AI visibility and website security audits

What it is

Businesses are being described by AI assistants whether they participate or not. This practice audits that: whether a site is discoverable, citable and correctly described by language models, alongside a security review of the same site.

The work is packaged: a scoring methodology, per-site audits, proposal generation and engagement delivery. Ten-plus sites audited, two full engagements run to completion with reports, remediation and re-audits.

Under the hood

• A scoring methodology, published as its own document. Audit scores mean the same thing across sites.
• AI-visibility audits: structured data, llms.txt, content structure and crawler access, scored and ranked.
• Security audits with CVSS ratings: findings sorted by real exploitability, with remediation options priced in effort.
• Implementation, not just reports: schema deployment, WordPress hardening on the server and validation scans after.
• An engagement pipeline: audit to proposal to delivery report to re-audit, all templated.

What makes it different

Most GEO advice is a blog post. This is an audit with a score, a fix list and a re-audit that proves the score moved. Pairing it with security work was the useful accident: the same client asks both questions and the second audit frequently finds the first audit's fixes deployed carelessly.

Stack