# Sitelemetry

> Sitelemetry is a defensive web intelligence platform for authorized website auditing. It combines security posture, technical SEO, accessibility, performance, integrations, and AI-search visibility in one workspace.

## Primary pages

- [Sitelemetry](https://sitelemetry.com/): Product overview, capabilities, plans, and access to the application.
- [Launch Readiness Snapshot](https://sitelemetry.com/launch-readiness): Enter a public URL without an account to receive a score, three prioritized signals, and a downloadable or shareable result card.
- [Security headers checker](https://sitelemetry.com/security-headers-checker): Free, no-signup check of the HTTP security headers on the final response of one public origin (after up to five redirects), with each checked header's rating and, where shown, the observed value. Mostly presence checks; not a vulnerability scan.
- [SPF and DMARC checker](https://sitelemetry.com/spf-dmarc-checker): Free, no-signup lookup of the SPF, DMARC, MTA-STS (DNS record only) and CAA records on the exact hostname entered, with each rating. DKIM is not checked.
- [Remote MCP Guide](https://sitelemetry.com/mcp-guide): OAuth setup for Codex, ChatGPT, Claude Code, Claude.ai and Cursor, all seven audit tools, authorized-use controls, data handling, plans, example prompts, and disconnect guidance.
- [Access information](https://sitelemetry.com/access-information): Neutral account-access, domain-verification renewal, monitoring-capacity and audit-usage guidance in nine languages.
- [Support Center](https://sitelemetry.com/support): Public account, billing, product and MCP help, authenticated support requests, and responsible security-report guidance.
- [Account Deletion](https://sitelemetry.com/account-deletion): Public instructions for a verified Sitelemetry account-deletion request, deletion scope, retention, and subscription cancellation.
- [Terms of Service](https://sitelemetry.com/terms): Authorized-use rules, account terms, subscriptions, and service limitations.
- [Privacy Policy](https://sitelemetry.com/privacy): Data categories, processing purposes, retention, security, and user rights.
- [Refund and Cancellation Policy](https://sitelemetry.com/refunds): Cancellation, refund-request, and payment-support information.

## Website learning guides

Twenty-one educational guides connect website mechanisms to reader benefits and good practices through everyday examples, explanatory tables and primary sources. All twenty-one are in English; the original twelve are also available in all nine blog languages, the eight that followed in Spanish, German, French, Portuguese and Japanese, and the AI website audit guide in English only.

- [Website audit guide](https://sitelemetry.com/blog/website-audit-guide): Explore six complementary review areas through a customer journey.
- [Website security](https://sitelemetry.com/blog/website-security-audit): Understand accounts, access rules and a repeatable security review.
- [Technical SEO](https://sitelemetry.com/blog/technical-seo-audit): Learn how search engines discover pages and understand their content.
- [AI visibility](https://sitelemetry.com/blog/ai-visibility-audit): Create clear, attributable sources and observe AI answers, citations and referral visits.
- [Web accessibility](https://sitelemetry.com/blog/accessibility-audit): Explore labels, keyboard use, image alternatives and readable interfaces.
- [Website performance](https://sitelemetry.com/blog/website-performance-audit): Understand LCP, INP and CLS, then use them to guide images, scripts and layout.
- [Website integrations](https://sitelemetry.com/blog/website-integrations-audit): Follow customer actions through events, shared data and connected services.
- [TLS and HTTP security headers](https://sitelemetry.com/blog/tls-security-headers-audit): Learn how certificates, browser policies and secure cookies work together.
- [DNS and email security](https://sitelemetry.com/blog/dns-email-security-audit): Explore SPF, DKIM, DMARC, CAA and MTA-STS through everyday communication.
- [robots.txt and indexing](https://sitelemetry.com/blog/robots-txt-indexing-audit): Coordinate crawl rules, links, noindex and sitemaps with publishing goals.
- [What is MCP?](https://sitelemetry.com/blog/what-is-mcp): Learn how Model Context Protocol connects AI applications to tools, resources and prompts.
- [Website glossary](https://sitelemetry.com/blog/website-audit-glossary): Fifty plain-language definitions for website delivery, search, security, performance, accessibility and AI tools.
- [Security headers check](https://sitelemetry.com/blog/security-headers-check): Read HTTP security headers with browser tools or curl, learn what CSP, HSTS, nosniff and Referrer-Policy do, and roll out values in stages.
- [SPF and DMARC check](https://sitelemetry.com/blog/spf-dmarc-check): Look up and read SPF and DMARC records, fix lookup-limit and policy errors, and move a DMARC policy toward enforcement.
- [Website launch security checklist](https://sitelemetry.com/blog/website-launch-security-checklist): Eight passive checks for DNS, mail records, TLS, the HTTPS redirect, headers, stack disclosure, caching and domain expiry before a launch or after a migration.
- [llms.txt](https://sitelemetry.com/blog/llms-txt): What the llms.txt proposal is, what it does not control, what search and AI providers document about it, and a minimal example.
- [Content Security Policy examples](https://sitelemetry.com/blog/content-security-policy-examples): Build a strict CSP step by step: start in Report-Only, use nonces or hashes instead of unsafe-inline, add frame-ancestors, object-src and base-uri, then enforce.
- [HSTS preload](https://sitelemetry.com/blog/hsts-preload): The preload list requirements, the risks of a hard-to-undo commitment, a staged max-age plan and how to check the header and list status.
- [DMARC from p=none to quarantine](https://sitelemetry.com/blog/dmarc-quarantine): Read aggregate reports, find every legitimate sender, align SPF and DKIM, then move from p=none to quarantine and reject in stages.
- [SPF too many DNS lookups](https://sitelemetry.com/blog/spf-too-many-dns-lookups): Which SPF mechanisms count toward the 10-lookup limit, how to count them and how to reduce lookups without breaking mail.
- [AI website audit](https://sitelemetry.com/blog/ai-website-audit): How to audit a website with AI agents: what an agent can and cannot check alone, a six-area checklist, an MCP workflow from evidence to a verified fix, and how to choose an AI website audit tool.

## Blog languages

Each index links to every guide published in its language: twenty-one in English, twenty in Spanish, German, French, Portuguese and Japanese, and the original twelve in Turkish, Italian and Simplified Chinese.

- [English](https://sitelemetry.com/blog)
- [Türkçe](https://sitelemetry.com/tr/blog)
- [Español](https://sitelemetry.com/es/blog)
- [Deutsch](https://sitelemetry.com/de/blog)
- [Français](https://sitelemetry.com/fr/blog)
- [Português](https://sitelemetry.com/pt/blog)
- [Italiano](https://sitelemetry.com/it/blog)
- [日本語](https://sitelemetry.com/ja/blog)
- [简体中文](https://sitelemetry.com/zh/blog)

## Product guidance

- The no-signup Launch Readiness Snapshot is limited to eight low-impact, publicly observable checks covering DNS, mail DNS policy, RDAP, TLS, HTTP security headers, HTTPS redirect posture, technology signals, and delivery/cache posture. It is not a penetration test or a full six-pillar audit.
- Snapshot results contain a sanitized score, three prioritized signals and a per-check summary of the eight passive modules (each module: no issue, issue found or not measured; each sub-check: passed, failed with severity, observed, not applicable or not measured). Observed values are limited to security header values, SPF/DMARC/CAA/MTA-STS record text, DNS address and MX record counts, the HTTP-to-HTTPS redirect hop and the final response status with scheme and host only, TLS protocol, certificate issuer organization, validity dates and verification error code, technology names without versions, the count of unrecognized technology signals and matching CVE/GHSA identifiers, compression/cache/CDN facts and advertised HTTP/2 or HTTP/3, and the registration data source (RDAP or WHOIS), the registrar (from RDAP only) and the domain expiry date. IP addresses, cookies, tokens, URL paths and query strings, e-mail local parts, internal hostnames and response bodies are removed or not published; the shareable score card shows only the hostname, score, score label, module and check counts and test date, never observed values or raw evidence.
- The security headers checker and the SPF and DMARC checker run the same no-signup snapshot and show one of its eight checks first; they are not separate scanners and share its limits.
- Use Sitelemetry only for domains, applications, IP addresses, and infrastructure you own or are expressly authorized to assess.
- Audit results are point-in-time evidence and do not guarantee that a target is vulnerability-free or compliant.
- Sitelemetry replaces the fragmented first-pass audit, not every specialist tool: it unifies security, technical SEO, AI visibility, accessibility, performance, and integration evidence into one prioritized queue.
- Remote MCP access lets Codex, ChatGPT, Claude Code, Claude.ai, Cursor and other compatible clients request authorized, structured audit evidence through OAuth.
- A Sitelemetry account is required for Cloud MCP. New users can create one from the sign-in step of the connection flow; connecting does not change the account's assigned permissions. Protected checks require current target verification. Monitoring-project capacity is separate from verified domains; audits of other authorized sites still follow account permissions and usage allowances.
- Audit results retain the full available evidence; Sitelemetry does not guarantee a fixed token reduction. Checks send read-style requests and benign probes that are not meant to change the audited website; calls record usage and audit data in Sitelemetry.
- Customers can revoke an application's MCP access in My account > Connected MCP applications. Revocation covers that application at the selected MCP address and leaves other applications unaffected.
- Each selected audit scope can produce one agent-ready implementation prompt with validated findings, evidence, constraints, acceptance criteria, and retest steps. Structured responses can reduce exploratory tool calls and context churn; actual token savings vary by target and workflow.
- Sitelemetry is operated by EGENİL TELEFERİK MÜHENDİSLİK TEKNİK İŞLETME DANIŞMANLIK LİMİTED ŞİRKETİ.
- Product and account support: support@sitelemetry.com