{
"data": {
"slug": "58828e67",
"url": "https://martinus.sk",
"domain": "martinus.sk",
"overall_score": 55,
"scores_json": {
"seo": {
"score": 51,
"checks": [
{
"i18n": {
"key": "seo.meta-title.pass",
"params": {
"chars": 33,
"title": "Making sure you're not a bot!"
}
},
"name": "Meta Title",
"value": "33 chars — \"Making sure you're not a bot!\"",
"status": "pass",
"evidence": {
"source": "HTML-heuristic"
}
},
{
"i18n": {
"key": "seo.meta-desc.fail-missing"
},
"name": "Meta Description",
"status": "fail",
"evidence": {
"source": "HTML-heuristic"
},
"howToFix": "Write a compelling meta description (120-160 chars) with a call-to-action. Include your target keyword naturally.",
"whyMatters": "Without a meta description, Google auto-generates one — often poorly. A custom description gives you control over the SERP snippet and improves click-through."
},
{
"i18n": {
"key": "seo.h1.pass",
"params": {
"text": "Making sure you're not a bot!"
}
},
"name": "H1 Heading",
"value": "\"Making sure you're not a bot!\"",
"status": "pass",
"evidence": {
"source": "HTML-heuristic"
}
},
{
"i18n": {
"key": "seo.h2.fail"
},
"name": "Content Structure (H2 Headings)",
"status": "fail",
"evidence": {
"source": "HTML-heuristic"
},
"howToFix": "Add H2 subheadings to structure your content. Each major section should have a descriptive H2.",
"whyMatters": "Pages without heading structure are harder to scan and miss long-tail ranking opportunities."
},
{
"i18n": {
"key": "seo.og.fail"
},
"name": "Open Graph Tags",
"status": "fail",
"evidence": {
"source": "HTML-heuristic"
},
"howToFix": "Add og:title, og:description, og:image (1200×630px), and og:type meta tags to every page.",
"whyMatters": "Without OG tags, social platforms show auto-generated previews. Proper OG tags produce clean, clickable link cards."
},
{
"i18n": {
"key": "seo.twitter.warning"
},
"name": "Twitter/X Cards",
"status": "warning",
"evidence": {
"source": "HTML-heuristic"
},
"howToFix": "Add , , , "
}
},
"name": "Semantic HTML Structure",
"value": "Only 2/6 semantic elements — missing: , , , ",
"status": "warning",
"evidence": {
"source": "HTML-heuristic"
},
"howToFix": "Use semantic HTML5 elements: , , , , , . These help search engines understand page structure and improve accessibility.",
"whyMatters": "Semantic HTML gives search engines clear signals about content structure. Pages with proper semantic markup earn more featured snippets and knowledge panel appearances."
},
{
"i18n": {
"key": "seo.content-depth.warning",
"params": {
"words": 214
}
},
"name": "Content Depth",
"value": "Only 214 words — thin content",
"status": "warning",
"evidence": {
"source": "HTML-heuristic"
},
"howToFix": "Add more unique, valuable content. Product pages should have 150+ word descriptions. Category pages benefit from 200+ word introductions. Blog posts need 800+ words to rank.",
"whyMatters": "Google's Helpful Content Update targets thin content pages. Pages with under 300 words rarely rank for competitive keywords. More content means more keyword opportunities."
},
{
"i18n": {
"key": "seo.internal-links.fail-none"
},
"name": "Internal Linking",
"value": "No internal links found",
"status": "fail",
"evidence": {
"source": "HTML-heuristic"
},
"howToFix": "Add internal links to other pages on your site. Every page should link to related content, categories, and key landing pages.",
"whyMatters": "A page with zero internal links is isolated from your site's link graph. Google may treat it as low-priority or not index it at all."
},
{
"i18n": {
"key": "seo.a11y.pass",
"params": {
"detail": "1 ARIA roles, 1 ARIA labels, lang=\"en\"",
"signals": 3
}
},
"name": "Accessibility Fundamentals",
"value": "3/4 a11y signals: 1 ARIA roles, 1 ARIA labels, lang=\"en\"",
"status": "pass",
"evidence": {
"source": "HTML-heuristic"
}
},
{
"i18n": {
"key": "seo.robots-noindex.fail",
"params": {
"value": "noindex,nofollow"
}
},
"name": "Robots Noindex Warning",
"value": "meta robots=\"noindex,nofollow\" — page excluded from search!",
"status": "fail",
"evidence": {
"source": "HTML-heuristic"
},
"howToFix": "Your page has 'noindex' which blocks it from Google entirely. Remove 'noindex' unless this page is intentionally hidden (staging, duplicates).",
"whyMatters": "Noindex removes your page from Google completely. If this is your homepage or a key product page, you're invisible to search. This is one of the most common and damaging SEO mistakes."
},
{
"i18n": {
"key": "seo.sitemap-freshness.pass",
"params": {
"days": 0
}
},
"name": "Sitemap Freshness",
"value": "Newest 0 day(s) ago",
"status": "pass",
"evidence": {
"source": "HTML-heuristic"
}
}
]
},
"gdpr": {
"score": 42,
"checks": [
{
"i18n": {
"key": "gdpr.cmp.fail"
},
"name": "Cookie Consent Banner (CMP)",
"status": "fail",
"fixLink": {
"url": "https://www.inger.sk/#contact",
"label": "Get GDPR Compliance →"
},
"evidence": {
"source": "HTML-heuristic"
},
"howToFix": "Install a certified consent management platform: Cookiebot, OneTrust, Usercentrics, or CookieYes. The CMP must block ALL non-essential cookies and scripts until explicit consent is given (opt-in, not opt-out).",
"legalRefs": {
"gdpr": [
"Art. 6(1)(a)",
"Art. 7"
],
"skLaw": [
"§ 14"
],
"verified": [
{
"title": "Zákonnosť spracúvania",
"source": "Zdroj: EUR-Lex (eur-lex.europa.eu), © Európska únia, 1998–2026. Autentické je iba znenie publikované v elektronickom Úradnom vestníku Európskej únie.",
"excerpt": "Article 6 — Zákonnosť spracúvania 1. Spracúvanie je zákonné iba vtedy a iba v tom rozsahu, keď je splnená aspoň jedna z týchto podmienok: Písmeno f) prvého pododseku sa nevzťahuje na spracúvanie vykonávané orgánmi verejnej moci pri výkone i",
"citation": "čl. 6 nariadenia (EÚ) 2016/679",
"jurisdiction": "eu"
},
{
"title": "Podmienky vyjadrenia súhlasu",
"source": "Zdroj: EUR-Lex (eur-lex.europa.eu), © Európska únia, 1998–2026. Autentické je iba znenie publikované v elektronickom Úradnom vestníku Európskej únie.",
"excerpt": "Article 7 — Podmienky vyjadrenia súhlasu 1. Ak je spracúvanie založené na súhlase, prevádzkovateľ musí vedieť preukázať, že dotknutá osoba vyjadrila súhlas so spracúvaním svojich osobných údajov. 2. Ak dá dotknutá osoba súhlas v rámci písom",
"citation": "čl. 7 nariadenia (EÚ) 2016/679",
"jurisdiction": "eu"
},
{
"title": "Podmienky poskytnutia súhlasu so spracúvaním osobných údajov",
"excerpt": "§ 14 Podmienky poskytnutia súhlasu so spracúvaním osobných údajov (1) Ak je spracúvanie osobných údajov založené na súhlase dotknutej osoby, prevádzkovateľ je povinný kedykoľvek vedieť preukázať, že dotknutá osoba poskytla súhlas so spracúv",
"citation": "§14 zákona č. 18/2018 Z.z.",
"jurisdiction": "sk"
}
]
},
"whyMatters": "Since 2024, EU regulators actively enforce cookie consent. A non-compliant cookie banner is one of the most frequently fined GDPR offences."
},
{
"i18n": {
"key": "gdpr.tracking.pass-none"
},
"name": "Tracking Scripts & Consent",
"value": "No tracking scripts detected",
"status": "pass",
"evidence": {
"source": "HTML-heuristic"
},
"legalRefs": {
"gdpr": [
"Art. 6(1)(a)",
"Art. 7",
"EDPB Opinion 5/2019"
],
"skLaw": [
"§ 14"
],
"verified": [
{
"title": "Zákonnosť spracúvania",
"source": "Zdroj: EUR-Lex (eur-lex.europa.eu), © Európska únia, 1998–2026. Autentické je iba znenie publikované v elektronickom Úradnom vestníku Európskej únie.",
"excerpt": "Article 6 — Zákonnosť spracúvania 1. Spracúvanie je zákonné iba vtedy a iba v tom rozsahu, keď je splnená aspoň jedna z týchto podmienok: Písmeno f) prvého pododseku sa nevzťahuje na spracúvanie vykonávané orgánmi verejnej moci pri výkone i",
"citation": "čl. 6 nariadenia (EÚ) 2016/679",
"jurisdiction": "eu"
},
{
"title": "Podmienky vyjadrenia súhlasu",
"source": "Zdroj: EUR-Lex (eur-lex.europa.eu), © Európska únia, 1998–2026. Autentické je iba znenie publikované v elektronickom Úradnom vestníku Európskej únie.",
"excerpt": "Article 7 — Podmienky vyjadrenia súhlasu 1. Ak je spracúvanie založené na súhlase, prevádzkovateľ musí vedieť preukázať, že dotknutá osoba vyjadrila súhlas so spracúvaním svojich osobných údajov. 2. Ak dá dotknutá osoba súhlas v rámci písom",
"citation": "čl. 7 nariadenia (EÚ) 2016/679",
"jurisdiction": "eu"
},
{
"title": "Podmienky poskytnutia súhlasu so spracúvaním osobných údajov",
"excerpt": "§ 14 Podmienky poskytnutia súhlasu so spracúvaním osobných údajov (1) Ak je spracúvanie osobných údajov založené na súhlase dotknutej osoby, prevádzkovateľ je povinný kedykoľvek vedieť preukázať, že dotknutá osoba poskytla súhlas so spracúv",
"citation": "§14 zákona č. 18/2018 Z.z.",
"jurisdiction": "sk"
}
]
}
},
{
"i18n": {
"key": "gdpr.privacy-policy.fail"
},
"name": "Privacy Policy Page",
"status": "fail",
"evidence": {
"source": "HTML-heuristic"
},
"howToFix": "Create a comprehensive privacy policy covering: what data you collect, why (legal basis), how long you store it, who you share it with, and how users can exercise their GDPR rights (access, deletion, portability).",
"legalRefs": {
"gdpr": [
"Art. 12",
"Art. 13",
"Art. 14"
],
"skLaw": [
"§ 19",
"§ 20"
],
"verified": [
{
"title": "Transparentnosť informácií, oznámenia a postupy výkonu práv dotknutej osoby",
"source": "Zdroj: EUR-Lex (eur-lex.europa.eu), © Európska únia, 1998–2026. Autentické je iba znenie publikované v elektronickom Úradnom vestníku Európskej únie.",
"excerpt": "Article 12 — Transparentnosť informácií, oznámenia a postupy výkonu práv dotknutej osoby 3. Prevádzkovateľ poskytne dotknutej osobe informácie o opatreniach, ktoré sa prijali na základe žiadosti podľa článkov 15 až 22, bez zbytočného odklad",
"citation": "čl. 12 nariadenia (EÚ) 2016/679",
"jurisdiction": "eu"
},
{
"title": "Informácie, ktoré sa majú poskytovať pri získavaní osobných údajov od dotknutej osoby",
"source": "Zdroj: EUR-Lex (eur-lex.europa.eu), © Európska únia, 1998–2026. Autentické je iba znenie publikované v elektronickom Úradnom vestníku Európskej únie.",
"excerpt": "Article 13 — Informácie, ktoré sa majú poskytovať pri získavaní osobných údajov od dotknutej osoby 2. Okrem informácií, ktoré sa uvádzajú v odseku 1, prevádzkovateľ poskytne dotknutej osobe pri získavaní osobných údajov tieto ďalšie informá",
"citation": "čl. 13 nariadenia (EÚ) 2016/679",
"jurisdiction": "eu"
},
{
"title": "Informácie, ktoré sa majú poskytnúť, ak osobné údaje neboli získané od dotknutej osoby",
"source": "Zdroj: EUR-Lex (eur-lex.europa.eu), © Európska únia, 1998–2026. Autentické je iba znenie publikované v elektronickom Úradnom vestníku Európskej únie.",
"excerpt": "Article 14 — Informácie, ktoré sa majú poskytnúť, ak osobné údaje neboli získané od dotknutej osoby 2. Okrem informácií uvedených v odseku 1 prevádzkovateľ poskytne dotknutej osobe tieto ďalšie informácie potrebné na zabezpečenie spravodliv",
"citation": "čl. 14 nariadenia (EÚ) 2016/679",
"jurisdiction": "eu"
},
{
"title": "Poskytované informácie, ak osobné údaje sú získané od dotknutej osoby",
"excerpt": "§ 19 Poskytované informácie, ak osobné údaje sú získané od dotknutej osoby (4) Odseky 1 až 3 sa neuplatňujú v rozsahu, v akom boli informácie dotknutej osobe poskytnuté pred spracúvaním osobných údajov.",
"citation": "§19 ods. 4 zákona č. 18/2018 Z.z.",
"jurisdiction": "sk"
},
{
"title": "Poskytované informácie, ak osobné údaje nie sú získané od dotknutej osoby",
"excerpt": "§ 20 Poskytované informácie, ak osobné údaje nie sú získané od dotknutej osoby (5) d) ak osobné údaje musia zostať dôverné na základe povinnosti mlčanlivosti podľa osobitného predpisu. 15 )",
"citation": "§20 ods. 5 písm. d) zákona č. 18/2018 Z.z.",
"jurisdiction": "sk"
}
]
},
"whyMatters": "A missing privacy policy is one of the most frequently cited GDPR violations. Every EU data protection authority considers it a basic requirement."
},
{
"i18n": {
"key": "gdpr.cookie-policy.warning"
},
"name": "Cookie Policy",
"status": "warning",
"evidence": {
"source": "HTML-heuristic"
},
"howToFix": "Create a separate cookie policy page listing every cookie by: name, provider, purpose, category (necessary/analytics/marketing), and expiration. Most CMPs auto-generate this.",
"legalRefs": {
"gdpr": [
"Art. 12",
"Art. 13(1)(c)-(e)"
],
"skLaw": [
"§ 19"
],
"verified": [
{
"title": "Transparentnosť informácií, oznámenia a postupy výkonu práv dotknutej osoby",
"source": "Zdroj: EUR-Lex (eur-lex.europa.eu), © Európska únia, 1998–2026. Autentické je iba znenie publikované v elektronickom Úradnom vestníku Európskej únie.",
"excerpt": "Article 12 — Transparentnosť informácií, oznámenia a postupy výkonu práv dotknutej osoby 3. Prevádzkovateľ poskytne dotknutej osobe informácie o opatreniach, ktoré sa prijali na základe žiadosti podľa článkov 15 až 22, bez zbytočného odklad",
"citation": "čl. 12 nariadenia (EÚ) 2016/679",
"jurisdiction": "eu"
},
{
"title": "Informácie, ktoré sa majú poskytovať pri získavaní osobných údajov od dotknutej osoby",
"source": "Zdroj: EUR-Lex (eur-lex.europa.eu), © Európska únia, 1998–2026. Autentické je iba znenie publikované v elektronickom Úradnom vestníku Európskej únie.",
"excerpt": "Article 13 — Informácie, ktoré sa majú poskytovať pri získavaní osobných údajov od dotknutej osoby 2. Okrem informácií, ktoré sa uvádzajú v odseku 1, prevádzkovateľ poskytne dotknutej osobe pri získavaní osobných údajov tieto ďalšie informá",
"citation": "čl. 13 nariadenia (EÚ) 2016/679",
"jurisdiction": "eu"
},
{
"title": "Poskytované informácie, ak osobné údaje sú získané od dotknutej osoby",
"excerpt": "§ 19 Poskytované informácie, ak osobné údaje sú získané od dotknutej osoby (4) Odseky 1 až 3 sa neuplatňujú v rozsahu, v akom boli informácie dotknutej osobe poskytnuté pred spracúvaním osobných údajov.",
"citation": "§19 ods. 4 zákona č. 18/2018 Z.z.",
"jurisdiction": "sk"
}
]
},
"whyMatters": "The ePrivacy Directive requires transparent cookie disclosure. Vague statements like 'we use cookies for functionality' don't meet the specificity requirement."
},
{
"i18n": {
"key": "gdpr.imprint.warning"
},
"name": "Legal Contact / Imprint Page",
"status": "warning",
"evidence": {
"source": "HTML-heuristic"
},
"howToFix": "Add an imprint/about-us page with: company name, registered address, contact email, VAT number, and trade register info. In Germany/Austria/Switzerland this is legally required (Impressumspflicht).",
"whyMatters": "In DACH countries, a missing Impressum can trigger fines and competitor cease-and-desist letters. For all EU stores, identifying the data controller is a GDPR Article 13 requirement."
},
{
"i18n": {
"key": "gdpr.terms.info-noncommercial"
},
"name": "Terms & Conditions Page",
"value": "No Terms & Conditions link found — for a non-commercial/informational site this is optional (no purchase or paid service to govern)",
"status": "info",
"evidence": {
"source": "HTML-heuristic"
},
"howToFix": "If you accept memberships, donations, sign-ups, or run events with paid tickets, publish simple Terms of Use / participation rules and link them in the footer.",
"confidence": "low",
"whyMatters": "Consumer T&C (AGB/VOP) obligations attach to selling goods or services. A purely informational or non-profit site has no transaction to govern, so missing T&C isn't a compliance gap."
},
{
"i18n": {
"key": "gdpr.mixed-content.pass"
},
"name": "Data Encryption (No Mixed Content)",
"value": "All resources loaded over HTTPS",
"status": "pass",
"evidence": {
"source": "HTML-heuristic"
}
},
{
"i18n": {
"key": "gdpr.erasure.warning"
},
"name": "Right to Erasure (Data Deletion)",
"status": "warning",
"evidence": {
"source": "HTML-heuristic"
},
"howToFix": "Provide a clear mechanism for users to request data deletion — either a dedicated page, a form, or explicit instructions in your privacy policy. Include a 'Delete my account' option in user settings.",
"legalRefs": {
"gdpr": [
"Art. 17"
],
"skLaw": [
"§ 23"
],
"verified": [
{
"title": "Právo na vymazanie (právo „na zabudnutie“)",
"source": "Zdroj: EUR-Lex (eur-lex.europa.eu), © Európska únia, 1998–2026. Autentické je iba znenie publikované v elektronickom Úradnom vestníku Európskej únie.",
"excerpt": "Article 17 — Právo na vymazanie (právo „na zabudnutie“) 1. Dotknutá osoba má tiež právo dosiahnuť u prevádzkovateľa bez zbytočného odkladu vymazanie osobných údajov, ktoré sa jej týkajú, a prevádzkovateľ je povinný bez zbytočného odkladu vy",
"citation": "čl. 17 nariadenia (EÚ) 2016/679",
"jurisdiction": "eu"
},
{
"title": "Právo na výmaz osobných údajov",
"excerpt": "§ 23 Právo na výmaz osobných údajov (1) Dotknutá osoba má právo na to, aby prevádzkovateľ bez zbytočného odkladu vymazal osobné údaje, ktoré sa jej týkajú.",
"citation": "§23 ods. 1 zákona č. 18/2018 Z.z.",
"jurisdiction": "sk"
}
]
},
"whyMatters": "GDPR Article 17 gives users the 'right to be forgotten.' EU regulators expect a clear, accessible process, and obstructing erasure requests is a documented enforcement finding."
},
{
"i18n": {
"key": "gdpr.dpo.warning"
},
"name": "Data Protection Officer Contact",
"status": "warning",
"evidence": {
"source": "HTML-heuristic"
},
"howToFix": "Add DPO contact details (or privacy contact if DPO not required) to your privacy policy and footer. Include: name/title, email (e.g., dpo@yourdomain.com), and postal address.",
"whyMatters": "GDPR Article 37 requires a DPO for organizations processing personal data at scale. Even if not mandatory, having a designated privacy contact builds trust and is expected by regulators."
},
{
"i18n": {
"key": "gdpr.withdrawal.warning"
},
"name": "Withdrawal of Consent Mechanism",
"status": "warning",
"evidence": {
"source": "HTML-heuristic"
},
"howToFix": "Provide a clear way to withdraw consent: an 'unsubscribe' link in emails, a 'cookie settings' button in the footer, and a 'revoke consent' section in your privacy policy.",
"legalRefs": {
"gdpr": [
"Art. 7(3)"
],
"skLaw": [
"§ 14(4)"
],
"verified": [
{
"title": "Podmienky vyjadrenia súhlasu",
"source": "Zdroj: EUR-Lex (eur-lex.europa.eu), © Európska únia, 1998–2026. Autentické je iba znenie publikované v elektronickom Úradnom vestníku Európskej únie.",
"excerpt": "Article 7 — Podmienky vyjadrenia súhlasu 1. Ak je spracúvanie založené na súhlase, prevádzkovateľ musí vedieť preukázať, že dotknutá osoba vyjadrila súhlas so spracúvaním svojich osobných údajov. 2. Ak dá dotknutá osoba súhlas v rámci písom",
"citation": "čl. 7 nariadenia (EÚ) 2016/679",
"jurisdiction": "eu"
},
{
"title": "Podmienky poskytnutia súhlasu so spracúvaním osobných údajov",
"excerpt": "§ 14 Podmienky poskytnutia súhlasu so spracúvaním osobných údajov (1) Ak je spracúvanie osobných údajov založené na súhlase dotknutej osoby, prevádzkovateľ je povinný kedykoľvek vedieť preukázať, že dotknutá osoba poskytla súhlas so spracúv",
"citation": "§14 zákona č. 18/2018 Z.z.",
"jurisdiction": "sk"
}
]
},
"whyMatters": "GDPR Article 7(3): 'It shall be as easy to withdraw as to give consent.' If users can subscribe in one click, unsubscribing must be equally simple. Missing this is a common regulatory finding."
}
]
},
"nis2": {
"score": -1,
"checks": [
{
"i18n": {
"key": "nis2.scope.unknown"
},
"name": "NIS2 Compliance",
"value": "Scope undetermined — IČO/company enrichment unavailable for this domain.",
"status": "info",
"howToFix": "",
"whyMatters": ""
}
]
},
"mobile": {
"score": -1,
"checks": [
{
"name": "Mobile",
"value": "Measuring — Google PageSpeed running in background…",
"status": "pending",
"howToFix": "",
"whyMatters": ""
}
]
},
"company": null,
"modules": [],
"security": {
"score": 48,
"checks": [
{
"i18n": {
"key": "sec.ssl.pass"
},
"name": "SSL/TLS Certificate",
"value": "Valid HTTPS connection established",
"status": "pass",
"evidence": {
"source": "SSL"
}
},
{
"i18n": {
"key": "sec.dnssec.warning"
},
"name": "DNSSEC",
"value": "No DNSKEY records — zone is unsigned",
"status": "warning",
"fixLink": {
"url": "https://www.inger.sk/#contact",
"label": "DNSSEC setup help →"
},
"evidence": {
"source": "DNS"
},
"howToFix": "Enable DNSSEC at your DNS host (most modern registrars offer 1-click activation: Cloudflare, Route 53, Google Cloud DNS, web.sk, websupport.sk). Verify via dnsviz.net afterwards.",
"whyMatters": "Without DNSSEC, attackers controlling intermediate resolvers can forge responses for your domain — sending users to phishing sites with valid HTTPS that match your name. EU national CSIRTs (SK-CERT, NÚKIB) recommend DNSSEC for all in-scope entities."
},
{
"i18n": {
"key": "sec.caa.warning"
},
"name": "CAA DNS Record",
"value": "No CAA records — any CA can issue certificates for this domain",
"status": "warning",
"evidence": {
"source": "DNS"
},
"howToFix": "Publish CAA TXT records pinning your CA. For Let's Encrypt: `0 issue \"letsencrypt.org\"`. For multiple CAs add additional `0 issue \"...\"` records. Add `0 iodef \"mailto:security@yourdomain.tld\"` for misissuance reports.",
"whyMatters": "CAA records limit which Certificate Authorities can issue certificates for your domain. Without CAA, a compromised or rogue CA can issue valid certs that browsers will trust — a documented breach pattern (DigiNotar 2011, Symantec 2017)."
},
{
"i18n": {
"key": "sec.https-redirect.warning"
},
"name": "HTTP → HTTPS Redirect",
"status": "warning",
"evidence": {
"source": "HTTP-header"
},
"howToFix": "Configure a 301 redirect from http:// to https:// for all pages. In Apache: RewriteRule ^(.*)$ https://%{HTTP_HOST}%{REQUEST_URI} [R=301,L]",
"whyMatters": "Without a redirect, users can access the insecure HTTP version. Google also treats http and https as separate URLs, splitting your SEO signals."
},
{
"i18n": {
"key": "sec.hsts.fail"
},
"name": "HSTS (Strict-Transport-Security)",
"status": "fail",
"evidence": {
"source": "HTTP-header"
},
"howToFix": "Add header: Strict-Transport-Security: max-age=31536000; includeSubDomains; preload — then submit to hstspreload.org.",
"whyMatters": "Without HSTS, attackers can intercept the first HTTP request and downgrade the connection to steal session cookies on public WiFi."
},
{
"i18n": {
"key": "sec.csp.fail"
},
"name": "Content-Security-Policy (CSP)",
"status": "fail",
"fixLink": {
"url": "https://www.inger.sk/#contact",
"label": "Get Security Hardening →"
},
"evidence": {
"source": "HTTP-header"
},
"howToFix": "Implement a CSP header. Start with: Content-Security-Policy: default-src 'self'; script-src 'self'; style-src 'self' 'unsafe-inline'; img-src 'self' data: — then gradually tighten.",
"whyMatters": "CSP is a strong defense against XSS attacks. Without it, any injected script runs with full privileges. CSP blocks inline script injection."
},
{
"i18n": {
"key": "sec.clickjacking.fail"
},
"name": "Clickjacking Protection",
"status": "fail",
"evidence": {
"source": "HTTP-header"
},
"howToFix": "Add X-Frame-Options: DENY (or SAMEORIGIN if iframes are needed). Better: use CSP frame-ancestors 'self'.",
"whyMatters": "Clickjacking overlays your site in a hidden iframe. Attackers trick users into clicking buttons (like 'Confirm Purchase') without knowing it."
},
{
"i18n": {
"key": "sec.x-content-type.warning"
},
"name": "X-Content-Type-Options",
"status": "warning",
"evidence": {
"source": "HTTP-header"
},
"howToFix": "Add header: X-Content-Type-Options: nosniff",
"whyMatters": "Without nosniff, browsers may execute uploaded files as scripts. An attacker could upload a .jpg that's actually JavaScript and trick the browser into running it."
},
{
"i18n": {
"key": "sec.referrer-policy.warning"
},
"name": "Referrer-Policy",
"status": "warning",
"evidence": {
"source": "HTTP-header"
},
"howToFix": "Add header: Referrer-Policy: strict-origin-when-cross-origin — this is the best balance between functionality and privacy.",
"whyMatters": "Without a referrer policy, browsers send the full URL to third parties. This can leak sensitive data like session tokens in URLs or internal page paths."
},
{
"i18n": {
"key": "sec.permissions-policy.warning"
},
"name": "Permissions-Policy",
"status": "warning",
"evidence": {
"source": "HTTP-header"
},
"howToFix": "Add: Permissions-Policy: camera=(), microphone=(), geolocation=(), payment=() — disable APIs your site doesn't need.",
"whyMatters": "Without Permissions-Policy, any third-party script (ads, analytics, chat widgets) can access camera, microphone, and geolocation without your knowledge."
},
{
"i18n": {
"key": "sec.cookie-flags.warning",
"params": {
"count": 2,
"missing": "2 missing HttpOnly"
}
},
"name": "Cookie Security Flags",
"value": "2 cookie(s): 2 missing HttpOnly",
"status": "warning",
"evidence": {
"source": "HTTP-header"
},
"howToFix": "Set all cookies with: Secure (HTTPS only), HttpOnly (no JS access), SameSite=Lax or Strict (CSRF protection). Session cookies MUST have all three.",
"whyMatters": "Missing Secure flag = cookies sent over HTTP (stealable on WiFi). Missing HttpOnly = cookies readable by XSS. Missing SameSite = vulnerable to CSRF attacks."
},
{
"i18n": {
"key": "sec.tech-disclosure.pass",
"params": {
"detail": "nginx"
}
},
"name": "Technology Disclosure",
"value": "Server: nginx (no version)",
"status": "pass",
"evidence": {
"source": "HTTP-header"
}
},
{
"i18n": {
"key": "sec.sri.pass-none"
},
"name": "Subresource Integrity (SRI)",
"value": "No SRI-eligible third-party scripts loaded",
"status": "pass",
"evidence": {
"source": "HTML-heuristic"
}
},
{
"i18n": {
"key": "sec.security-txt.pass"
},
"name": "security.txt (RFC 9116)",
"value": "Present at /.well-known/security.txt",
"status": "pass",
"evidence": {
"source": "file-probe"
}
},
{
"i18n": {
"key": "sec.server-version.pass",
"params": {
"name": "Nginx"
}
},
"name": "Server Version Disclosure",
"value": "Nginx — version hidden",
"status": "pass",
"evidence": {
"source": "HTTP-header"
}
},
{
"i18n": {
"key": "sec.cdn.warning"
},
"name": "CDN / WAF Protection",
"status": "warning",
"evidence": {
"source": "HTTP-header"
},
"howToFix": "Add a CDN/WAF like Cloudflare (free tier), Sucuri, or Fastly. They provide DDoS protection, bot filtering, and SSL management.",
"whyMatters": "Without a CDN/WAF, your origin server is directly exposed to DDoS attacks, bot traffic, and brute-force attempts."
}
]
},
"tech_stack": [
{
"name": "Vite",
"category": "js-library"
},
{
"name": "Nginx",
"category": "server"
}
],
"performance": {
"score": -1,
"checks": [
{
"name": "Performance",
"value": "Measuring — Google PageSpeed running in background…",
"status": "pending",
"howToFix": "",
"whyMatters": ""
}
]
},
"ai_readiness": {
"score": 43,
"checks": [
{
"i18n": {
"key": "air.bot-access.pass",
"params": {
"detail": "No AI bot restrictions (allowed by default)"
}
},
"name": "AI Bot Access Policy",
"value": "No AI bot restrictions (allowed by default)",
"status": "pass",
"evidence": {
"source": "file-probe"
}
},
{
"i18n": {
"key": "air.llms-txt.fail"
},
"name": "llms.txt (AI Site Descriptor)",
"value": "Not present — not required for AI visibility",
"status": "info",
"fixLink": {
"url": "https://llmstxt.org",
"label": "About llms.txt →"
},
"evidence": {
"source": "file-probe"
},
"howToFix": "Optional: /llms.txt (a Markdown site descriptor per llmstxt.org) is future-proofing, mainly consumed by coding/IDE agents. It does NOT affect whether ChatGPT/Perplexity/Gemini cite your store. Prioritize AI-crawler access, server-rendered content, statistics and cited sources instead.",
"whyMatters": "No answer engine consumes llms.txt for AI-search citation today (2026) — adoption is ~8.7% and Google declined to support it. It's optional future-proofing, mainly read by coding/IDE agents. Prioritize AI-crawler access, server-rendered content, statistics and cited sources instead. See /ai-readiness-methodology.md."
},
{
"i18n": {
"key": "air.llms-full.warning"
},
"name": "llms-full.txt (Complete AI Content)",
"value": "Not present — not required for AI visibility",
"status": "info",
"evidence": {
"source": "file-probe"
},
"whyMatters": "No answer engine consumes llms.txt for AI-search citation today (2026) — adoption is ~8.7% and Google declined to support it. It's optional future-proofing, mainly read by coding/IDE agents. Prioritize AI-crawler access, server-rendered content, statistics and cited sources instead. See /ai-readiness-methodology.md."
},
{
"i18n": {
"key": "air.content-access.pass",
"params": {
"ratio": "30.7",
"words": 214
}
},
"name": "Content Accessibility for AI",
"value": "214 words in raw HTML (30.7% text ratio) — readable by AI crawlers without executing JS",
"status": "pass",
"evidence": {
"source": "HTML-heuristic"
}
},
{
"i18n": {
"key": "air.schema-foundation.fail"
},
"name": "Structured Data Foundation",
"status": "fail",
"fixLink": {
"url": "https://zulien.sk",
"label": "Add structured data →"
},
"evidence": {
"source": "schema"
},
"howToFix": "Add JSON-LD structured data immediately. Priority order: 1) Organization, 2) Product (with offers), 3) BreadcrumbList, 4) WebSite+SearchAction, 5) FAQPage. Use JSON-LD format exclusively — not Microdata or RDFa.",
"whyMatters": "Without structured data, your store is invisible to AI commerce. Google AI Overviews, ChatGPT Shopping, Perplexity, and Bing Copilot all rely on schema markup to understand and recommend products."
},
{
"i18n": {
"key": "air.org-schema.fail"
},
"name": "Organization Schema + Entity Linking",
"status": "fail",
"evidence": {
"source": "schema"
},
"howToFix": "Add Organization (or LocalBusiness for physical stores) schema with: name, logo, url, description, contactPoint, address, and sameAs linking to all your official profiles (LinkedIn, Facebook, Wikipedia if available).",
"whyMatters": "Organization schema is the foundation of your AI identity. Without it, AI assistants can't confidently attribute information to your brand, verify your legitimacy, or show your Knowledge Panel."
},
{
"i18n": {
"key": "air.faq-schema.warning"
},
"name": "FAQ Schema (Direct AI Answers)",
"status": "warning",
"evidence": {
"source": "schema"
},
"howToFix": "Add FAQPage schema to every product page and category page. Include 3-5 Q&As per page covering: product specifications, shipping, returns, usage instructions. Format: question (full sentence) + answer (75-150 words).",
"whyMatters": "ChatGPT, Perplexity, and Google AI Overviews pull FAQ answers verbatim. FAQ schema is one of the fastest ways to get your content cited by AI."
},
{
"i18n": {
"key": "air.content-depth.warning",
"params": {
"words": 214
}
},
"name": "Content Depth for AI",
"value": "214 words — add more for better AI citations",
"status": "warning",
"evidence": {
"source": "HTML-heuristic"
},
"howToFix": "Expand to 500+ words: add detailed product descriptions, use cases, benefits, specifications, comparison info, and buying guides. AI needs substantial content to summarize and cite.",
"whyMatters": "AI assistants skip thin pages in favor of content-rich competitors. Aim for the depth that makes your page the definitive resource."
},
{
"i18n": {
"key": "air.answer-first.warning"
},
"name": "Answer-First Content Format",
"value": "Content doesn't start with a strong summary paragraph",
"status": "warning",
"evidence": {
"source": "HTML-heuristic"
},
"howToFix": "Place your most important information in the first 100 words of the page. Use the BLUF method (Bottom Line Up Front): start with what the product IS and why it matters, then elaborate.",
"whyMatters": "AI assistants extract content from the first 100 words to generate summaries. Most AI systems read top-down, so answer-first pages get cited more often."
},
{
"i18n": {
"key": "air.headings.fail",
"params": {
"h1": 1,
"h2": 0,
"h3": 0
}
},
"name": "Heading Hierarchy for AI",
"value": "1 H1, 0 H2, 0 H3 — poor structure",
"status": "fail",
"evidence": {
"source": "HTML-heuristic"
},
"howToFix": "Use exactly 1 H1 (page title), then organize content with H2 sections and H3 subsections. Each heading should describe the content that follows. Never skip heading levels (H1→H3 without H2).",
"whyMatters": "AI extracts information based on heading structure. Pages with proper H1→H2→H3 hierarchy are parsed more accurately by ChatGPT, Perplexity, and Google AI Overviews. Without it, AI may misinterpret your content."
},
{
"i18n": {
"key": "air.semantic-html.warning",
"params": {
"count": 2,
"missing": ", , , "
}
},
"name": "Semantic HTML Structure",
"value": "2/6 elements — missing: , , , ",
"status": "warning",
"evidence": {
"source": "HTML-heuristic"
},
"howToFix": "Add: , , , . Semantic HTML tells AI what's content (), navigation (), sidebar (), etc. — without relying on CSS classes or visual layout.",
"whyMatters": "AI crawlers don't see your CSS. They rely on semantic HTML to distinguish main content from navigation, ads, and boilerplate."
},
{
"i18n": {
"key": "air.structured-content.warning-none"
},
"name": "Structured Content (Lists & Tables)",
"value": "No structured content elements found",
"status": "warning",
"evidence": {
"source": "HTML-heuristic"
},
"howToFix": "Add bulleted lists for features/benefits, numbered lists for steps/rankings, and tables for comparisons/specifications. These are the content formats AI extracts most reliably.",
"whyMatters": "Unstructured paragraph-only content is harder for AI to parse and cite. Pages with lists and tables get cited more often because AI can extract specific facts more reliably."
},
{
"i18n": {
"key": "air.freshness.fail"
},
"name": "Content Freshness Signals",
"status": "fail",
"evidence": {
"source": "HTML-heuristic"
},
"howToFix": "Add dateModified and datePublished to your JSON-LD schema, and display a visible 'Last updated' date on the page. Update content quarterly at minimum. AI heavily favors fresh, maintained content.",
"whyMatters": "With no freshness signals, AI assumes your content is stale. ChatGPT and Perplexity both weight recency in their citation algorithms. Competitors who show recent updates will be cited instead of your static pages."
},
{
"i18n": {
"key": "air.entity-clarity.fail"
},
"name": "Entity Clarity & Brand Signals",
"status": "fail",
"evidence": {
"source": "HTML-heuristic"
},
"howToFix": "Your brand has weak entity signals. Add: 1) Complete OG meta tags, 2) Organization schema with sameAs linking to all official profiles, 3) Consistent NAP (Name, Address, Phone) across the web.",
"whyMatters": "AI assistants must be confident about entity identity before making recommendations. Without clear brand signals, AI defaults to better-known competitors."
},
{
"i18n": {
"key": "air.eeat.warning-noarticle"
},
"name": "Author Expertise Signals (E-E-A-T)",
"status": "warning",
"evidence": {
"source": "HTML-heuristic"
},
"howToFix": "For content pages (blog, guides, about): add Article/BlogPosting schema with author property linking to Person schema. Include the author's jobTitle, credentials, and social profiles.",
"whyMatters": "AI models weight author expertise heavily. Pages from identified experts get cited more than anonymous content. This is especially important for product guides, reviews, and advice content."
},
{
"i18n": {
"key": "air.extractable.pass",
"params": {
"avg": 34,
"count": 6
}
},
"name": "Extractable Answer Blocks",
"value": "6 paragraphs, avg 34 words — optimal for AI extraction",
"status": "pass",
"evidence": {
"source": "HTML-heuristic"
}
},
{
"i18n": {
"key": "air.statistics.warning-none"
},
"name": "Statistics & Data Presence",
"value": "No statistical data found in content",
"status": "warning",
"evidence": {
"source": "HTML-heuristic"
},
"howToFix": "Add numbers: pricing comparisons, performance metrics, customer statistics, industry benchmarks. Specific data (e.g., '99.9% uptime', '4.8/5 rating from 2,400 reviews') is what AI quotes most.",
"whyMatters": "Content without data is harder to cite. Perplexity and ChatGPT specifically seek pages with quantified claims and verifiable statistics."
},
{
"i18n": {
"key": "air.qa-headings.warning-none"
},
"name": "Q&A Format Headings",
"status": "warning",
"evidence": {
"source": "HTML-heuristic"
},
"howToFix": "Add H2/H3 headings phrased as questions your customers ask: 'How much does shipping cost?', 'What sizes are available?', 'How do I return an item?' Follow each with a direct, concise answer.",
"whyMatters": "Q&A content format matches how people query AI assistants. Without question-format headings, your content is harder for AI to map to user queries."
},
{
"i18n": {
"key": "air.question-coverage.fail",
"params": {
"n": 0,
"labels": ""
}
},
"name": "Common Question Coverage",
"value": "Answers only 0/5 key shopper questions",
"status": "fail",
"evidence": {
"source": "HTML-heuristic"
},
"howToFix": "Your page barely addresses core shopper questions. Add sections covering price, shipping (options + cost), returns/refunds, availability, and payment methods — as visible text, not just in schema. Link to a dedicated FAQ, Shipping, and Returns page.",
"whyMatters": "AI assistants answer shopping queries by fanning out into price/shipping/returns/availability/payment sub-questions. A page that answers none of them is invisible in AI shopping answers and reads as untrustworthy to buyers."
},
{
"i18n": {
"key": "air.internal-links.fail"
},
"name": "Internal Link Density",
"value": "Almost no internal links in content",
"status": "fail",
"evidence": {
"source": "HTML-heuristic"
},
"howToFix": "Add contextual internal links throughout your content: link to related products, categories, guides, and FAQs. Use descriptive anchor text (not 'click here'). Target 3-5 links per 1,000 words.",
"whyMatters": "Without internal links, AI crawlers treat each page as isolated content. Internal linking creates a semantic web that helps AI understand your product catalog, categories, and content relationships."
},
{
"i18n": {
"key": "air.canonical.fail"
},
"name": "Canonical Tag for AI Deduplication",
"status": "fail",
"evidence": {
"source": "HTML-heuristic"
},
"howToFix": "Add for quotes and link to authoritative sources (.gov, .edu, Wikipedia, industry reports).",
"whyMatters": "Content without citations or expert quotes appears unverified to AI. AI assistants prefer content backed by named sources, data references, and expert opinions."
},
{
"i18n": {
"key": "air.ai-txt.warning"
},
"name": "ai.txt (AI Permissions)",
"value": "Not present — optional; AI-bot permissions are enforced via robots.txt, not ai.txt",
"status": "info",
"evidence": {
"source": "file-probe"
},
"whyMatters": "ai.txt is an emerging fine-grained AI-permissions proposal not yet honored by the major engines. The robots.txt AI-bot rules are the signal that actually gates crawler access."
},
{
"i18n": {
"key": "air.webmcp.warning"
},
"name": "WebMCP Agentic Readiness",
"status": "warning",
"evidence": {
"source": "HTML-heuristic"
},
"howToFix": "WebMCP (W3C Community Group standard, Chrome 146+) lets pages declare structured tools for AI agents. Add toolname and tooldescription attributes to