One address, two checks.
Enter your address once. The security scan and the AI readability scan come back as one report in English or Latvian, and you choose which findings OATS should fix.
Security scan
The security scan checks your site from the outside, where an attack starts: headers, encryption, email authentication, exposed files and signs of a hack. It sends ordinary web requests and changes nothing.
What it checks · 17 checks
- HTTP security headers
- Cookies and protection in the browser
- Content-Security-Policy quality
- HTTPS certificate and encryption
- Email authentication: SPF, DMARC, CAA, DNSSEC
- Domain expiry and name servers
- DKIM signature and MTA-STS
- Allowed HTTP methods
- Software named in server headers
- PHP version
- WordPress version, plugins and exposed files
- Outdated JavaScript libraries
- Signs of a hacked site
- security.txt contact file
- Email addresses in plain text
- Exposed files and folder listings
- Error pages that reveal details
AI readability scan
The AI readability scan checks whether ChatGPT, Perplexity and Google's AI answers can load your homepage, read its text without JavaScript and find your company data. It fetches the same files those tools fetch.
What it checks · 8 checks
- robots.txt rules for AI tools
- Whether AI tools can load the page
- Sitemap and language versions
- Company data (schema.org)
- Page title, description and sharing data
- Text readable without JavaScript and the main heading
- Language markup
- Files for AI agents: llms.txt and Markdown
How ordering works
From scan to fixed.
- Enter your site address and run the scan.
- Read each finding: what it means, who can change it and what the fix costs.
- Tick the findings you want OATS to fix, check the total and send the order.
- OATS confirms the order by email, applies the fixes and scans again.