Case study · Tool · Live

SEO & AI Visibility Check: five fixes, not forty checks.

A free, no-sign-up check for small businesses: can Google and AI assistants like ChatGPT find, read and quote your website? It ranks the five fixes that matter most for that site, in the order that unblocks the rest, and writes the files to paste.

Price: Free
You get: Top 5 fixes
Tests: 72
Engine: Node.js

How it ranks

The order that unblocks the rest

Can search engines and AI search crawlers reach the pages at all? robots.txt groups, blocked AI search bots, noindex.
Is the content in the HTML, or does it only appear after scripts run?
Do the phone number and country agree everywhere they appear?
Is the structured data real schema.org, with real properties?
Is there one, and does it describe the site or try to steer an AI?
Only after the rest: titles, descriptions, headings, thin pages.

slicklab.digital/tools/seo-check · result

https://your-business.example

1 · High robots.txt group skips the * rules

2 · High AI search crawler blocked

3 · Medium two different phone numbers

4 · Medium schema type not on schema.org

5 · Low no llms.txt

Files ready: robots.txt · llms.txt · schema

Why it existsPHP · Node.js · Playwright

Five fixes, not forty checks

Most free SEO checkers hand a small-business owner a score and a long list of warnings, and the owner doesn’t know where to start. This one ranks what it finds and stops at five: the fixes that matter most for that site, in the order that unblocks the rest, with the files to paste already written.

Checks for search engines and AI assistants together, since they read the same signals
Catches the quiet mistakes: a named robots.txt group that skips the general rules, a blocked AI search crawler, two different phone numbers
Blocks on AI training crawlers are reported, but left as the owner’s decision
Says what one check can’t see, instead of pretending to see everything

Check your site free ↗

Built for the public internet

A tool that fetches any URL has to be careful

A public page that fetches whatever address it is given can be turned against the server it runs on. The tests include an internal server that must receive zero requests across direct, redirect, image, iframe and browser-fetch attacks.

Private addressesRefused before anything runs
A visitor chooses the URL, so the page refuses anything that resolves to this server or a private network: localhost, LAN ranges, CGNAT, link-local, cloud metadata, multicast, decimal IPs and *.internal names.
RedirectsEvery hop checked again
In public mode the engine follows redirects by hand and checks each one, including the requests for robots.txt, llms.txt and social images.
Headless browserBehind its own proxy
When a page needs a real browser, all its traffic goes through a local guard proxy that checks every request and connects only to the address it checked.
Fair useFive checks an hour
At most five checks per visitor per hour (keyed by a salted hash of the IP, which expires) and two running at once, so one visitor can’t tie up the server.
Text from the siteTreated as data
Site text that reaches an AI client through the MCP server is marked as untrusted, and sentences addressed to an AI are redacted.
Made-up factsNever written
The ready-to-paste files are built from what the site itself says. Anything the check can’t confirm is left as TO CONFIRM for the owner.

Risk flags

It also looks for tricks

Some sites try to game search engines or AI assistants. The check flags the patterns separately from the score, so a site can’t raise its score by hiding text, and an owner learns if a plugin or an agency has done it for them.

Hidden text for AIInstructions only a model would read
Text addressed to AI systems in hidden elements, comments, meta tags, attributes or JSON-LD: the website version of prompt injection.
CloakingOne page for bots, another for people
The page is fetched as a visitor, as Googlebot and as GPTBot, and the answers compared.
Spam patternsThe old tricks, still checked
Colour-matched, off-screen or tiny text in the rendered page, hidden links, sneaky redirects and keyword stuffing.

Honest status

What is live, and what needs your keys

The same engine runs the public page, a command-line audit and an MCP server, so an AI assistant like Claude can run the check, compare a site with its rivals or crawl it. The data sources that need an owner’s own accounts work, but only with their keys.

Part	Status	Notes
Public check page	Live	slicklab.digital/tools/seo-check/, free, no sign-up
Ranked fixes and ready-to-paste files	Live	robots.txt, llms.txt and schema
Risk flags (spam policy, AI manipulation)	Live	shown separately, never added to the score
MCP server for AI assistants	Working	audit, rival comparison, AI-access and crawl tools
Search Console, Places and scheduled reports	Working	need the site owner’s own keys
Test suite	71 pass, 1 skipped	72 tests, run 2026-10-15

Want the method rather than the tool? Write your own llms.txt with the free generator, or read how I think about AI for small businesses.

FAQ

Good to know

Is the check really free?

Yes. There is no sign-up and no email gate. The limit is five checks per visitor per hour, so the server stays responsive for everyone.

Does it tell me if ChatGPT will recommend my business?

No, and nothing honest can. It checks whether AI search crawlers can reach your pages, whether your facts are consistent and machine-readable, and whether anything on the site looks like an attempt to manipulate AI. Those are the parts you control.

Why only five fixes?

Because a list of forty checks gets ignored. The five that matter most for your site come first, in the order that unblocks the rest: there is no point polishing titles on pages crawlers can’t reach.

Do you keep the sites people check?

The check itself doesn’t store results. The hourly limit keeps a salted, expiring hash of the visitor’s IP, nothing more. If you ask for a quote on the results page, your email, the site you checked and its score come to me so I can reply.

Work with us

Want something like this built?

Ask about an AI visibility audit → See all work

Meet who builds it