Agent Grade · free
Can AI find your site, and can attack agents get in?
One grade in three parts: found by search and AI, protected from AI attack agents, and safe for the AI agents your visitors send. Free, in under a minute.
Free. Reads only what any visitor can see. Your grade is saved for 7 days so you can share it; nothing sensitive is ever shown publicly.
Found · 40 points
Google, Bing, ChatGPT search, Claude and Perplexity: are they allowed in, and do they get the page people get? A blanket robots.txt rule or a firewall can hide you from AI search without you knowing.
Protected · 45 points
What attack agents try first: secret files left public, keys inside public scripts, login and signup forms with no bot guard, and the basic security headers.
Agent-safe · 15 points
Hidden text that tells AI agents what to do. People send agents to shop and book for them; text planted on your pages can turn those agents against your own visitors.
Our study · Top 10,000 websites
Top sites block AI training bots about twice as often as AI search bots
We read the public robots.txt of the top 10,000 websites by the official rules. 12.8% block OpenAI's training bot; 6.3% block ChatGPT search. Of the 1,014 that block OpenAI training, 497 also shut out ChatGPT search, so they cannot be cited there. 298 sites are open to Google but closed to ChatGPT search. 12.3% have an llms.txt file.
Blue: AI search and assistants. Grey: AI training and classic search. Share of 7,933 sites that answered, blocking the home page in robots.txt. robots.txt shows what a site asks for, not what its firewall does. Tranco list 56Z8N, fetched 23 Oct 2026.
Live decoys
What our decoys caught
simgen.dev and secondstrike.io carry decoys no real visitor ever asks for: fake secret files, fake keys, a fake login. Search engines are verified and never see them. Everything that trips them is counted here, in totals only, updated hourly. Live since 23 October 2026.
AI agents and websites: what is happening
- 24 Oct 2026Our own decoys on simgen.dev caught their first attacker within hours of going live: a server that took a fake /.git/config.
- Oct 2026DataDome counted nearly 25 billion AI agent requests in Q3 2026, with agentic browser traffic up 4.7 times in September.
- Sep 2026Anthropic reported that most of the misuse it disrupted used AI to carry out or run the operation, some with several agents splitting reconnaissance and theft.
- 2026DataDome found 605.6 million AI agent requests to logins, forms, carts and payment pages in the first half of 2026, and agents faking known names up 45%.
- 2026Google’s threat team described an attacker using the open-source Strix framework to find and confirm weaknesses automatically.
- 2026Imperva’s Bad Bot Report: bots made 53% of web traffic in 2025, and AI-driven bot attacks grew 12.5 times in a year.
- 2026Researchers caught all 7 AI browsing agents they tested from how they type, scroll and move; Cloudflare blocked 1 of the 7.
Keep your grade up
Sites change, plugins update, someone pastes a review with hidden text. Pro watches for you.
Free
$0
- The Agent Grade check, any site
- Shareable grade card and link
- Owner details on request, after we confirm you own the site
Pro
$12 per site a month
- Your site re-graded every week
- Email the day your grade drops
- Every page checked for hidden AI instructions, not just the home page
- Full findings and how to fix each one
Agency
$99 a month, up to 25 sites
- Everything in Pro for 25 client sites
- One dashboard and a monthly report you can send clients
- Priority help
Prices in USD. Reserving is free and takes no payment; founding members keep this price when Pro opens. Payment will be by PayPal.
Questions
What does Agent Grade check?
Three things, from the outside, like any visitor. Found: whether Google, Bing, ChatGPT, Claude and Perplexity may read your site and get the same page people do. Protected: what an attack agent looks for first, such as secret files left public, keys inside public scripts, login or signup forms with no bot guard, and missing security headers. Agent-safe: whether your pages carry hidden instructions that could hijack the AI agents your visitors use.
Is this a hack or a scan of my site?
No. It reads what any visitor can read, a couple of dozen ordinary requests to the one site you type in. It never logs in, never submits a form and never tries to break anything.
Why does it not say which file or key is exposed?
Because anyone can type any site into this box. Showing which file or key leaks would hand attackers a free scanner. The public result shows how many; the owner gets the details after confirming they own the site.
We block AI bots on purpose. Does a low Found score matter?
Only if you want to be found in AI search. Many sites block ChatGPT search, Claude and Perplexity by accident when they only meant to stop AI training: those are separate bots. If you block on purpose, that part is your choice.
What does it store?
Only your grade and the three part scores, for 7 days, so the result can be shared by link. Never the details, never what we read from your pages.
What are hidden instructions for AI agents?
Text people cannot see, often in reviews, comments or hidden page elements, written to steer an AI agent: telling it to ignore its user, visit a site or buy something. As more people send agents to shop and book for them, a site that carries such text puts its own visitors at risk.
Built by Kyle Clouthier, Clouthier Simulation Labs, Ontario, Canada.