Sample Report
A fictional Markham dental clinic, audited in the exact format I deliver. Two parts: how visible the business is to AI assistants, and what an outside scan found on the site. Your report would read the same way — different numbers, same plain English.
Bottom line: if a Markham resident asks an AI assistant for a family dentist, this business is unlikely to be among the names given. The clinic is fine on old Google (page 1, 41 reviews) and nearly invisible to the new one.
| Check | Result | Detail |
|---|---|---|
| AI crawlers allowed | Blocked | robots.txt blocks GPTBot and PerplexityBot — likely inherited from the website builder's default settings. |
| Structured data (schema.org) | Missing | No Dentist or LocalBusiness markup. The site looks like a brochure; assistants can't reliably extract what it offers. |
| Name / address / phone consistency | Weak | Phone on the site ends -18; Google Business Profile ends -14. Assistants treat mismatch as a trust penalty. |
| Service pages answer questions | Weak | Services are photo galleries with one-line captions. “Do you take ODSP?”, “How much is a cleaning?”, “Are you accepting new patients?” — none answered in text. |
| Reviews used as quotable content | Thin | 41 Google reviews exist; the site quotes none. Assistants lean on sources that quote their own proof. |
| Assistant query panel | 0 of 25 | Of 25 local questions (“best family dentist Markham”, “dentist near me open Saturday”, etc.), the clinic was named 0 times. A competitor 2 km away was named 11 times. |
| Site speed / mobile | OK | No issues. Not the problem here. |
Dentist structured data. One or two hours. Tells every assistant exactly what the business is, where, and what it does.You do not need: a blog posting schedule, paid “AI optimization” packages, a chatbot on your website, or new photos. None of those move the 0-of-25 number. Fixes 1–4 do.
| Finding | Severity | What it means |
|---|---|---|
| WordPress login page exposed with no rate limiting | High | Anyone on the internet can guess your admin password as fast as their software can type. This is how small-business sites get defaced. |
| PHP version past end-of-life | High | The software running the site no longer receives security fixes. Known holes stay open. |
| Old TLS versions (1.0/1.1) still enabled | Medium | Outdated encryption on the connection to your site. Easy fix, rarely done. |
| No DMARC/SPF on the business email domain | Medium | Anyone can send email pretending to be your clinic — to your patients. This is how your patients get phished in your name. |
| Database admin tool reachable at a guessable URL | High | Not open, but findable. Should not be reachable at all. |
| What was not found | Clean | No open file shares, no exposed patient data, no subdomain surprises. The scary stuff mostly wasn't there. |