# Prontezza IA di grovemade.com
> Misurato sulla home page. Valutazione complessiva: Discreto.
Punteggio 64/100, voto Discreto. Misurato 2026-09-10T19:01:41.586+00:00, motore axrush-engine@6.0.0.
## Controlli
### Contenuto — 71/100
#### Content Negotiation — 0/100
- **FAIL** Homepage does not serve Markdown via content negotiation
Got text/html (HTTP 200) for "Accept: text/markdown"
Serve a Markdown representation of your pages when agents request "Accept: text/markdown". Agents like Claude Code and Cursor ask for it, and Markdown cuts token usage by roughly 80% against HTML. Cloudflare ("Markdown for Agents") and Vercel can enable this without code changes.
https://axrush.com/guides/content-negotiation#not-supported
- **WARN** No , , , , , .
https://axrush.com/guides/html-rendering#few-landmarks
- **WARN** 2 headings found (recommend exactly 1)
Use a single per page to clearly mark the primary topic. Demote secondary headings to +.
https://axrush.com/guides/html-rendering#multiple-h1
- **PASS** 162/164 length 62 chars: "Modern Desk Organization & Office Accessories | Grovemade®"
- **PASS** Meta description length 111 chars
- **PASS** Canonical URL: https://grovemade.com/
- **WARN** <html lang="..."> is missing
Set the document language: <html lang="en">. Multilingual agents rely on this to pick the right summarization model and avoid mixed-language ranking.
https://axrush.com/guides/seo-basics#no-lang
- **PASS** UTF-8 charset declared
- **PASS** Viewport meta present: "width=device-width"
#### Operabilità per agenti — 70/100
- **PASS** 162/162 interactive elements have an accessible name
- **WARN** 11 link(s) lead nowhere without JavaScript
11 with no href, 0 with a javascript: href
A link with no destination cannot be followed by a fetch-only agent and cannot be opened in a new tab by a browsing one. Give it a real href, or make it a <button> if it is an action rather than a destination.
https://axrush.com/guides/agent-operability#dead-links
- **WARN** 1/1 iframes have no title
An untitled frame is an opaque region. A title tells an agent whether it is worth entering.
https://axrush.com/guides/agent-operability#iframe-no-title
- **WARN** Heading hierarchy skips 1 level(s)
h1 → h4
Agents outline a page from its headings. A skipped level puts a section under the wrong parent, so a summary attributes it to the wrong topic.
https://axrush.com/guides/agent-operability#heading-skips
- **WARN** 161/163 images, frames or videos have no declared dimensions
Undeclared dimensions shift the layout as media loads. An agent working from a screenshot clicks where the button was a moment ago. Set width and height, or aspect-ratio.
https://axrush.com/guides/agent-operability#unsized-media
- **WARN** No lang attribute on <html>
Agents route, translate and pick a voice from this. Add lang="en" or whichever applies.
https://axrush.com/guides/agent-operability#no-lang
- **PASS** Method note: this reads markup, not a rendered accessibility tree
Labels attached by script and roles computed at runtime are invisible here, so treat low proportions as a prompt to check the real tree rather than as a count. Every finding is also a plain accessibility defect.
### Accesso — 83/100
#### TLS / HTTPS — 85/100
- **PASS** Site is served over HTTPS
- **PASS** HTTP requests redirect to HTTPS
- **WARN** No Strict-Transport-Security header
Add: Strict-Transport-Security: max-age=31536000; includeSubDomains; preload. This locks browsers and many agents to HTTPS for 1 year.
https://axrush.com/guides/tls-https#no-hsts
#### Agent Access — 75/100
- **WARN** GPTBot receives a Cloudflare challenge instead of the page
body matched Cloudflare challenge markup; status 403
Challenge pages require running JavaScript. Crawlers that only fetch HTML — which is most of them — never get past one, so the page is effectively unavailable to them even though nothing is "blocked". Add a bot-management exception for verified AI crawlers. ax-audit sends this user agent from its own network without a Web Bot Auth signature, so an edge that verifies crawlers by IP range or signature will reject the probe while admitting the real crawler. Confirm against your WAF logs before changing any rule.
https://axrush.com/guides/agent-access#challenge-page
- **WARN** ClaudeBot receives a Cloudflare challenge instead of the page
body matched Cloudflare challenge markup; status 403
Challenge pages require running JavaScript. Crawlers that only fetch HTML — which is most of them — never get past one, so the page is effectively unavailable to them even though nothing is "blocked". Add a bot-management exception for verified AI crawlers. ax-audit sends this user agent from its own network without a Web Bot Auth signature, so an edge that verifies crawlers by IP range or signature will reject the probe while admitting the real crawler. Confirm against your WAF logs before changing any rule.
https://axrush.com/guides/agent-access#challenge-page
- **WARN** Meta-ExternalAgent receives a Cloudflare challenge instead of the page
body matched Cloudflare challenge markup; status 200
Challenge pages require running JavaScript. Crawlers that only fetch HTML — which is most of them — never get past one, so the page is effectively unavailable to them even though nothing is "blocked". Add a bot-management exception for verified AI crawlers. ax-audit sends this user agent from its own network without a Web Bot Auth signature, so an edge that verifies crawlers by IP range or signature will reject the probe while admitting the real crawler. Confirm against your WAF logs before changing any rule.
https://axrush.com/guides/agent-access#challenge-page
- **WARN** Amazonbot receives a Cloudflare challenge instead of the page
body matched Cloudflare challenge markup; status 403
Challenge pages require running JavaScript. Crawlers that only fetch HTML — which is most of them — never get past one, so the page is effectively unavailable to them even though nothing is "blocked". Add a bot-management exception for verified AI crawlers. ax-audit sends this user agent from its own network without a Web Bot Auth signature, so an edge that verifies crawlers by IP range or signature will reject the probe while admitting the real crawler. Confirm against your WAF logs before changing any rule.
https://axrush.com/guides/agent-access#challenge-page
- **WARN** Bytespider receives a Cloudflare challenge instead of the page
body matched Cloudflare challenge markup; status 403
Challenge pages require running JavaScript. Crawlers that only fetch HTML — which is most of them — never get past one, so the page is effectively unavailable to them even though nothing is "blocked". Add a bot-management exception for verified AI crawlers. ax-audit sends this user agent from its own network without a Web Bot Auth signature, so an edge that verifies crawlers by IP range or signature will reject the probe while admitting the real crawler. Confirm against your WAF logs before changing any rule.
https://axrush.com/guides/agent-access#challenge-page
- **WARN** CCBot receives a Cloudflare challenge instead of the page
body matched Cloudflare challenge markup; status 403
Challenge pages require running JavaScript. Crawlers that only fetch HTML — which is most of them — never get past one, so the page is effectively unavailable to them even though nothing is "blocked". Add a bot-management exception for verified AI crawlers. ax-audit sends this user agent from its own network without a Web Bot Auth signature, so an edge that verifies crawlers by IP range or signature will reject the probe while admitting the real crawler. Confirm against your WAF logs before changing any rule.
https://axrush.com/guides/agent-access#challenge-page
- **WARN** OAI-SearchBot receives a Cloudflare challenge instead of the page
body matched Cloudflare challenge markup; status 403
Challenge pages require running JavaScript. Crawlers that only fetch HTML — which is most of them — never get past one, so the page is effectively unavailable to them even though nothing is "blocked". Add a bot-management exception for verified AI crawlers. ax-audit sends this user agent from its own network without a Web Bot Auth signature, so an edge that verifies crawlers by IP range or signature will reject the probe while admitting the real crawler. Confirm against your WAF logs before changing any rule.
https://axrush.com/guides/agent-access#challenge-page
- **WARN** Claude-SearchBot receives a Cloudflare challenge instead of the page
body matched Cloudflare challenge markup; status 403
Challenge pages require running JavaScript. Crawlers that only fetch HTML — which is most of them — never get past one, so the page is effectively unavailable to them even though nothing is "blocked". Add a bot-management exception for verified AI crawlers. ax-audit sends this user agent from its own network without a Web Bot Auth signature, so an edge that verifies crawlers by IP range or signature will reject the probe while admitting the real crawler. Confirm against your WAF logs before changing any rule.
https://axrush.com/guides/agent-access#challenge-page
- **WARN** PerplexityBot receives a Cloudflare challenge instead of the page
body matched Cloudflare challenge markup; status 403
Challenge pages require running JavaScript. Crawlers that only fetch HTML — which is most of them — never get past one, so the page is effectively unavailable to them even though nothing is "blocked". Add a bot-management exception for verified AI crawlers. ax-audit sends this user agent from its own network without a Web Bot Auth signature, so an edge that verifies crawlers by IP range or signature will reject the probe while admitting the real crawler. Confirm against your WAF logs before changing any rule.
https://axrush.com/guides/agent-access#challenge-page
- **WARN** ChatGPT-User receives a Cloudflare challenge instead of the page
body matched Cloudflare challenge markup; status 403
Challenge pages require running JavaScript. Crawlers that only fetch HTML — which is most of them — never get past one, so the page is effectively unavailable to them even though nothing is "blocked". Add a bot-management exception for verified AI crawlers. ax-audit sends this user agent from its own network without a Web Bot Auth signature, so an edge that verifies crawlers by IP range or signature will reject the probe while admitting the real crawler. Confirm against your WAF logs before changing any rule.
https://axrush.com/guides/agent-access#challenge-page
- **WARN** 10 crawler probe(s) could not be settled from outside
GPTBot, ClaudeBot, Meta-ExternalAgent, Amazonbot, Bytespider, CCBot, OAI-SearchBot, Claude-SearchBot, PerplexityBot, ChatGPT-User
ax-audit sends this user agent from its own network without a Web Bot Auth signature, so an edge that verifies crawlers by IP range or signature will reject the probe while admitting the real crawler. Confirm against your WAF logs before changing any rule.
https://axrush.com/guides/agent-access#inconclusive-probe
#### Igiene HTTP — 80/100
- **WARN** A missing page redirects (308) instead of returning 404
Location: https://grovemade.com/ax-audit-probe-5ia5nu6r/
A redirect on a nonexistent path hides the error. Return 404 or 410 so a client can tell the difference.
https://axrush.com/guides/http-hygiene#soft-404-redirect
- **PASS** Homepage answers without a redirect
- **PASS** HEAD requests are supported
- **PASS** Content-Type: text/html with charset
#### Crawl Efficiency — 70/100
- **PASS** Response compressed with Brotli (br)
- **WARN** No ETag or Last-Modified header — conditional requests unsupported
Send an ETag or Last-Modified header so crawlers can revalidate with If-None-Match / If-Modified-Since and receive a cheap 304 Not Modified instead of the full body.
https://axrush.com/guides/crawl-efficiency#no-validators
- **PASS** Homepage size is reasonable (423.0 KB decompressed)
- **WARN** Roughly 3,256 tokens of content in 108,267 tokens of response (97% markup)
Estimated at four characters per token.
An agent pays to receive the markup and then discards it. Serving Markdown on Accept negotiation is the direct fix.
https://axrush.com/guides/crawl-efficiency#markup-overhead
- **PASS** Homepage responded in 285ms
#### Direttive IA — 100/100
- **PASS** Homepage is indexable
- **PASS** No directive restricts how AI assistants may use this page
### Individuabilità — 49/100
#### LLMs.txt — 0/100
- **FAIL** /llms.txt not found
HTTP 404
Create a /llms.txt file at your site root following the llmstxt.org specification. It should be a Markdown file starting with "# Your Site Name" and include a description, sections, and links.
https://axrush.com/guides/llms-txt#not-found
#### Robots.txt — 60/100
- **PASS** /robots.txt exists
- **FAIL** No core AI crawlers explicitly configured
Expected: GPTBot, ClaudeBot, Meta-ExternalAgent, Google-Extended, Applebot-Extended, Amazonbot, Bytespider, CCBot, OAI-SearchBot, Claude-SearchBot, PerplexityBot, ChatGPT-User
Add User-agent entries for core AI crawlers in your robots.txt. For each crawler, add: User-agent: <name> followed by Allow: / on the next line.
https://axrush.com/guides/robots-txt#no-core-crawlers
- **PASS** Sitemap directive present
- **WARN** No Content-Signal directive found (optional)
Declare how crawlers may use your content after access with the Content Signals Policy, e.g.: Content-Signal: search=yes, ai-train=no. Known signals: search, ai-input, ai-train, plus the optional use=immediate|reference|full. Generate yours at contentsignals.org.
https://axrush.com/guides/robots-txt#missing-content-signals
- **WARN** 0/57 known AI crawlers have explicit rules
Add explicit User-agent entries for more AI crawlers to maximize discoverability.
https://axrush.com/guides/robots-txt#low-coverage
#### Sitemap — 100/100
- **PASS** Sitemap located: https://grovemade.com/sitemap.xml
- **PASS** Content-Type is XML (application/xml)
- **PASS** 340 URL(s) declared
- **PASS** 100% of URLs have <lastmod>
- **PASS** Newest <lastmod> is recent (3 day(s) ago)
#### Meta Tags — 40/100
- **WARN** No AI meta tags (ai:*) found
Add AI meta tags to your HTML <head>: <meta name="ai:summary" content="Brief description">, <meta name="ai:content_type" content="website">, <meta name="ai:author" content="Your Name">.
https://axrush.com/guides/meta-tags#no-ai-meta
- **WARN** No rel="alternate" link to llms.txt in HTML
Add to your <head>: <link rel="alternate" type="text/plain" href="/llms.txt" title="LLM-optimized content">
https://axrush.com/guides/meta-tags#no-llms-alternate
- **WARN** No rel="alternate" link to the Agent Card in HTML
Add to your <head>: <link rel="alternate" type="application/json" href="/.well-known/agent-card.json" title="Agent Card">
https://axrush.com/guides/meta-tags#no-agent-alternate
- **WARN** No rel="me" identity links found
Add rel="me" links to verify your identity across platforms: <link rel="me" href="https://github.com/yourname">, <link rel="me" href="https://twitter.com/yourname">.
https://axrush.com/guides/meta-tags#no-rel-me
- **WARN** OpenGraph required tags missing: og:title, og:description, og:url, og:type
Add these meta tags: <meta property="og:title" content="...">, <meta property="og:description" content="...">, <meta property="og:url" content="...">, <meta property="og:type" content="...">.
https://axrush.com/guides/meta-tags#og-required-missing
- **WARN** No Twitter Card meta tags found
Add twitter:card, twitter:title, twitter:description, and twitter:image so X / Threads / Bluesky / Discord agents render link previews correctly.
https://axrush.com/guides/meta-tags#no-twitter
#### HTTP Headers — 60/100
- **FAIL** Missing critical header: Strict-Transport-Security
Add the Strict-Transport-Security response header to your server configuration. This is a critical security header.
https://axrush.com/guides/http-headers#missing-critical-header
- **FAIL** Missing critical header: X-Content-Type-Options
Add the X-Content-Type-Options response header to your server configuration. This is a critical security header.
https://axrush.com/guides/http-headers#missing-critical-header
- **WARN** Only 0/7 security headers present
Add security headers like Strict-Transport-Security, X-Content-Type-Options, X-Frame-Options, and Referrer-Policy to your server response.
https://axrush.com/guides/http-headers#low-security-headers
- **WARN** No Link header for AI discovery (llms.txt, Agent Card)
Add a Link response header pointing to your AI discovery files: Link: </llms.txt>; rel="alternate"; type="text/plain", </.well-known/agent-card.json>; rel="alternate"; type="application/json"
https://axrush.com/guides/http-headers#no-link-header
- **WARN** No machine-readable discovery relations beyond llms.txt and the Agent Card
describedby — llms.txt v2 uses this relation to point a page at the llms.txt that covers it.
api-catalog — RFC 9727: the catalog of APIs this publisher offers.
service-desc — RFC 8631: a machine-readable API description.
service-doc — RFC 8631: human documentation for the API.
ai-catalog — Draft: the AI catalog listing agent cards and MCP server cards.
c2pa-manifest — C2PA 2.4: content provenance for media on the page.
license — RSL and other machine-readable licensing terms.
Advertise what you publish with Link relations so agents stop guessing paths. Add the ones that apply, for example: Link: </llms.txt>; rel="describedby", </.well-known/api-catalog>; rel="api-catalog". Informational in 3.x: this does not affect your score.
https://axrush.com/guides/http-headers#discovery-relations
### Protocolli — 50/100
#### Agent Card (A2A) — N/D
- **PASS** No agent-facing surface — an Agent Card does not apply to this site
No API, MCP server or existing card was found. An Agent Card advertises capabilities another agent can invoke; a site that offers none has nothing to put in it. Run with --profile agent to audit as though it did.
#### OpenAPI Spec — N/D
- **PASS** No API surface — API discovery does not apply to this site
No description, catalog, service-desc relation or developer area was found. Run with --profile api to audit as though the site offered one.
#### MCP (Model Context Protocol) — N/D
- **PASS** No MCP server — MCP discovery does not apply to this site
A server card describes an MCP server so agents can find it. A site that runs none has nothing to advertise. Run with --profile mcp to audit as though it did.
#### Catalogo IA — 0/100 (informa, non assegna un punteggio)
- **WARN** No agent resource catalog found
Checked robots.txt Agentmap: directive, Link header rel="ai-catalog", <link rel="ai-catalog">, well-known path and /.well-known/ai-catalog.json, /.well-known/ard.json. Both specifications are drafts.
A catalog is one document listing everything an agent can call here — agent cards, MCP servers, APIs, skills — so a client stops probing four conventions to find out. Worth publishing once you have more than one of those. Informational: both ai-catalog.json and ard.json are still drafts, so this never affects your score.
https://axrush.com/guides/ai-catalog#not-found
#### Competenze agente — N/D
- **PASS** No developer-facing surface — skills do not apply to this site
No documentation links, llms.txt, or API description found. Skills describe procedures an agent follows; a site with no procedures to teach has nothing to publish.
#### Scoperta commercio — N/D
- **PASS** No commerce surface — agentic-commerce discovery does not apply to this site
No Product or Offer structured data, cart links, or product price tags found.
#### Scoperta autenticazione — N/D
- **PASS** Nothing on this site requires authorization — auth discovery does not apply
No API description, API catalog, MCP server card or commerce profile found.
#### WebMCP — 100/100 (informa, non assegna un punteggio)
- **WARN** 12 form(s) on the page, none declared as agent tools
WebMCP is a W3C Community Group draft in a Chrome origin trial. It is not a standard and adoption is minimal, so this is a forward-looking note, not a defect.
A declared form is called by an agent rather than driven pixel by pixel. Add toolname and tooldescription to the forms worth automating — search, filter, subscribe — and toolparamdescription to each field.
https://axrush.com/guides/webmcp#no-annotations
### Criteri — 18/100
#### Security.txt — 0/100
- **FAIL** /.well-known/security.txt not found
HTTP 404
Create a /.well-known/security.txt file per RFC 9116. At minimum, include Contact: and Expires: fields. See https://securitytxt.org/ for a generator.
https://axrush.com/guides/security-txt#not-found
#### RSL License — 0/100
- **FAIL** No RSL license discovery found
Checked robots.txt License directive, Link header, and <link rel="license" type="application/rsl+xml">
Declare machine-readable licensing terms for your content with Really Simple Licensing. Add to robots.txt: License: https://your-site.com/license.xml — then publish the RSL document. See https://rslstandard.org.
https://axrush.com/guides/rsl#not-found
#### Politica d'uso — 40/100
- **WARN** No machine-readable usage policy declared
Checked robots.txt Content-Signal and Content-Usage, the Content-Usage and content-signal response headers, an RSL licence, TDMRep, and the noai meta directive.
State your terms where they can be read without a lawyer. The lowest-effort option is a Content-Signal line in robots.txt: Content-Signal: search=yes, ai-input=yes, ai-train=no. Absence is neutral, not permission — but it also gives you nothing to point at.
https://axrush.com/guides/usage-policy#no-policy
---
Rappresentazione Markdown di https://axrush.com/report/grovemade.com