www.netlify.com

Report from 7/24/2026, 1:40:35 PM https://www.netlify.com
Latest run · lab, cold cache
89
7/24/2026
28-day score · p75 · the standard
89
12 runs
CRR100%latest
SSD89%latest
TC1384 toklatest
TTFUT57 ms28-day p75

Scored by v3 · source-of-truth hashes: score db860d6ac94e · thresholds e94f8b33e500 — verifiable against the canonical scorer.

The 28-day score is the p75 of nightly runs — the stable number to cite. Deterministic metrics (CRR/SSD/TC) show their latest value (they move only when the site changes); timing (TTFUT) and answer-fidelity (AF) are smoothed by 28-day p75 — the same lab-vs-field split Core Web Vitals uses. Synthetic daily measurement, not real-user field data.

Core Agent Vitals badge  Embed this badge

Show your agent-readiness score anywhere — it links back to this report.

[![Core Agent Vitals](https://agentvitals.dev/badge/netlify.com.svg)](https://agentvitals.dev/results?url=https%3A%2F%2Fwww.netlify.com)
<a href="https://agentvitals.dev/results?url=https%3A%2F%2Fwww.netlify.com"><img src="https://agentvitals.dev/badge/netlify.com.svg" alt="Core Agent Vitals" height="20"></a>
What AI tells your customers about youAgent confidence: MEDIUM
Business nameNetlify
CategoryOrganization
Pricenot found
Location101 2nd St, Suite 575, San Francisco, CA, 94105, US
Hoursnot found
Productsnot found
DescriptionNetlify is an AI-native, full-stack cloud platform for building, deploying, and scaling modern web applications with serverless functions, edge logic, and AI-driven workflows.

An agent gets the basics but will guess on the gaps. 4/7 applicable facts come from machine-readable structured data.

89
Overall score
weighted CAV (0–100)
PASS
0–4950–8990–100

Metrics

100%
CRR Content Recovery Good
0.89
SSD Semantic Signal Density Good
1,384 tok
TC Token Cost Good
57 ms
TTFUT Time to First Useful Token N/A

Token Cost breakdown

Where the page's tokens go (≈5,257 across regions). 59% is non-content — chrome and boilerplate an agent pays for. Add landmark roles (main/nav/header/footer) so agents can skip it.

Content
41.1% · 2,159
Chrome (nav / header / footer)
30.5% · 1,603
Boilerplate (cookie / ad)
13.6% · 717
Other
14.8% · 778

Final screenshot

Final screenshot of https://www.netlify.com

Diagnostics

medium TC 58.9% of tokens are non-content (boilerplate/chrome)

agent representation — token decomposition

EvidenceToken decomposition: content 41.1%, chrome 30.5%, boilerplate 13.6%, other 14.8%. Only 41.1% of the agent's tokens are real content.
ImpactAn agent pays for boilerplate on every request and has less context left for the real content.
Effort30–90 min

Fix: Strip repeated nav/header/footer/cookie chrome from the agent-visible output; wrap content in <main>/<article> so the extractor keeps signal and drops boilerplate.

Rendered profile: headless

Agent Discoverability 78/100 · Needs Work

Access & discovery checks — separate from the gated CAV metrics above. Click an issue for business impact, what we measured, and how to fix. · Take the Agent Readiness course →

Agent files & endpoints

llms.txt Found at /llms.txt Learn →
robots.txt (AI bots) Major AI bots allowed Learn →
sitemap.xml No /sitemap.xml Learn →
JSON-LD structured data Types: Organization, WebSite, WebPage, BreadcrumbList, SoftwareApplication Learn →
~ agents.json Absent (emerging standard) Learn →
~ WebMCP endpoint Absent (emerging standard) Learn →
OpenAPI / API docs Found at /openapi.json Learn →

Issues (5)

~ No content-blocking cookie wall medium impact Consent platform: onetrust (verify it doesn't block content)

Business impact A consent wall that hides content until a click is invisible to agents — they cannot click 'Accept'.

What we measured We fingerprint OneTrust, Cookiebot, Usercentrics and similar managers and flag content-blocking ones.

How to fix Use an overlay banner that leaves content in the DOM, not a blocking interstitial.

Spec: https://gdpr.eu/cookies/

~ No login wall on public content high impact Login signal: login required

Business impact Public content behind authentication is unreachable to agents (they have no account). Gate only genuinely private material.

What we measured We follow redirects and detect 401/403 and login-form signals on content pages.

How to fix Separate public marketing/docs from authenticated areas; keep public pages reachable without login.

Spec: https://llmstxt.org

XML sitemap present medium impact No /sitemap.xml

Business impact A sitemap is your table of contents for AI crawlers. Without it agents follow homepage links and miss deep pages (products, docs, pricing) — shrinking what they can recommend.

What we measured We fetch /sitemap.xml (and /sitemap_index.xml), confirm valid XML with <loc> entries, and check <lastmod> freshness.

How to fix Generate an XML sitemap of all public pages with current lastmod dates and reference it in robots.txt.

Learn how to implement →

# robots.txt
Sitemap: https://example.com/sitemap.xml

Spec: https://www.sitemaps.org/

~ agents.json discovery low impact Absent (emerging standard)

Business impact agents.json describes what your site can DO for agents (services, endpoints, capabilities) — an emerging discovery standard. Early adopters get native agent integration.

What we measured We check /agents.json and /.well-known/agents.json for a valid configuration.

How to fix Publish /agents.json describing your site's capabilities and actions.

Learn how to implement →

Spec: https://github.com/wild-card-ai/agents-json

~ WebMCP endpoint low impact Absent (emerging standard)

Business impact WebMCP lets agents call actions on your site directly (book, buy, query) instead of scraping the DOM. Early adopters get native AI-agent interoperability.

What we measured We check /.well-known/webmcp and /webmcp.json for a valid actions array.

How to fix Add a WebMCP endpoint exposing your key actions to agents.

Learn how to implement →

Spec: https://webmcp.org

Passed audits (7)

✓ robots.txt allows AI bots✓ No CAPTCHA wall✓ Machine-readable prices✓ llms.txt present + valid✓ Structured data (JSON-LD)✓ Server response (TTFB)✓ API documentation

Transport & Trust (SEC 1.0.0)

HTTPS, HSTS, CSP, sniffing, referrer and CORS posture. Diagnostic only — this does not affect the CAV score. A security header does not make a page more legible to an agent, so scoring it would reward a CDN toggle that changes nothing an agent can recover. We measure it and say so.

59Transport posture (0–100, unscored)
2pass
1warn
2fail
Per-header findings (6)
HeaderEvidence
✅ HTTPSserved over HTTPS
✅ HSTSmax-age=31536000; includeSubDomains; preload
❌ Content-Security-Policyno content-security-policy header
❌ X-Content-Type-Optionsmissing nosniff
⚠️ Referrer-Policyno referrer-policy header (browser default applies)
➖ CORS exposureno CORS headers on the document (normal for an HTML page)
Full profile — how to improve · unused JS · network · timing

How to improve

highProfile reflects a block/challenge page — not your contenthighest leverage

whole profile

EvidenceMeasured against a block/challenge page (a bot-wall/CAPTCHA was served (www.gstatic.com)); every number here describes the wall, not your site.
ImpactAn AI agent hits the same wall and recovers none of your content — fix the block before optimizing anything else.
FixAllowlist legitimate agent user-agents / IP ranges in your WAF or bot-management and serve real content (not a challenge), then re-run.

Third-party impact

60 third-party requests · 1585 KiB (69.4% of transfer) — code an agent must also fetch/run before your content settles. Fewer, lazier third-parties = faster, cheaper agent reads.

Third-party domainReqsTransferMain-thread
googletagmanager.com4664 KiB
gstatic.com1375 KiB
hsforms.net1197 KiB
cookielaw.org11185 KiB
segment.com647 KiB
hs-analytics.net143 KiB
hubspot.com532 KiB
hs-banner.com124 KiB
hsadspixel.net15 KiB
hsforms.com44 KiB
doubleclick.net33 KiB
google.com83 KiB

Wasted JavaScript (by bundle)

Transfer-accurate — each bundle's transfer size × its unused %, ranked by wasted bytes (the biggest code-splitting wins). Unused JS also inflates Token Cost (TC).

BundleTransferUnusedWasted
https://www.gstatic.com/recaptcha/releases/rL1ELiQAg1kPezz6_H9hTZ_i/recaptcha__en.js 3P375 KiB67.9%254 KiB
https://www.googletagmanager.com/gtag/js?id=AW-957669464&cx=c&gtm=4e67f0 3P153 KiB72.2%110 KiB
https://js.hsforms.net/forms/v2.js 3P197 KiB47.4%93 KiB
https://www.googletagmanager.com/gtm.js?id=GTM-T7WNFLD 3P173 KiB53.3%92 KiB
https://www.googletagmanager.com/gtag/js?id=G-X2FMMZSSS9&cx=c&gtm=4e67f0 3P186 KiB45.8%85 KiB
https://www.googletagmanager.com/gtag/js?id=AW-957669464 3P153 KiB48.8%75 KiB
https://cdn.cookielaw.org/scripttemplates/202311.1.0/otBannerSdk.js 3P103 KiB61%63 KiB
https://www.netlify.com/_astro/preact.C6GQghsi.js89 KiB44.4%39 KiB
https://js.hs-analytics.net/analytics/1784379000000/7477936.js 3P43 KiB48%21 KiB
https://www.netlify.com/_astro/lodash.NslEEZXB.js25 KiB73.9%19 KiB
https://js.hubspot.com/web-interactives-embed.js 3P28 KiB63.6%18 KiB
https://js.hs-banner.com/v2/7477936/banner.js 3P24 KiB67.1%16 KiB
https://cdn.segment.com/analytics.js/v1/7f8W9mAxost9lRWyMuVR8xaMv9kHxBsy/analytics.min.js 3P29 KiB47.5%14 KiB
https://www.netlify.com/pagefind/pagefind.js12 KiB85.2%11 KiB
https://www.netlify.com/_astro/utils.B_AcTnwQ.js12 KiB69.9%8 KiB

Network

102Requests
2283 KiBTransferred
35Scripts
69.4%3rd-party
0Long tasks
Script (35)
1691 KiB
Font (5)
207 KiB
Image (26)
184 KiB
Document (3)
110 KiB
Fetch (17)
45 KiB
Stylesheet (5)
37 KiB
XHR (8)
7 KiB
Other (1)
1 KiB
Ping (1)
1 KiB
Manifest (1)
1 KiB
Heaviest requests (30)
URLTypeStatusTransfer
https://www.gstatic.com/recaptcha/releases/rL1ELiQAg1kPezz6_H9hTZ_i/recaptcha__en.jsScript200375 KiB
https://js.hsforms.net/forms/v2.jsScript200197 KiB
https://www.googletagmanager.com/gtag/js?id=G-X2FMMZSSS9&cx=c&gtm=4e67f0Script200186 KiB
https://www.googletagmanager.com/gtm.js?id=GTM-T7WNFLDScript200173 KiB
https://www.googletagmanager.com/gtag/js?id=AW-957669464Script200153 KiB
https://www.googletagmanager.com/gtag/js?id=AW-957669464&cx=c&gtm=4e67f0Script200153 KiB
https://www.netlify.com/images/home/what-is-netlify-thumbnail.pngImage200134 KiB
https://www.netlify.com/Document200110 KiB
https://cdn.cookielaw.org/scripttemplates/202311.1.0/otBannerSdk.jsScript200103 KiB
https://www.netlify.com/_astro/preact.C6GQghsi.jsScript20089 KiB
https://www.netlify.com/_astro/InstrumentSans_wdth_wght_.tWV223Ma.woff2Font20087 KiB
https://js.hs-analytics.net/analytics/1784379000000/7477936.jsScript20043 KiB
https://www.netlify.com/rum.jsScript20034 KiB
https://www.netlify.com/_astro/MartianMono-Medium.BnDjRSrk.woff2Font20032 KiB
https://www.netlify.com/_astro/MartianMono-Bold.DCwCKom0.woff2Font20031 KiB
https://www.netlify.com/_astro/MartianMono-Regular.BdLZLV0s.woff2Font20030 KiB
https://cdn.segment.com/analytics.js/v1/7f8W9mAxost9lRWyMuVR8xaMv9kHxBsy/analytics.min.jsScript20029 KiB
https://js.hubspot.com/web-interactives-embed.jsScript20028 KiB
https://www.netlify.com/_astro/Figtree_wght_.DbGe-NNA.woff2Font20027 KiB
https://www.netlify.com/_astro/convince-your-boss.eYLlvsNJ.cssStylesheet20026 KiB
https://www.netlify.com/_astro/lodash.NslEEZXB.jsScript20025 KiB
https://js.hs-banner.com/v2/7477936/banner.jsScript20024 KiB
https://cdn.cookielaw.org/consent/5dec0507-5e89-4bb4-8f2d-0872be7dd9dd/019be7c0-c17c-726c-b4dd-bc25cd45314e/en.jsonFetch20022 KiB
https://cdn.cookielaw.org/logos/static/ot_company_logo.pngImage20019 KiB
https://cdn.cookielaw.org/scripttemplates/202311.1.0/assets/v2/otPcCenter.jsonFetch20013 KiB
https://www.netlify.com/pagefind/pagefind.jsScript20012 KiB
https://www.netlify.com/_astro/utils.B_AcTnwQ.jsScript20012 KiB
https://cdn.segment.com/next-integrations/actions/3962/1faa179dfb20d0a3f5a0.jsScript2009 KiB
https://cdn.cookielaw.org/scripttemplates/otSDKStub.jsScript2009 KiB
https://www.netlify.com/images/home/logos/kubernetes.svgImage2007 KiB
Analyzing…
running mobile + desktop · ~30s