{"engine":"ARB/1.1","spec_date":"2026-08-26","url":"https://audit.apexclawai.com/methodology","scope_statement":"ARB/1.1 measures whether this one public page is legible and independently verifiable to an autonomous agent: structured data, machine-readable dates, off-site corroboration, and the page's public transport and security surface. It does not measure the organisation's actual security posture, the quality of its product, or its reputation -- those require access, judgement, and time this engine does not have and will not simulate. Its security_surface pillar reads public response headers and TLS parameters observed on one fetch; it is NOT a penetration test and must never be read as one.","pillars":[{"key":"machine_access","label":"Machine Access","weight_pct":14},{"key":"structured_data","label":"Structured Data","weight_pct":14},{"key":"extractability","label":"Answer Extractability","weight_pct":13},{"key":"evidence","label":"Evidence & Citability","weight_pct":11},{"key":"entity","label":"Entity Clarity","weight_pct":10},{"key":"agent_surface","label":"Agent Interaction Surface","weight_pct":10},{"key":"governance","label":"Governance & Trust","weight_pct":8},{"key":"offsite","label":"Off-site Corroboration","weight_pct":10},{"key":"security_surface","label":"Transport & Security Surface","weight_pct":10}],"scoring":{"verdicts":["VERIFIED","UNVERIFIED","UNOBSERVABLE"],"partial_credit":null,"unobservable_handling":"removed from the denominator -- evidence needed to decide was absent","total_weight":100},"checks":[{"id":"ma.reachable","pillar":"machine_access","pillar_label":"Machine Access","title":"Page returns 200 to an agent user-agent","weight":4,"method":"deterministic","in_free_tier":true,"fix":"Serve 200 to non-browser user-agents. Do not gate first paint behind JS or a bot challenge."},{"id":"ma.robots","pillar":"machine_access","pillar_label":"Machine Access","title":"robots.txt present","weight":2,"method":"deterministic","in_free_tier":false,"fix":"Publish /robots.txt. Its absence is ambiguous to crawlers that fail closed."},{"id":"ma.ai_crawlers","pillar":"machine_access","pillar_label":"Machine Access","title":"AI crawlers not blocked in robots.txt","weight":4,"method":"deterministic","in_free_tier":true,"fix":"Remove Disallow: / for GPTBot, ClaudeBot, PerplexityBot, Google-Extended, OAI-SearchBot."},{"id":"ma.llms_txt","pillar":"machine_access","pillar_label":"Machine Access","title":"/llms.txt published","weight":3,"method":"deterministic","in_free_tier":false,"fix":"Publish /llms.txt: a plain-text map of your canonical claims and the URLs that support them."},{"id":"ma.sitemap","pillar":"machine_access","pillar_label":"Machine Access","title":"XML sitemap resolves","weight":2,"method":"deterministic","in_free_tier":false,"fix":"Serve /sitemap.xml and reference it from robots.txt."},{"id":"ma.no_js_content","pillar":"machine_access","pillar_label":"Machine Access","title":"Primary content present without JavaScript","weight":3,"method":"deterministic","in_free_tier":true,"fix":"Server-render or pre-render the main content. Agents rarely execute your JS bundle."},{"id":"sd.any","pillar":"structured_data","pillar_label":"Structured Data","title":"JSON-LD structured data present","weight":4,"method":"deterministic","in_free_tier":true,"fix":"Add JSON-LD. Without it an agent must infer your entity from prose."},{"id":"sd.org","pillar":"structured_data","pillar_label":"Structured Data","title":"Organization / Product entity declared","weight":4,"method":"deterministic","in_free_tier":false,"fix":"Emit an Organization (or Product/SoftwareApplication) node with name, url, logo, sameAs."},{"id":"sd.faq","pillar":"structured_data","pillar_label":"Structured Data","title":"FAQPage or QAPage markup","weight":3,"method":"deterministic","in_free_tier":false,"fix":"Mark up real questions as FAQPage. This is the highest-yield block for answer engines."},{"id":"sd.breadcrumb","pillar":"structured_data","pillar_label":"Structured Data","title":"BreadcrumbList markup","weight":2,"method":"deterministic","in_free_tier":false,"fix":"Add BreadcrumbList so agents can place the page in your site hierarchy."},{"id":"sd.article","pillar":"structured_data","pillar_label":"Structured Data","title":"Article / TechArticle / Dataset for content pages","weight":2,"method":"deterministic","in_free_tier":false,"fix":"Wrap research and article pages in Article/TechArticle with datePublished and author."},{"id":"sd.sameas","pillar":"structured_data","pillar_label":"Structured Data","title":"sameAs identity links in JSON-LD","weight":3,"method":"deterministic","in_free_tier":false,"fix":"Add sameAs pointing to LinkedIn, Crunchbase, Wikidata, GitHub."},{"id":"ex.h1","pillar":"extractability","pillar_label":"Answer Extractability","title":"Exactly one H1","weight":2,"method":"deterministic","in_free_tier":false,"fix":"Use one H1 that states the page's subject as a noun phrase."},{"id":"ex.question_heads","pillar":"extractability","pillar_label":"Answer Extractability","title":"Question-form headings","weight":4,"method":"deterministic","in_free_tier":true,"fix":"Write headings as the questions buyers actually ask, then answer in the first 2 sentences below."},{"id":"ex.direct_answers","pillar":"extractability","pillar_label":"Answer Extractability","title":"Short direct-answer paragraphs under headings","weight":4,"method":"deterministic","in_free_tier":false,"fix":"Lead each section with a 25-40 word answer. That block is what gets lifted into an AI answer."},{"id":"ex.structured_blocks","pillar":"extractability","pillar_label":"Answer Extractability","title":"Tables or lists carry comparable facts","weight":3,"method":"deterministic","in_free_tier":false,"fix":"Put specifications, comparisons and criteria in tables. Agents extract tables cleanly."},{"id":"ex.depth","pillar":"extractability","pillar_label":"Answer Extractability","title":"Sufficient topical depth","weight":3,"method":"deterministic","in_free_tier":false,"fix":"Thin pages lose to depth. 900+ words of substantive, non-boilerplate content."},{"id":"ev.dated","pillar":"evidence","pillar_label":"Evidence & Citability","title":"Content carries a machine-readable date","weight":4,"method":"deterministic","in_free_tier":true,"fix":"Stamp every substantive page with datePublished and dateModified."},{"id":"ev.author","pillar":"evidence","pillar_label":"Evidence & Citability","title":"Named author or reviewer","weight":3,"method":"heuristic","in_free_tier":false,"fix":"Attribute pages to a named human with a bio URL."},{"id":"ev.citations","pillar":"evidence","pillar_label":"Evidence & Citability","title":"Outbound citations to independent sources","weight":3,"method":"deterministic","in_free_tier":false,"fix":"Cite primary sources by URL. Pages that cite get cited."},{"id":"ev.canonical","pillar":"evidence","pillar_label":"Evidence & Citability","title":"Canonical URL declared","weight":2,"method":"deterministic","in_free_tier":false,"fix":"Declare rel=canonical on every page."},{"id":"ev.specifics","pillar":"evidence","pillar_label":"Evidence & Citability","title":"Quantified, checkable claims","weight":2,"method":"heuristic","in_free_tier":false,"fix":"Replace adjectives with numbers a reader can verify."},{"id":"en.title","pillar":"entity","pillar_label":"Entity Clarity","title":"Descriptive <title>","weight":2,"method":"deterministic","in_free_tier":false,"fix":"Title: <Entity> - <what it is>. 15-70 characters."},{"id":"en.description","pillar":"entity","pillar_label":"Entity Clarity","title":"Meta description present","weight":2,"method":"deterministic","in_free_tier":false,"fix":"Write a 120-160 character description that states what the entity is."},{"id":"en.opengraph","pillar":"entity","pillar_label":"Entity Clarity","title":"OpenGraph metadata","weight":2,"method":"deterministic","in_free_tier":false,"fix":"Add OpenGraph tags."},{"id":"en.about_contact","pillar":"entity","pillar_label":"Entity Clarity","title":"About and Contact reachable from this page","weight":3,"method":"deterministic","in_free_tier":true,"fix":"Link /about and /contact from every page."},{"id":"en.lang","pillar":"entity","pillar_label":"Entity Clarity","title":"Language declared","weight":1,"method":"deterministic","in_free_tier":false,"fix":"Set <html lang=...>."},{"id":"en.https","pillar":"entity","pillar_label":"Entity Clarity","title":"Served over HTTPS","weight":2,"method":"deterministic","in_free_tier":false,"fix":"Serve HTTPS and redirect HTTP."},{"id":"ag.forms","pillar":"agent_surface","pillar_label":"Agent Interaction Surface","title":"Forms are machine-fillable (named fields)","weight":3,"method":"deterministic","in_free_tier":false,"fix":"Give every input a name and a bound <label>."},{"id":"ag.booking","pillar":"agent_surface","pillar_label":"Agent Interaction Surface","title":"Booking endpoint linked","weight":3,"method":"deterministic","in_free_tier":true,"fix":"Expose one stable booking URL."},{"id":"ag.api","pillar":"agent_surface","pillar_label":"Agent Interaction Surface","title":"Machine endpoint or API discoverable","weight":3,"method":"heuristic","in_free_tier":false,"fix":"Publish an OpenAPI document or /.well-known/mcp.json."},{"id":"ag.contact_ld","pillar":"agent_surface","pillar_label":"Agent Interaction Surface","title":"Contact details in structured data","weight":3,"method":"deterministic","in_free_tier":false,"fix":"Put contactPoint in JSON-LD."},{"id":"gv.security_txt","pillar":"governance","pillar_label":"Governance & Trust","title":"/.well-known/security.txt published","weight":2,"method":"deterministic","in_free_tier":false,"fix":"Publish security.txt with a disclosure contact."},{"id":"gv.policies","pillar":"governance","pillar_label":"Governance & Trust","title":"Privacy and Terms linked","weight":2,"method":"deterministic","in_free_tier":false,"fix":"Link Privacy and Terms in the footer of every page."},{"id":"gv.ai_policy","pillar":"governance","pillar_label":"Governance & Trust","title":"Stated policy for AI/agent access","weight":3,"method":"heuristic","in_free_tier":true,"fix":"Publish an agent access policy."},{"id":"offsite.sameas_resolve","pillar":"offsite","pillar_label":"Off-site Corroboration","title":"sameAs targets resolve and are independent","weight":3,"method":"deterministic","in_free_tier":false,"fix":"Add sameAs links to resolvable, distinct-domain identity profiles."},{"id":"offsite.citations_resolve","pillar":"offsite","pillar_label":"Off-site Corroboration","title":"Citations resolve across distinct domains","weight":3,"method":"deterministic","in_free_tier":false,"fix":"Cite primary sources whose links actually resolve."},{"id":"offsite.security_contact","pillar":"offsite","pillar_label":"Off-site Corroboration","title":"security.txt contact is reachable","weight":2,"method":"deterministic","in_free_tier":false,"fix":"Publish security.txt with a Contact: field."},{"id":"offsite.wikidata","pillar":"offsite","pillar_label":"Off-site Corroboration","title":"Entity present in Wikidata","weight":2,"method":"deterministic","in_free_tier":false,"fix":"Declare an Organization name in JSON-LD or a descriptive <title>."},{"id":"offsite.claims_attributable","pillar":"offsite","pillar_label":"Off-site Corroboration","title":"Quantified claims are attributable to a source","weight":2,"method":"heuristic","in_free_tier":false,"fix":""},{"id":"sec.tls_version","pillar":"security_surface","pillar_label":"Transport & Security Surface","title":"Modern TLS version negotiated","weight":3,"method":"deterministic","in_free_tier":false,"fix":"Serve HTTPS with TLS 1.2 or newer."},{"id":"sec.cert_valid","pillar":"security_surface","pillar_label":"Transport & Security Surface","title":"TLS certificate chain is valid","weight":3,"method":"deterministic","in_free_tier":false,"fix":"Use a certificate issued by a publicly trusted CA and keep the chain complete."},{"id":"sec.hsts","pillar":"security_surface","pillar_label":"Transport & Security Surface","title":"HSTS present with a sane max-age","weight":2,"method":"deterministic","in_free_tier":false,"fix":"Send Strict-Transport-Security with max-age >= 180 days."},{"id":"sec.csp","pillar":"security_surface","pillar_label":"Transport & Security Surface","title":"CSP present and not trivially permissive","weight":3,"method":"deterministic","in_free_tier":false,"fix":"Send a Content-Security-Policy that does not default-src *."},{"id":"sec.xcto","pillar":"security_surface","pillar_label":"Transport & Security Surface","title":"X-Content-Type-Options: nosniff","weight":1,"method":"deterministic","in_free_tier":false,"fix":"Send X-Content-Type-Options: nosniff."},{"id":"sec.referrer_policy","pillar":"security_surface","pillar_label":"Transport & Security Surface","title":"Referrer-Policy declared","weight":1,"method":"deterministic","in_free_tier":false,"fix":"Send a Referrer-Policy header."},{"id":"sec.permissions_policy","pillar":"security_surface","pillar_label":"Transport & Security Surface","title":"Permissions-Policy declared","weight":1,"method":"deterministic","in_free_tier":false,"fix":"Send a Permissions-Policy header, even an empty allowlist."},{"id":"sec.mixed_content","pillar":"security_surface","pillar_label":"Transport & Security Surface","title":"No mixed content on an HTTPS page","weight":2,"method":"deterministic","in_free_tier":false,"fix":"Serve every subresource over https://."},{"id":"sec.server_banner","pillar":"security_surface","pillar_label":"Transport & Security Surface","title":"Server banner does not leak a version","weight":1,"method":"deterministic","in_free_tier":false,"fix":"Suppress or generalise the Server header; a version number is a target list."}],"cohort":{"measured":true,"n":30,"min":3.2,"median":59.8,"max":77.7,"captured":null,"sites":[{"url":"https://www.salesforce.com","final_url":"https://www.salesforce.com/?bc=DB","http_status":200,"fetch_error":"","score":66.8,"pillars":{"machine_access":100.0,"structured_data":44.4,"extractability":62.5,"evidence":78.6,"entity":75.0,"agent_surface":66.7,"governance":28.6,"offsite":71.4,"security_surface":62.5},"counts":{"verified":30,"unverified":15,"unobservable":4},"timestamp_utc":"2026-08-26T20:55:37.477107+00:00"},{"url":"https://www.hubspot.com","final_url":"https://www.hubspot.com","http_status":200,"fetch_error":"","score":73.8,"pillars":{"machine_access":100.0,"structured_data":61.1,"extractability":100.0,"evidence":50.0,"entity":75.0,"agent_surface":50.0,"governance":57.1,"offsite":80.0,"security_surface":76.5},"counts":{"verified":36,"unverified":12,"unobservable":1},"timestamp_utc":"2026-08-26T20:55:46.481008+00:00"},{"url":"https://www.zendesk.com","final_url":"https://www.zendesk.com","http_status":200,"fetch_error":"","score":71.5,"pillars":{"machine_access":100.0,"structured_data":61.1,"extractability":50.0,"evidence":78.6,"entity":75.0,"agent_surface":75.0,"governance":57.1,"offsite":83.3,"security_surface":58.8},"counts":{"verified":35,"unverified":14,"unobservable":0},"timestamp_utc":"2026-08-26T20:56:00.565784+00:00"},{"url":"https://www.atlassian.com","final_url":"https://www.atlassian.com","http_status":200,"fetch_error":"","score":77.7,"pillars":{"machine_access":100.0,"structured_data":61.1,"extractability":75.0,"evidence":57.1,"entity":75.0,"agent_surface":100.0,"governance":57.1,"offsite":100.0,"security_surface":70.6},"counts":{"verified":36,"unverified":11,"unobservable":2},"timestamp_utc":"2026-08-26T20:56:12.016093+00:00"},{"url":"https://www.servicenow.com","final_url":"https://www.servicenow.com","http_status":403,"fetch_error":"","score":21.5,"pillars":{"machine_access":0.0,"structured_data":0.0,"extractability":12.5,"evidence":0.0,"entity":16.7,"agent_surface":0.0,"governance":0.0,"offsite":100.0,"security_surface":82.4},"counts":{"verified":9,"unverified":34,"unobservable":6},"timestamp_utc":"2026-08-26T20:56:14.671671+00:00"},{"url":"https://www.workday.com","final_url":"https://www.workday.com","http_status":200,"fetch_error":"","score":63.1,"pillars":{"machine_access":72.2,"structured_data":61.1,"extractability":50.0,"evidence":35.7,"entity":100.0,"agent_surface":66.7,"governance":28.6,"offsite":80.0,"security_surface":70.6},"counts":{"verified":30,"unverified":17,"unobservable":2},"timestamp_utc":"2026-08-26T20:56:27.378308+00:00"},{"url":"https://www.sap.com","final_url":"https://www.sap.com","http_status":403,"fetch_error":"","score":17.4,"pillars":{"machine_access":11.1,"structured_data":0.0,"extractability":12.5,"evidence":0.0,"entity":16.7,"agent_surface":0.0,"governance":28.6,"offsite":50.0,"security_surface":52.9},"counts":{"verified":9,"unverified":36,"unobservable":4},"timestamp_utc":"2026-08-26T20:56:30.969002+00:00"},{"url":"https://www.oracle.com","final_url":"https://www.oracle.com","http_status":403,"fetch_error":"","score":11.8,"pillars":{"machine_access":0.0,"structured_data":0.0,"extractability":18.8,"evidence":0.0,"entity":16.7,"agent_surface":0.0,"governance":0.0,"offsite":0.0,"security_surface":76.5},"counts":{"verified":8,"unverified":35,"unobservable":6},"timestamp_utc":"2026-08-26T20:56:33.531877+00:00"},{"url":"https://www.slack.com","final_url":"https://slack.com/","http_status":200,"fetch_error":"","score":59.4,"pillars":{"machine_access":100.0,"structured_data":0.0,"extractability":50.0,"evidence":35.7,"entity":100.0,"agent_surface":33.3,"governance":57.1,"offsite":100.0,"security_surface":70.6},"counts":{"verified":29,"unverified":17,"unobservable":3},"timestamp_utc":"2026-08-26T20:56:37.722928+00:00"},{"url":"https://www.zoom.us","final_url":"https://www.zoom.com","http_status":200,"fetch_error":"","score":77.7,"pillars":{"machine_access":72.2,"structured_data":61.1,"extractability":75.0,"evidence":64.3,"entity":100.0,"agent_surface":100.0,"governance":71.4,"offsite":100.0,"security_surface":64.7},"counts":{"verified":33,"unverified":13,"unobservable":3},"timestamp_utc":"2026-08-26T20:56:44.876719+00:00"},{"url":"https://www.docusign.com","final_url":"https://www.docusign.com","http_status":200,"fetch_error":"","score":59.0,"pillars":{"machine_access":83.3,"structured_data":61.1,"extractability":62.5,"evidence":50.0,"entity":58.3,"agent_surface":50.0,"governance":28.6,"offsite":50.0,"security_surface":70.6},"counts":{"verified":29,"unverified":19,"unobservable":1},"timestamp_utc":"2026-08-26T20:56:54.119487+00:00"},{"url":"https://www.snowflake.com","final_url":"https://www.snowflake.com/en/","http_status":200,"fetch_error":"","score":48.3,"pillars":{"machine_access":72.2,"structured_data":0.0,"extractability":31.2,"evidence":64.3,"entity":100.0,"agent_surface":25.0,"governance":57.1,"offsite":0.0,"security_surface":100.0},"counts":{"verified":27,"unverified":19,"unobservable":3},"timestamp_utc":"2026-08-26T20:57:00.316516+00:00"},{"url":"https://www.datadoghq.com","final_url":"https://www.datadoghq.com","http_status":200,"fetch_error":"","score":71.6,"pillars":{"machine_access":100.0,"structured_data":61.1,"extractability":50.0,"evidence":64.3,"entity":100.0,"agent_surface":75.0,"governance":28.6,"offsite":62.5,"security_surface":94.1},"counts":{"verified":35,"unverified":12,"unobservable":2},"timestamp_utc":"2026-08-26T20:57:14.065464+00:00"},{"url":"https://www.twilio.com","final_url":"https://www.twilio.com/en-us","http_status":200,"fetch_error":"","score":72.3,"pillars":{"machine_access":100.0,"structured_data":61.1,"extractability":75.0,"evidence":78.6,"entity":75.0,"agent_surface":66.7,"governance":28.6,"offsite":80.0,"security_surface":68.8},"counts":{"verified":33,"unverified":13,"unobservable":3},"timestamp_utc":"2026-08-26T20:57:32.270153+00:00"},{"url":"https://www.stripe.com","final_url":"https://stripe.com","http_status":200,"fetch_error":"","score":70.1,"pillars":{"machine_access":88.9,"structured_data":61.1,"extractability":62.5,"evidence":78.6,"entity":75.0,"agent_surface":50.0,"governance":57.1,"offsite":58.3,"security_surface":94.1},"counts":{"verified":35,"unverified":14,"unobservable":0},"timestamp_utc":"2026-08-26T20:57:41.308286+00:00"},{"url":"https://www.okta.com","final_url":"https://www.okta.com","http_status":200,"fetch_error":"","score":68.9,"pillars":{"machine_access":100.0,"structured_data":61.1,"extractability":75.0,"evidence":50.0,"entity":75.0,"agent_surface":33.3,"governance":57.1,"offsite":80.0,"security_surface":76.5},"counts":{"verified":34,"unverified":13,"unobservable":2},"timestamp_utc":"2026-08-26T20:57:48.422750+00:00"},{"url":"https://www.crowdstrike.com","final_url":"https://www.crowdstrike.com/en-us/","http_status":200,"fetch_error":"","score":66.4,"pillars":{"machine_access":88.9,"structured_data":61.1,"extractability":75.0,"evidence":35.7,"entity":83.3,"agent_surface":0.0,"governance":57.1,"offsite":100.0,"security_surface":88.2},"counts":{"verified":31,"unverified":15,"unobservable":3},"timestamp_utc":"2026-08-26T20:58:02.607626+00:00"},{"url":"https://www.paloaltonetworks.com","final_url":"https://www.paloaltonetworks.com","http_status":200,"fetch_error":"","score":56.9,"pillars":{"machine_access":100.0,"structured_data":0.0,"extractability":75.0,"evidence":50.0,"entity":66.7,"agent_surface":50.0,"governance":28.6,"offsite":42.9,"security_surface":94.1},"counts":{"verified":29,"unverified":18,"unobservable":2},"timestamp_utc":"2026-08-26T20:58:16.636599+00:00"},{"url":"https://www.cloudflare.com","final_url":"https://www.cloudflare.com","http_status":200,"fetch_error":"","score":62.5,"pillars":{"machine_access":100.0,"structured_data":0.0,"extractability":50.0,"evidence":35.7,"entity":100.0,"agent_surface":75.0,"governance":57.1,"offsite":77.8,"security_surface":82.4},"counts":{"verified":33,"unverified":15,"unobservable":1},"timestamp_utc":"2026-08-26T20:58:49.865554+00:00"},{"url":"https://www.mongodb.com","final_url":"https://www.mongodb.com","http_status":200,"fetch_error":"","score":60.3,"pillars":{"machine_access":100.0,"structured_data":61.1,"extractability":37.5,"evidence":50.0,"entity":75.0,"agent_surface":25.0,"governance":57.1,"offsite":75.0,"security_surface":52.9},"counts":{"verified":30,"unverified":19,"unobservable":0},"timestamp_utc":"2026-08-26T20:59:14.091289+00:00"},{"url":"https://www.anthropic.com","final_url":"https://www.anthropic.com","http_status":200,"fetch_error":"","score":49.2,"pillars":{"machine_access":83.3,"structured_data":0.0,"extractability":56.2,"evidence":35.7,"entity":75.0,"agent_surface":0.0,"governance":57.1,"offsite":71.4,"security_surface":70.6},"counts":{"verified":24,"unverified":23,"unobservable":2},"timestamp_utc":"2026-08-26T20:59:21.646722+00:00"},{"url":"https://openai.com","final_url":"https://openai.com","http_status":403,"fetch_error":"","score":28.4,"pillars":{"machine_access":44.4,"structured_data":0.0,"extractability":0.0,"evidence":0.0,"entity":16.7,"agent_surface":0.0,"governance":28.6,"offsite":100.0,"security_surface":82.4},"counts":{"verified":14,"unverified":30,"unobservable":5},"timestamp_utc":"2026-08-26T20:59:25.571826+00:00"},{"url":"https://www.credo.ai","final_url":"https://www.credo.ai","http_status":200,"fetch_error":"","score":76.1,"pillars":{"machine_access":100.0,"structured_data":77.8,"extractability":75.0,"evidence":57.1,"entity":100.0,"agent_surface":66.7,"governance":28.6,"offsite":80.0,"security_surface":82.4},"counts":{"verified":35,"unverified":12,"unobservable":2},"timestamp_utc":"2026-08-26T20:59:32.194221+00:00"},{"url":"https://www.holisticai.com","final_url":"https://www.holisticai.com","http_status":200,"fetch_error":"","score":46.6,"pillars":{"machine_access":100.0,"structured_data":0.0,"extractability":62.5,"evidence":35.7,"entity":75.0,"agent_surface":25.0,"governance":28.6,"offsite":0.0,"security_surface":82.4},"counts":{"verified":24,"unverified":22,"unobservable":3},"timestamp_utc":"2026-08-26T20:59:37.754178+00:00"},{"url":"https://www.onetrust.com","final_url":"https://www.onetrust.com","http_status":200,"fetch_error":"","score":64.2,"pillars":{"machine_access":88.9,"structured_data":72.2,"extractability":50.0,"evidence":35.7,"entity":100.0,"agent_surface":50.0,"governance":28.6,"offsite":62.5,"security_surface":76.5},"counts":{"verified":32,"unverified":15,"unobservable":2},"timestamp_utc":"2026-08-26T21:00:12.792427+00:00"},{"url":"https://www.ibm.com","final_url":"https://www.ibm.com/us-en","http_status":200,"fetch_error":"","score":51.6,"pillars":{"machine_access":72.2,"structured_data":61.1,"extractability":12.5,"evidence":78.6,"entity":58.3,"agent_surface":0.0,"governance":28.6,"offsite":58.3,"security_surface":87.5},"counts":{"verified":26,"unverified":22,"unobservable":1},"timestamp_utc":"2026-08-26T21:00:23.050213+00:00"},{"url":"https://www.microsoft.com","final_url":"https://www.microsoft.com/en-us","http_status":200,"fetch_error":"","score":56.2,"pillars":{"machine_access":72.2,"structured_data":22.2,"extractability":56.2,"evidence":35.7,"entity":100.0,"agent_surface":66.7,"governance":57.1,"offsite":42.9,"security_surface":62.5},"counts":{"verified":25,"unverified":20,"unobservable":4},"timestamp_utc":"2026-08-26T21:00:28.610159+00:00"},{"url":"https://www.googlecloud.com","final_url":"https://www.googlecloud.com","http_status":0,"fetch_error":"connection failed","score":3.2,"pillars":{"machine_access":0.0,"structured_data":0.0,"extractability":0.0,"evidence":0.0,"entity":16.7,"agent_surface":0.0,"governance":0.0,"offsite":null,"security_surface":12.5},"counts":{"verified":2,"unverified":39,"unobservable":8},"timestamp_utc":"2026-08-26T21:00:30.756253+00:00"},{"url":"https://www.vanta.com","final_url":"https://www.vanta.com","http_status":200,"fetch_error":"","score":42.5,"pillars":{"machine_access":83.3,"structured_data":0.0,"extractability":31.2,"evidence":35.7,"entity":75.0,"agent_surface":25.0,"governance":57.1,"offsite":0.0,"security_surface":82.4},"counts":{"verified":23,"unverified":23,"unobservable":3},"timestamp_utc":"2026-08-26T21:00:37.649503+00:00"},{"url":"https://www.drata.com","final_url":"https://drata.com/","http_status":403,"fetch_error":"","score":14.2,"pillars":{"machine_access":0.0,"structured_data":0.0,"extractability":0.0,"evidence":0.0,"entity":41.7,"agent_surface":0.0,"governance":0.0,"offsite":0.0,"security_surface":100.0},"counts":{"verified":12,"unverified":31,"unobservable":6},"timestamp_utc":"2026-08-26T21:00:40.343378+00:00"}],"source":"/var/lib/apexclaw-audit/cohort_v11.json","engine":"ARB/1.1"},"scope":"one URL plus the site-wide files at its root: robots.txt, llms.txt, sitemap.xml, /.well-known/security.txt, /.well-known/ai.txt","changelog":[{"version":"ARB/1.0","date":"2026-08-24","change":"First published rubric: 36 checks, seven pillars, PASS/PARTIAL/FAIL/UNKNOWN verdicts, not-evaluable checks excluded from the denominator."},{"version":"ARB/1.1","date":"2026-08-26","change":"Three-state rubric: VERIFIED/UNVERIFIED/UNOBSERVABLE replaces PASS/PARTIAL/FAIL/UNKNOWN (no partial credit). Two pillars added -- off-site corroboration and transport/security surface -- with the seven original pillar weights scaled down proportionally to make room. 49 checks, nine pillars. Every report now carries an explicit scope statement stating the security pillar is not a penetration test."}],"license":"Rubric published for reference and citation. Attribute to ApexClaw with the engine version."}