<!-- SAMPLE: generated for illustration on 2026-10-30 from one real passive run against a site Lordevo owns. -->
# Website audit: lordevo.com

Prepared for the site owner · 2026-10-30 · https://lordevo.com/

> Passive, point-in-time assessment of public pages and public DNS. This report is not a penetration test, security certification, legal or compliance opinion, and does not promise rankings, traffic or security. Absence of a finding does not prove absence of a problem.

## Executive summary

We read 7 pages of lordevo.com and checked SEO, Security (passive), Links, Email authentication, AI readiness on 2026-10-30, using passive, read-only requests. We found 7 issues: 1 medium, 6 low. Start with: Title is 67 characters; DMARC has no rua= report address; No TLS-RPT. By area: SEO good (92/100), Security (passive) good (96/100), Links good (100/100), Email authentication good (94/100), AI readiness good (100/100). This is a point-in-time, passive assessment, not a penetration test.

| Area | Health | Score | Findings |
|---|---|---|---|
| SEO | Good | 92 | 2 |
| Security (passive) | Good | 96 | 2 |
| Links | Good | 100 | 0 |
| Email authentication | Good | 94 | 3 |
| AI readiness | Good | 100 | 0 |

### Top priorities

1. **P3** Title is 67 characters. (SEO, medium, effort S) [F01]
2. **P4** DMARC has no rua= report address. (Email authentication, low, effort S) [F02]
3. **P4** No TLS-RPT. (Email authentication, low, effort S) [F03]
4. **P4** No CAA record: any certificate authority may issue certificates for this domain. (Security (passive), low, effort S) [F04]
5. **P4** No /.well-known/security.txt. (Security (passive), low, effort S) [F05]

## Findings

### F01 · Title is 67 characters.

- **Area:** SEO · **Severity:** medium · **Priority:** P3 · **Effort:** S (0.5-2 h) · **Owner:** Content
- **Basis:** observed
- **Impact:** Affects how search engines crawl, understand and show these pages.
- **Pages:** <https://lordevo.com/agents>
- **Evidence:**
  - Title is 67 characters. <https://lordevo.com/agents> (HTTP 200) · value: `Lordevo for AI Agents: x402 Website Checks, MCP and Agent Directory` · html, seo-page, observed 2026-10-30T06:38:31.997Z
- **Fix:** Aim for roughly 30-60 characters with the main topic first.
- **Where:** Page templates / CMS page settings.

**Verify:** `Re-run this report (or the seo-page check) after the change and confirm this finding is gone.`

### F02 · DMARC has no rua= report address.

- **Area:** Email authentication · **Severity:** low · **Priority:** P4 · **Effort:** S (0.5-2 h) · **Owner:** DNS admin
- **Basis:** observed
- **Impact:** Affects whether others can send email that looks like it comes from this domain, and whether real mail is delivered.
- **Evidence:**
  - DMARC has no rua= report address. · value: `{"name":"_dmarc.lordevo.com","record":null}` · dns, security-scan-lite, observed 2026-10-30T06:38:34.671Z
  - DMARC has no rua= report address. · value: `{"name":"_dmarc.lordevo.com","record":"v=DMARC1; p=quarantine; adkim=r; aspf=r; pct=100"}` · dns, email-auth, observed 2026-10-30T06:38:34.417Z
- **Fix:** Add rua=mailto:\<address\> to receive aggregate reports.
- **Where:** DNS zone of lordevo.com (at the DNS host).

```
add rua=mailto:dmarc@lordevo.com to the DMARC record
```

**Verify:** `dig TXT _dmarc.lordevo.com +short   (rua= present)`

### F03 · No TLS-RPT.

- **Area:** Email authentication · **Severity:** low · **Priority:** P4 · **Effort:** S (0.5-2 h) · **Owner:** DNS admin
- **Basis:** observed
- **Impact:** Affects whether others can send email that looks like it comes from this domain, and whether real mail is delivered.
- **Evidence:**
  - No TLS-RPT. · value: `{"name":"lordevo.com"}` · dns, security-scan-lite, observed 2026-10-30T06:38:34.671Z
  - No TLS-RPT. · value: `{"name":"lordevo.com"}` · dns, email-auth, observed 2026-10-30T06:38:34.417Z
- **Fix:** Optional: publish \_smtp.\_tls TXT "v=TLSRPTv1; rua=mailto:..."
- **Where:** DNS zone of lordevo.com (at the DNS host).

```
_smtp._tls.lordevo.com.  TXT "v=TLSRPTv1; rua=mailto:tls-reports@lordevo.com"
```

**Verify:** `dig TXT _smtp._tls.lordevo.com +short`

### F04 · No CAA record: any certificate authority may issue certificates for this domain.

- **Area:** Security (passive) · **Severity:** low · **Priority:** P4 · **Effort:** S (0.5-2 h) · **Owner:** DNS admin
- **Basis:** observed
- **Impact:** Affects how well visitors and their browsers are protected against common web attacks.
- **Evidence:**
  - No CAA record found for lordevo.com. · value: `[]` · dns, security-scan-lite, observed 2026-10-30T06:38:34.671Z
- **Fix:** Publish CAA, e.g. lordevo.com. CAA 0 issue "letsencrypt.org" (list the CAs you use).
- **Where:** DNS zone of lordevo.com (at the DNS host).

```
lordevo.com.  CAA 0 issue "letsencrypt.org"   (list every CA you use)
```

**Verify:** `dig CAA lordevo.com +short`

### F05 · No /.well-known/security.txt.

- **Area:** Security (passive) · **Severity:** low · **Priority:** P4 · **Effort:** S (0.5-2 h) · **Owner:** Developer
- **Basis:** observed
- **Impact:** Affects how well visitors and their browsers are protected against common web attacks.
- **Evidence:**
  - No security.txt with a Contact: line at /.well-known/security.txt. <https://lordevo.com/.well-known/security.txt> · file, security-scan-lite, observed 2026-10-30T06:38:34.671Z
- **Fix:** Publish security.txt (RFC 9116) with a Contact: and Expires: line so researchers can report issues.
- **Where:** Response headers: Cloudflare (Rules \> Transform Rules \> Modify response header).

```
https://lordevo.com/.well-known/security.txt
Contact: mailto:security@lordevo.com
Expires: 2027-10-30T00:00:00.000Z
```

**Verify:** `curl -s https://lordevo.com/.well-known/security.txt`

### F06 · Meta description is 172 characters.

- **Area:** SEO · **Severity:** low · **Priority:** P4 · **Effort:** S (0.5-2 h) · **Owner:** Content
- **Basis:** observed
- **Impact:** Affects how search engines crawl, understand and show these pages.
- **Pages:** <https://lordevo.com/agents>
- **Evidence:**
  - Meta description is 172 characters. <https://lordevo.com/agents> (HTTP 200) · value: `Pay-per-call website checks for AI agents (x402, USDC on Base, or MCP), starting with the site-check bundle, plus a directory of 2271 services agents can discover and call.` · html, seo-page, observed 2026-10-30T06:38:31.997Z
- **Fix:** Aim for roughly 70-160 characters.
- **Where:** Page templates / CMS page settings.

**Verify:** `Re-run this report (or the seo-page check) after the change and confirm this finding is gone.`

### F07 · No MTA-STS.

- **Area:** Email authentication · **Severity:** low · **Priority:** P4 · **Effort:** M (2-8 h) · **Owner:** DNS admin
- **Basis:** observed
- **Impact:** Affects whether others can send email that looks like it comes from this domain, and whether real mail is delivered.
- **Evidence:**
  - No MTA-STS. · value: `{"name":"lordevo.com"}` · dns, security-scan-lite, observed 2026-10-30T06:38:34.671Z
  - No MTA-STS. · value: `{"name":"lordevo.com"}` · dns, email-auth, observed 2026-10-30T06:38:34.417Z
- **Fix:** Optional hardening: publish MTA-STS to enforce TLS for inbound mail.
- **Where:** DNS zone of lordevo.com (at the DNS host).

**Verify:** `dig TXT _mta-sts.lordevo.com +short`

## Implementation plan

Order within a phase: priority, then effort. "depends_on" lists findings to fix first.

### Quick wins (this week)

Nothing in this phase.

### Next 30 days

| Finding | What | Owner | Effort | Depends on |
|---|---|---|---|---|
| F01 | Title is 67 characters. | Content | S (0.5-2 h) | - |

### Later

| Finding | What | Owner | Effort | Depends on |
|---|---|---|---|---|
| F02 | DMARC has no rua= report address. | DNS admin | S (0.5-2 h) | - |
| F03 | No TLS-RPT. | DNS admin | S (0.5-2 h) | F07 |
| F04 | No CAA record: any certificate authority may issue certificates for this domain. | DNS admin | S (0.5-2 h) | - |
| F05 | No /.well-known/security.txt. | Developer | S (0.5-2 h) | - |
| F06 | Meta description is 172 characters. | Content | S (0.5-2 h) | - |
| F07 | No MTA-STS. | DNS admin | M (2-8 h) | - |

## Needs human review

Nothing flagged.


## Coverage

- Pages read: 7 (max 10; found from internal links on the home page (same host, robots.txt checked before any request))
  - <https://lordevo.com/> HTTP 200, 667 ms
  - <https://lordevo.com/tools> HTTP 200, 228 ms
  - <https://lordevo.com/tools/dmarc-spf-checker> HTTP 200, 463 ms
  - <https://lordevo.com/tools/security-headers-checker> HTTP 200, 764 ms
  - <https://lordevo.com/tools/meta-tag-checker> HTTP 200, 442 ms
  - <https://lordevo.com/agents> HTTP 200, 622 ms
  - <https://lordevo.com/about> HTTP 200, 1008 ms
- Areas checked: SEO, Security (passive), Links, Email authentication, AI readiness

| Check | Area | Target | Result | Time |
|---|---|---|---|---|
| canonical-check | SEO | https://lordevo.com/ | ok | 1 ms |
| canonical-check | SEO | https://lordevo.com/tools | ok | 0 ms |
| canonical-check | SEO | https://lordevo.com/tools/dmarc-spf-checker | ok | 1 ms |
| canonical-check | SEO | https://lordevo.com/tools/security-headers-checker | ok | 0 ms |
| canonical-check | SEO | https://lordevo.com/tools/meta-tag-checker | ok | 1 ms |
| canonical-check | SEO | https://lordevo.com/agents | ok | 0 ms |
| canonical-check | SEO | https://lordevo.com/about | ok | 1 ms |
| page-fetch | SEO | https://lordevo.com/ | ok | 1117 ms |
| page-fetch | SEO | https://lordevo.com/tools | ok | 229 ms |
| page-fetch | SEO | https://lordevo.com/tools/dmarc-spf-checker | ok | 463 ms |
| page-fetch | SEO | https://lordevo.com/tools/security-headers-checker | ok | 764 ms |
| page-fetch | SEO | https://lordevo.com/tools/meta-tag-checker | ok | 442 ms |
| page-fetch | SEO | https://lordevo.com/agents | ok | 622 ms |
| page-fetch | SEO | https://lordevo.com/about | ok | 1009 ms |
| seo-page | SEO | https://lordevo.com/ | ok | 3111 ms |
| seo-page | SEO | https://lordevo.com/tools | ok | 1004 ms |
| seo-page | SEO | https://lordevo.com/tools/dmarc-spf-checker | ok | 1478 ms |
| seo-page | SEO | https://lordevo.com/tools/security-headers-checker | ok | 1843 ms |
| seo-page | SEO | https://lordevo.com/tools/meta-tag-checker | ok | 1552 ms |
| seo-page | SEO | https://lordevo.com/agents | ok | 1641 ms |
| seo-page | SEO | https://lordevo.com/about | ok | 1926 ms |
| structured-data | SEO | https://lordevo.com/ | ok | 1 ms |
| structured-data | SEO | https://lordevo.com/tools | ok | 0 ms |
| structured-data | SEO | https://lordevo.com/tools/dmarc-spf-checker | ok | 0 ms |
| structured-data | SEO | https://lordevo.com/tools/security-headers-checker | ok | 0 ms |
| structured-data | SEO | https://lordevo.com/tools/meta-tag-checker | ok | 0 ms |
| structured-data | SEO | https://lordevo.com/agents | ok | 0 ms |
| structured-data | SEO | https://lordevo.com/about | ok | 0 ms |
| security-headers | Security (passive) | https://lordevo.com/ | ok | 694 ms |
| security-scan-lite | Security (passive) | https://lordevo.com/ | ok | 1450 ms |
| broken-links | Links | https://lordevo.com/ | ok | 5830 ms |
| email-auth | Email authentication | lordevo.com | ok | 1196 ms |
| agent-readiness | AI readiness | https://lordevo.com/ | ok | 2785 ms |
| tech-stack | context | https://lordevo.com/ | ok | 806 ms |

### Limitations

- Passive and read-only: plain GET/HEAD requests and public DNS lookups, as a browser or crawler would make. No login, no form submission, no active or intrusive testing.
- Point-in-time: results describe what the site served when observed\_at says; sites change.
- Up to 10 page(s), found from the home page's internal links; pages behind JavaScript navigation, logins or not linked from the home page are not seen.
- robots.txt is obeyed: disallowed pages are listed, not fetched.
- Security headers and TLS are read from our server; a CDN or firewall may answer differently in other regions.
- DKIM is looked up at 30 common selectors only.
- Response times are single measurements from one location.

**Not a guarantee.** This report is not a penetration test, security certification, legal or compliance opinion, and does not promise rankings, traffic or security. Absence of a finding does not prove absence of a problem.

Detected stack (context, from public signatures): Cloudflare.

---

Generated by Lordevo site-report (site-report/1).