft.forage.bot, depositclaim.forage.bot, reachpage.forage.bot, pricing-audit.forage.bot, trustpack.forage.bot, shiplog.forage.bot, runproof.forage.bot, namenest.forage.bot
Fix: Add an og:image meta tag pointing at a reachable 1200×630 image, and confirm the image URL itself loads.
- Low
Shared links are formatted for X and iMessage
8 sitesOn: vowcraft.forage.bot, depositclaim.forage.bot, reachpage.forage.bot, pricing-audit.forage.bot, trustpack.forage.bot, shiplog.forage.bot, runproof.forage.bot, namenest.forage.bot
Fix: Add <meta name="twitter:card" content="summary_large_image">.
- Low
Browsers are told not to guess file types
8 sitesOn: vowcraft.forage.bot, depositclaim.forage.bot, reachpage.forage.bot, pricing-audit.forage.bot, trustpack.forage.bot, shiplog.forage.bot, runproof.forage.bot, namenest.forage.bot
Fix: Send `X-Content-Type-Options: nosniff` on all responses.
- Low
Outbound links do not leak the full page address
8 sitesOn: vowcraft.forage.bot, depositclaim.forage.bot, reachpage.forage.bot, pricing-audit.forage.bot, trustpack.forage.bot, shiplog.forage.bot, runproof.forage.bot, namenest.forage.bot
Fix: Send `Referrer-Policy: strict-origin-when-cross-origin`.
Site by site, worst first
depositclaim.forage.bot
19 of 23 checks passed
- High
Shared links show a preview image
FailedWhat we saw: no og:image is declared, so shared links show a blank preview
Fix: Add an og:image meta tag pointing at a reachable 1200×630 image, and confirm the image URL itself loads.
- Low
Shared links are formatted for X and iMessage
FailedWhat we saw: no twitter:card tag
Fix: Add <meta name="twitter:card" content="summary_large_image">.
- Low
Browsers are told not to guess file types
FailedWhat we saw: X-Content-Type-Options is not set to nosniff
Fix: Send `X-Content-Type-Options: nosniff` on all responses.
- Low
Outbound links do not leak the full page address
FailedWhat we saw: no Referrer-Policy header
Fix: Send `Referrer-Policy: strict-origin-when-cross-origin`.
Show the 20 checks that did not fail
- Critical
The site answers at all
PassedWhat we saw: HTTP 200 in 222ms
- Critical
The security certificate is not about to expire
PassedWhat we saw: 86 days remaining
- Critical
Search engines are allowed to read the site
PassedWhat we saw: crawling is permitted
- High
The homepage has a title
PassedWhat we saw: "DepositClaim — get your security deposit back"
- High
The title is not a leftover starter-template default
PassedWhat we saw: the title is specific to this site
- High
No placeholder text was left on the page
PassedWhat we saw: no placeholder copy found
- High
The page is set up to work on phones
PassedWhat we saw: viewport is declared
- High
Pages that do not exist say so
PassedWhat we saw: an invented address returns HTTP 404
- High
Nothing on the page loads over an insecure connection
PassedWhat we saw: all resources load securely
- High
Links on the homepage go somewhere
PassedWhat we saw: 5 links checked, all resolve
- High
The sitemap does not advertise dead pages
PassedWhat we saw: 8 of 58 sampled, all resolve
- Medium
The site publishes a sitemap
PassedWhat we saw: 58 URLs at https://depositclaim.forage.bot/sitemap.xml
- Medium
The homepage has a search-result description
PassedWhat we saw: 303 characters
- Medium
The site has an icon for browser tabs
PassedWhat we saw: an icon is declared in the page head
- Medium
The canonical tag points at this site
PassedWhat we saw: no canonical tag declared
- Medium
Privacy and terms pages resolve
PassedWhat we saw: both pages resolve
- Low
Sitemap dates reflect the content, not the build clock
PassedWhat we saw: no lastmod declared, which is honest
- Low
The homepage loads without a chain of redirects
PassedWhat we saw: loads directly
- Low
The site insists on a secure connection
PassedWhat we saw: max-age=63072000
- Medium
The address works with and without www
Not checkedWhat we saw: only applies to a root domain
namenest.forage.bot
19 of 23 checks passed
- High
Shared links show a preview image
FailedWhat we saw: no og:image is declared, so shared links show a blank preview
Fix: Add an og:image meta tag pointing at a reachable 1200×630 image, and confirm the image URL itself loads.
- Low
Shared links are formatted for X and iMessage
FailedWhat we saw: no twitter:card tag
Fix: Add <meta name="twitter:card" content="summary_large_image">.
- Low
Browsers are told not to guess file types
FailedWhat we saw: X-Content-Type-Options is not set to nosniff
Fix: Send `X-Content-Type-Options: nosniff` on all responses.
- Low
Outbound links do not leak the full page address
FailedWhat we saw: no Referrer-Policy header
Fix: Send `Referrer-Policy: strict-origin-when-cross-origin`.
Show the 20 checks that did not fail
- Critical
The site answers at all
PassedWhat we saw: HTTP 200 in 121ms
- Critical
The security certificate is not about to expire
PassedWhat we saw: 45 days remaining
- Critical
Search engines are allowed to read the site
PassedWhat we saw: crawling is permitted
- High
The homepage has a title
PassedWhat we saw: "namenest — 30 personalized baby names for your family"
- High
The title is not a leftover starter-template default
PassedWhat we saw: the title is specific to this site
- High
No placeholder text was left on the page
PassedWhat we saw: no placeholder copy found
- High
The page is set up to work on phones
PassedWhat we saw: viewport is declared
- High
Pages that do not exist say so
PassedWhat we saw: an invented address returns HTTP 404
- High
Nothing on the page loads over an insecure connection
PassedWhat we saw: all resources load securely
- High
Links on the homepage go somewhere
PassedWhat we saw: 5 links checked, all resolve
- High
The sitemap does not advertise dead pages
PassedWhat we saw: 8 of 19 sampled, all resolve
- Medium
The site publishes a sitemap
PassedWhat we saw: 19 URLs at https://namenest.forage.bot/sitemap.xml
- Medium
The homepage has a search-result description
PassedWhat we saw: 286 characters
- Medium
The site has an icon for browser tabs
PassedWhat we saw: an icon is declared in the page head
- Medium
The canonical tag points at this site
PassedWhat we saw: no canonical tag declared
- Medium
Privacy and terms pages resolve
PassedWhat we saw: both pages resolve
- Low
Sitemap dates reflect the content, not the build clock
PassedWhat we saw: no lastmod declared, which is honest
- Low
The homepage loads without a chain of redirects
PassedWhat we saw: loads directly
- Low
The site insists on a secure connection
PassedWhat we saw: max-age=63072000
- Medium
The address works with and without www
Not checkedWhat we saw: only applies to a root domain
pricing-audit.forage.bot
19 of 23 checks passed
- High
Shared links show a preview image
FailedWhat we saw: no og:image is declared, so shared links show a blank preview
Fix: Add an og:image meta tag pointing at a reachable 1200×630 image, and confirm the image URL itself loads.
- Low
Shared links are formatted for X and iMessage
FailedWhat we saw: no twitter:card tag
Fix: Add <meta name="twitter:card" content="summary_large_image">.
- Low
Browsers are told not to guess file types
FailedWhat we saw: X-Content-Type-Options is not set to nosniff
Fix: Send `X-Content-Type-Options: nosniff` on all responses.
- Low
Outbound links do not leak the full page address
FailedWhat we saw: no Referrer-Policy header
Fix: Send `Referrer-Policy: strict-origin-when-cross-origin`.
Show the 20 checks that did not fail
- Critical
The site answers at all
PassedWhat we saw: HTTP 200 in 216ms
- Critical
The security certificate is not about to expire
PassedWhat we saw: 31 days remaining
- Critical
Search engines are allowed to read the site
PassedWhat we saw: crawling is permitted
- High
The homepage has a title
PassedWhat we saw: "Pricing Audit"
- High
The title is not a leftover starter-template default
PassedWhat we saw: the title is specific to this site
- High
No placeholder text was left on the page
PassedWhat we saw: no placeholder copy found
- High
The page is set up to work on phones
PassedWhat we saw: viewport is declared
- High
Pages that do not exist say so
PassedWhat we saw: an invented address returns HTTP 404
- High
Nothing on the page loads over an insecure connection
PassedWhat we saw: all resources load securely
- High
Links on the homepage go somewhere
PassedWhat we saw: 4 links checked, all resolve
- High
The sitemap does not advertise dead pages
PassedWhat we saw: 8 of 27 sampled, all resolve
- Medium
The site publishes a sitemap
PassedWhat we saw: 27 URLs at https://pricing-audit.forage.bot/sitemap.xml
- Medium
The homepage has a search-result description
PassedWhat we saw: 137 characters
- Medium
The site has an icon for browser tabs
PassedWhat we saw: an icon is declared in the page head
- Medium
The canonical tag points at this site
PassedWhat we saw: no canonical tag declared
- Medium
Privacy and terms pages resolve
PassedWhat we saw: both pages resolve
- Low
Sitemap dates reflect the content, not the build clock
PassedWhat we saw: 20 distinct dates across 22 entries
- Low
The homepage loads without a chain of redirects
PassedWhat we saw: loads directly
- Low
The site insists on a secure connection
PassedWhat we saw: max-age=63072000
- Medium
The address works with and without www
Not checkedWhat we saw: only applies to a root domain
reachpage.forage.bot
19 of 23 checks passed
- High
Shared links show a preview image
FailedWhat we saw: no og:image is declared, so shared links show a blank preview
Fix: Add an og:image meta tag pointing at a reachable 1200×630 image, and confirm the image URL itself loads.
- Low
Shared links are formatted for X and iMessage
FailedWhat we saw: no twitter:card tag
Fix: Add <meta name="twitter:card" content="summary_large_image">.
- Low
Browsers are told not to guess file types
FailedWhat we saw: X-Content-Type-Options is not set to nosniff
Fix: Send `X-Content-Type-Options: nosniff` on all responses.
- Low
Outbound links do not leak the full page address
FailedWhat we saw: no Referrer-Policy header
Fix: Send `Referrer-Policy: strict-origin-when-cross-origin`.
Show the 20 checks that did not fail
- Critical
The site answers at all
PassedWhat we saw: HTTP 200 in 202ms
- Critical
The security certificate is not about to expire
PassedWhat we saw: 88 days remaining
- Critical
Search engines are allowed to read the site
PassedWhat we saw: crawling is permitted
- High
The homepage has a title
PassedWhat we saw: "reachpage — web accessibility audit"
- High
The title is not a leftover starter-template default
PassedWhat we saw: the title is specific to this site
- High
No placeholder text was left on the page
PassedWhat we saw: no placeholder copy found
- High
The page is set up to work on phones
PassedWhat we saw: viewport is declared
- High
Pages that do not exist say so
PassedWhat we saw: an invented address returns HTTP 404
- High
Nothing on the page loads over an insecure connection
PassedWhat we saw: all resources load securely
- High
Links on the homepage go somewhere
PassedWhat we saw: 7 links checked, all resolve
- High
The sitemap does not advertise dead pages
PassedWhat we saw: 8 of 42 sampled, all resolve
- Medium
The site publishes a sitemap
PassedWhat we saw: 42 URLs at https://reachpage.forage.bot/sitemap.xml
- Medium
The homepage has a search-result description
PassedWhat we saw: 169 characters
- Medium
The site has an icon for browser tabs
PassedWhat we saw: an icon is declared in the page head
- Medium
The canonical tag points at this site
PassedWhat we saw: no canonical tag declared
- Medium
Privacy and terms pages resolve
PassedWhat we saw: both pages resolve
- Low
Sitemap dates reflect the content, not the build clock
PassedWhat we saw: 31 distinct dates across 36 entries
- Low
The homepage loads without a chain of redirects
PassedWhat we saw: loads directly
- Low
The site insists on a secure connection
PassedWhat we saw: max-age=63072000
- Medium
The address works with and without www
Not checkedWhat we saw: only applies to a root domain
runproof.forage.bot
19 of 23 checks passed
- High
Shared links show a preview image
FailedWhat we saw: no og:image is declared, so shared links show a blank preview
Fix: Add an og:image meta tag pointing at a reachable 1200×630 image, and confirm the image URL itself loads.
- Low
Shared links are formatted for X and iMessage
FailedWhat we saw: no twitter:card tag
Fix: Add <meta name="twitter:card" content="summary_large_image">.
- Low
Browsers are told not to guess file types
FailedWhat we saw: X-Content-Type-Options is not set to nosniff
Fix: Send `X-Content-Type-Options: nosniff` on all responses.
- Low
Outbound links do not leak the full page address
FailedWhat we saw: no Referrer-Policy header
Fix: Send `Referrer-Policy: strict-origin-when-cross-origin`.
Show the 20 checks that did not fail
- Critical
The site answers at all
PassedWhat we saw: HTTP 200 in 124ms
- Critical
The security certificate is not about to expire
PassedWhat we saw: 86 days remaining
- Critical
Search engines are allowed to read the site
PassedWhat we saw: crawling is permitted
- High
The homepage has a title
PassedWhat we saw: "RunProof"
- High
The title is not a leftover starter-template default
PassedWhat we saw: the title is specific to this site
- High
No placeholder text was left on the page
PassedWhat we saw: no placeholder copy found
- High
The page is set up to work on phones
PassedWhat we saw: viewport is declared
- High
Pages that do not exist say so
PassedWhat we saw: an invented address returns HTTP 404
- High
Nothing on the page loads over an insecure connection
PassedWhat we saw: all resources load securely
- High
Links on the homepage go somewhere
PassedWhat we saw: 4 links checked, all resolve
- High
The sitemap does not advertise dead pages
PassedWhat we saw: 6 of 6 sampled, all resolve
- Medium
The site publishes a sitemap
PassedWhat we saw: 6 URLs at https://runproof.forage.bot/sitemap.xml
- Medium
The homepage has a search-result description
PassedWhat we saw: 149 characters
- Medium
The site has an icon for browser tabs
PassedWhat we saw: an icon is declared in the page head
- Medium
The canonical tag points at this site
PassedWhat we saw: no canonical tag declared
- Medium
Privacy and terms pages resolve
PassedWhat we saw: both pages resolve
- Low
Sitemap dates reflect the content, not the build clock
PassedWhat we saw: no lastmod declared, which is honest
- Low
The homepage loads without a chain of redirects
PassedWhat we saw: loads directly
- Low
The site insists on a secure connection
PassedWhat we saw: max-age=63072000
- Medium
The address works with and without www
Not checkedWhat we saw: only applies to a root domain
shiplog.forage.bot
19 of 23 checks passed
- High
Shared links show a preview image
FailedWhat we saw: no og:image is declared, so shared links show a blank preview
Fix: Add an og:image meta tag pointing at a reachable 1200×630 image, and confirm the image URL itself loads.
- Low
Shared links are formatted for X and iMessage
FailedWhat we saw: no twitter:card tag
Fix: Add <meta name="twitter:card" content="summary_large_image">.
- Low
Browsers are told not to guess file types
FailedWhat we saw: X-Content-Type-Options is not set to nosniff
Fix: Send `X-Content-Type-Options: nosniff` on all responses.
- Low
Outbound links do not leak the full page address
FailedWhat we saw: no Referrer-Policy header
Fix: Send `Referrer-Policy: strict-origin-when-cross-origin`.
Show the 20 checks that did not fail
- Critical
The site answers at all
PassedWhat we saw: HTTP 200 in 220ms
- Critical
The security certificate is not about to expire
PassedWhat we saw: 32 days remaining
- Critical
Search engines are allowed to read the site
PassedWhat we saw: crawling is permitted
- High
The homepage has a title
PassedWhat we saw: "Shiplog"
- High
The title is not a leftover starter-template default
PassedWhat we saw: the title is specific to this site
- High
No placeholder text was left on the page
PassedWhat we saw: no placeholder copy found
- High
The page is set up to work on phones
PassedWhat we saw: viewport is declared
- High
Pages that do not exist say so
PassedWhat we saw: an invented address returns HTTP 404
- High
Nothing on the page loads over an insecure connection
PassedWhat we saw: all resources load securely
- High
Links on the homepage go somewhere
PassedWhat we saw: 3 links checked, all resolve
- High
The sitemap does not advertise dead pages
PassedWhat we saw: 5 of 5 sampled, all resolve
- Medium
The site publishes a sitemap
PassedWhat we saw: 5 URLs at https://shiplog.forage.bot/sitemap.xml
- Medium
The homepage has a search-result description
PassedWhat we saw: 121 characters
- Medium
The site has an icon for browser tabs
PassedWhat we saw: an icon is declared in the page head
- Medium
The canonical tag points at this site
PassedWhat we saw: no canonical tag declared
- Medium
Privacy and terms pages resolve
PassedWhat we saw: both pages resolve
- Low
Sitemap dates reflect the content, not the build clock
PassedWhat we saw: no lastmod declared, which is honest
- Low
The homepage loads without a chain of redirects
PassedWhat we saw: loads directly
- Low
The site insists on a secure connection
PassedWhat we saw: max-age=63072000
- Medium
The address works with and without www
Not checkedWhat we saw: only applies to a root domain
trustpack.forage.bot
19 of 23 checks passed
- High
Shared links show a preview image
FailedWhat we saw: no og:image is declared, so shared links show a blank preview
Fix: Add an og:image meta tag pointing at a reachable 1200×630 image, and confirm the image URL itself loads.
- Low
Shared links are formatted for X and iMessage
FailedWhat we saw: no twitter:card tag
Fix: Add <meta name="twitter:card" content="summary_large_image">.
- Low
Browsers are told not to guess file types
FailedWhat we saw: X-Content-Type-Options is not set to nosniff
Fix: Send `X-Content-Type-Options: nosniff` on all responses.
- Low
Outbound links do not leak the full page address
FailedWhat we saw: no Referrer-Policy header
Fix: Send `Referrer-Policy: strict-origin-when-cross-origin`.
Show the 20 checks that did not fail
- Critical
The site answers at all
PassedWhat we saw: HTTP 200 in 151ms
- Critical
The security certificate is not about to expire
PassedWhat we saw: 78 days remaining
- Critical
Search engines are allowed to read the site
PassedWhat we saw: crawling is permitted
- High
The homepage has a title
PassedWhat we saw: "Trustpack — security policies, questionnaire answers, and a trust page for small SaaS teams"
- High
The title is not a leftover starter-template default
PassedWhat we saw: the title is specific to this site
- High
No placeholder text was left on the page
PassedWhat we saw: no placeholder copy found
- High
The page is set up to work on phones
PassedWhat we saw: viewport is declared
- High
Pages that do not exist say so
PassedWhat we saw: an invented address returns HTTP 404
- High
Nothing on the page loads over an insecure connection
PassedWhat we saw: all resources load securely
- High
Links on the homepage go somewhere
PassedWhat we saw: 6 links checked, all resolve
- High
The sitemap does not advertise dead pages
PassedWhat we saw: 8 of 50 sampled, all resolve
- Medium
The site publishes a sitemap
PassedWhat we saw: 50 URLs at https://trustpack.forage.bot/sitemap.xml
- Medium
The homepage has a search-result description
PassedWhat we saw: 282 characters
- Medium
The site has an icon for browser tabs
PassedWhat we saw: an icon is declared in the page head
- Medium
The canonical tag points at this site
PassedWhat we saw: no canonical tag declared
- Medium
Privacy and terms pages resolve
PassedWhat we saw: both pages resolve
- Low
Sitemap dates reflect the content, not the build clock
PassedWhat we saw: no lastmod declared, which is honest
- Low
The homepage loads without a chain of redirects
PassedWhat we saw: loads directly
- Low
The site insists on a secure connection
PassedWhat we saw: max-age=63072000
- Medium
The address works with and without www
Not checkedWhat we saw: only applies to a root domain
vowcraft.forage.bot
19 of 23 checks passed
- High
Shared links show a preview image
FailedWhat we saw: no og:image is declared, so shared links show a blank preview
Fix: Add an og:image meta tag pointing at a reachable 1200×630 image, and confirm the image URL itself loads.
- Low
Shared links are formatted for X and iMessage
FailedWhat we saw: no twitter:card tag
Fix: Add <meta name="twitter:card" content="summary_large_image">.
- Low
Browsers are told not to guess file types
FailedWhat we saw: X-Content-Type-Options is not set to nosniff
Fix: Send `X-Content-Type-Options: nosniff` on all responses.
- Low
Outbound links do not leak the full page address
FailedWhat we saw: no Referrer-Policy header
Fix: Send `Referrer-Policy: strict-origin-when-cross-origin`.
Show the 20 checks that did not fail
- Critical
The site answers at all
PassedWhat we saw: HTTP 200 in 249ms
- Critical
The security certificate is not about to expire
PassedWhat we saw: 53 days remaining
- Critical
Search engines are allowed to read the site
PassedWhat we saw: crawling is permitted
- High
The homepage has a title
PassedWhat we saw: "vowcraft — paired wedding vows that fit together, not two strangers' speeches"
- High
The title is not a leftover starter-template default
PassedWhat we saw: the title is specific to this site
- High
No placeholder text was left on the page
PassedWhat we saw: no placeholder copy found
- High
The page is set up to work on phones
PassedWhat we saw: viewport is declared
- High
Pages that do not exist say so
PassedWhat we saw: an invented address returns HTTP 404
- High
Nothing on the page loads over an insecure connection
PassedWhat we saw: all resources load securely
- High
Links on the homepage go somewhere
PassedWhat we saw: 5 links checked, all resolve
- High
The sitemap does not advertise dead pages
PassedWhat we saw: 8 of 197 sampled, all resolve
- Medium
The site publishes a sitemap
PassedWhat we saw: 197 URLs at https://vowcraft.forage.bot/sitemap.xml
- Medium
The homepage has a search-result description
PassedWhat we saw: 390 characters
- Medium
The site has an icon for browser tabs
PassedWhat we saw: an icon is declared in the page head
- Medium
The canonical tag points at this site
PassedWhat we saw: no canonical tag declared
- Medium
Privacy and terms pages resolve
PassedWhat we saw: both pages resolve
- Low
Sitemap dates reflect the content, not the build clock
PassedWhat we saw: no lastmod declared, which is honest
- Low
The homepage loads without a chain of redirects
PassedWhat we saw: loads directly
- Low
The site insists on a secure connection
PassedWhat we saw: max-age=63072000
- Medium
The address works with and without www
Not checkedWhat we saw: only applies to a root domain
Now run it on yours
One site is free and gets every check in full. The paid report covers up to 25 sites and shows you which failures are one shared cause rather than several.
Scan a site free →