What this audit checks (and what it doesn’t)

Findable — 25 points

Can crawlers and answer engines reach this URL?

• HTTPS, and a short redirect chain
• robots.txt returns 200 and includes a Sitemap: line
• Sitemap is reachable XML (urlset or sitemapindex)
• The page is not noindex / nofollow
• A self-canonical that matches this host and path
• llms.txt exists (missing is a warning, not a fail)
• GPTBot, ClaudeBot, PerplexityBot and Google-Extended are not Disallow: /
• The HTML has real text — not an empty JavaScript shell

Understandable — 25 points

Is the topic obvious without rendering the page?

• Title, 15–60 characters
• Meta description, 70–160 characters
• Exactly one H1
• html[lang] is set
• JSON-LD parses
• Organization, LocalBusiness or WebSite schema
• FAQPage / HowTo (bonus — N/A if missing)
• og:title and an absolute og:image URL

Trustworthy — 25 points

Does it look like a real organization?

• Favicon is reachable
• A phone, email, ContactPoint or address trace
• A privacy, terms or KVKK link
• HSTS or Content-Security-Policy
• No mixed content on HTTPS
• A visible brand / organization name

Usable — 25 points

Can a visitor act on this page?

• Viewport meta with width=device-width
• A CTA: tel, form, #contact, booking or an obvious button
• Image alt coverage
• HTML document size
• Coarse TTFB from this proxy (not a lab metric)
• A few internal links

How a check is scored

• Each check is pass, warn, fail, or N/A
• Weight is 1, 2 or 3
• Warn earns half the weight
• N/A is dropped, so optional checks cannot punish you
• The five heaviest fails become Fix first, with a copyable snippet

What the fetch does

• User-Agent: MandaliumAudit/1.0 (+https://audit.mandalium.com)
• At most 5 redirects, 8 second timeout, 1.5 MB HTML cap
• In parallel: HTML, /robots.txt, sitemap, /llms.txt, favicon
• Localhost, private IPs and metadata hosts are refused
• HTTP 403, 406 and 429 → blocked. No fake score
• Rate limit: 10 / minute / IP, 20 / hour / host

What this audit does not check

Left out on purpose.

• ×PageSpeed Insights, Lighthouse or CrUX
• ×A Playwright pass that waits for hydration
• ×A full-site crawl
• ×Backlinks or keyword difficulty
• ×Whether ChatGPT already cites you

If the homepage is an empty #root with four script tags, the content check fails. That is the page as a crawler without rendering still often sees it.

Who it is for

• Owners of a brochure or service site who want a short, ordered list.
• Agencies who need a first pass before a proposal.
• Not a rank tracker. Not a substitute for Search Console.
• If you want the five fixes applied, Mandalium does that as a project. The first call is free.