BTrust Shield
Website security
91/100HTTPS / SSLreachableThe site loads over HTTPS — visitors see the browser padlock, and data is encrypted in transit.
Mixed contentnoneEvery resource on the page loads over secure https:// — no mixed-content warnings.
HTTP → HTTPS redirectenforcedPlain HTTP visitors are redirected to the secure HTTPS version.
HSTSsetHSTS is set, so browsers always connect over HTTPS.
Content-Security-PolicymissingNo Content-Security-Policy. Add one to reduce the risk of injected/malicious scripts.
X-Frame-OptionsmissingMissing X-Frame-Options (or frame-ancestors), leaving the site open to clickjacking.
X-Content-Type-OptionssetMIME-sniffing protection (nosniff) is enabled.
Referrer-PolicysetA Referrer-Policy is set, controlling what referrer data leaks to other sites.
Safe Browsing statusnot checkedMalware / phishing blacklist screening (Google Safe Browsing) isn't enabled yet. Once the API key is set, every audit confirms the site isn't flagged by Google, Chrome and Firefox.
Email authentication
52/100SPF recordenforcedSPF is published and ends with a fail/softfail rule, so unauthorised senders are rejected.
DMARC policymissingNo DMARC record. Add one so mailbox providers know how to handle mail that fails SPF/DKIM.
DKIM signingnot detectedNo DKIM key detected on common selectors. If you send mail, publish a DKIM key so messages are signed.
On-page SEO
82/100Page title57 charsTitle: "Operational Systems & AI Implementation | MagicAiFlow". Aim for 20–65 characters with your service + city.
Meta description140 charsA meta description is present — keep it 50–165 characters and benefit-led.
H1 heading0 foundNo H1 heading found. Add one describing what the business does.
Canonical URLsetA canonical URL is declared, preventing duplicate-content dilution.
Open Graph tagscompleteOpen Graph title + image are set, so shared links look rich on social and in chats.
Mobile viewportsetA responsive viewport is declared — required for mobile-friendliness.
Language declarationenThe page declares its language (lang="en").
Content in initial HTMLReact — client-renderedMost of your page content is rendered by JavaScript, so it isn't in the HTML that crawlers first receive. Google can render JavaScript but often with delay, and AI assistants, social, and link-preview crawlers frequently can't — so your text may be invisible to them. Enable server-side rendering or prerendering so your key content, headings and business details are in the HTML.
Structured data & AI-readiness
100/100Structured data (schema.org)2 block(s)JSON-LD structured data found (Organization, ImageObject, PostalAddress, WebSite).
LocalBusiness schemapresentA LocalBusiness/Organization schema is present — ideal for local + AI visibility.
Crawlability & speed
100/100robots.txtfoundA robots.txt is served, telling crawlers what they can access.
XML sitemapfoundAn XML sitemap is available, helping search engines discover every page.
Server response time717 msThe homepage responded in 717ms — fast, which helps rankings and conversions.
Local presence
70/100Clickable phone numbermissingNo clickable phone (tel:) link found. Add one so mobile visitors can call in one tap and search engines read your number.
Address on pagefoundA postal address is visible on the page — consistent name/address/phone (NAP) builds local trust.
Embedded mapmissingNo embedded map found. Adding a Google Map of your location helps visitors and confirms your address.
Opening hours / geo in schemamissingNo opening hours or geo-coordinates in schema. Add them to your LocalBusiness markup so you can win 'open now' and 'near me' queries.
This scan checks your website. Our plans work beyond it.Everything above is your site's own technical health — security, on-page SEO, structured data. Local and Growth are mainly off-page: your Google Business Profile, citations across directories, reviews and competitor tracking — the things this scan doesn't look at, but that move local rankings the most. See what each plan covers.
Your prioritized fix list
What to fix first — biggest impact at the top.
1
DMARC policyhigh impact
No DMARC record. Add one so mailbox providers know how to handle mail that fails SPF/DKIM.
2
H1 headinghigh impact
No H1 heading found. Add one describing what the business does.
3
Content-Security-Policymed impact
No Content-Security-Policy. Add one to reduce the risk of injected/malicious scripts.
4
X-Frame-Optionsmed impact
Missing X-Frame-Options (or frame-ancestors), leaving the site open to clickjacking.
5
DKIM signingmed impact
No DKIM key detected on common selectors. If you send mail, publish a DKIM key so messages are signed.
6
Content in initial HTMLmed impact
Most of your page content is rendered by JavaScript, so it isn't in the HTML that crawlers first receive. Google can render JavaScript but often with delay, and AI assistants, social, and link-preview crawlers frequently can't — so your text may be invisible to them. Enable server-side rendering or prerendering so your key content, headings and business details are in the HTML.
7
Clickable phone numbermed impact
No clickable phone (tel:) link found. Add one so mobile visitors can call in one tap and search engines read your number.
8
Embedded mapmed impact
No embedded map found. Adding a Google Map of your location helps visitors and confirms your address.
9
Opening hours / geo in schemamed impact
No opening hours or geo-coordinates in schema. Add them to your LocalBusiness markup so you can win 'open now' and 'near me' queries.
Not sure what to do next?
Every fix, three ways — pick whoever's doing the work.
The same findings, written for you, for your developer, and as a ready-to-paste prompt for your AI assistant. No jargon required.
Here's what we found on magicaiflow.com, in plain English — worst-first:
- DMARC policy. No DMARC record. Add one so mailbox providers know how to handle mail that fails SPF/DKIM.
- H1 heading. No H1 heading found. Add one describing what the business does.
- Content-Security-Policy. No Content-Security-Policy. Add one to reduce the risk of injected/malicious scripts.
- X-Frame-Options. Missing X-Frame-Options (or frame-ancestors), leaving the site open to clickjacking.
- DKIM signing. No DKIM key detected on common selectors. If you send mail, publish a DKIM key so messages are signed.
- Content in initial HTML. Most of your page content is rendered by JavaScript, so it isn't in the HTML that crawlers first receive. Google can render JavaScript but often with delay, and AI assistants, social, and link-preview crawlers frequently can't — so your text may be invisible to them. Enable server-side rendering or prerendering so your key content, headings and business details are in the HTML.
- Clickable phone number. No clickable phone (tel:) link found. Add one so mobile visitors can call in one tap and search engines read your number.
- Embedded map. No embedded map found. Adding a Google Map of your location helps visitors and confirms your address.
- Opening hours / geo in schema. No opening hours or geo-coordinates in schema. Add them to your LocalBusiness markup so you can win 'open now' and 'near me' queries.
You don't have to fix these alone — ranker.bot drafts each fix and you approve it in one click.
Prefer we just handle it?
For a one-time fee, we'll contact your developer directly, hand them the full technical brief for magicaiflow.com, and confirm every fix is live — you don't have to brief anyone yourself.
Ask about the on-page fix-it serviceFree · no credit card
Get this as a shareable PDF — and keep an eye on it for free
We'll email you a polished PDF of this report with every fix spelled out, then re-run the audit each month and alert you if your score slips.
- Branded PDF you can keep, print or share
- Every fix explained simply, prioritized by impact
- Free monthly re-check with change alerts
Fix these with ranker.bot
Free to start · We draft every fix · You approve in one click
Report by ranker.bot · magicaiflow.com · Visibility 84/100 · Trust Shield B · Generated 9/9/2026