Visits.report — analytics you can publish and prove

Failing · 4

• Asset cachingNo caching headers: repeat visits refetch everything
• HSTSVerify that you own this domain to see this finding.
• Content-Security-PolicyVerify that you own this domain to see this finding.
• llms.txtNo llms.txt: AI crawlers have no quick brief of your site

Partial · 9

• Modern HTTPHTTP/2+ not advertised (or hidden by the CDN)
• Permissions-PolicyVerify that you own this domain to see this finding.
• No version leakVerify that you own this domain to see this finding.
• security.txtVerify that you own this domain to see this finding.
• Supabase row-level security (data exposure)Verify that you own this domain to see this finding.
• AnalyticsNo analytics in the HTML — if it loads as a module, only a browser audit can see it
• Heading orderHeading levels skip (e.g. h2→h4). Tidy the outline
• Social presenceOnly X linked: one channel is a single point of failure
• Payment pathNo pricing or checkout found. Fine for a plain landing page; add one once you're selling