The SEO, GEO and security issues almost every fast-shipped site has
Vibesmonitor now runs a daily site audit. It fetches each project the way a crawler does, with no JavaScript, and writes three reports. These are the issues that come up most:
SEO (how would search engines score your page?)
The title still says "Vite + React"
A noindex left over from staging, so the site is out of search
No og:image, so every shared link shows up without a picture
GEO (can AI answers find you?)
The raw HTML is an empty <div id="root">. Most AI crawlers don't run JavaScript, so ChatGPT and Perplexity see a blank page
No JSON-LD, so engines have to guess what the site is
robots.txt blocks the AI search bots along with the training ones, so the site never shows up in answers
Security (is your page wide opened for attacks?)
No CSP, or one with unsafe-inline that undoes it
No HSTS
X-Powered-By: Express announcing the stack
Session cookies without Secure or SameSite
Almost every fix is one line to give to your agent.
How many of these does your page have?
Replies
Good list. One more we found on our own site: the same pages answering on several hosts. www, a mail. subdomain the hosting panel created, and an old /ru/ copy all returned 200, so Search Console treated them as duplicates and picked its own canonical. A 301 to one host fixed it, but nothing in a single-URL audit shows it.
On the robots.txt point: GPTBot, OAI-SearchBot, PerplexityBot and Google-Extended are separate robots.txt tokens, so you can block training without blocking AI search. Worth checking which rule each one actually hits rather than reading the file by eye. PromoPilot has a free robots.txt validator if anyone wants a quick check.