Deployed Yet? | Vercel, Cloudflare and GitHub deploys in your Mac menu bar

The http:// version serves content instead of redirecting.

HTTPS protects what visitors send you, and response headers limit what a hostile page can do in their browser. Right now the sampled pages don't provide it.

301-redirect all HTTP traffic to HTTPS — otherwise you have duplicate origins and users can land on the insecure one.

No HTML forms were found.

HTTPS protects what visitors send you, and response headers limit what a hostile page can do in their browser. This check does not apply to the features observed in this sample.

Check JavaScript-generated form transport separately if present.

No enabled, named password inputs in sampled HTML.

HTTPS protects what visitors send you, and response headers limit what a hostile page can do in their browser. This check does not apply to the features observed in this sample.

Review authentication forms separately when applicable.

Site serves over HTTPS.

HTTPS protects what visitors send you, and response headers limit what a hostile page can do in their browser. The inspected source provides this signal.

Nothing to do here.

HSTS is set: max-age=31536000; includeSubDomains.

HTTPS protects what visitors send you, and response headers limit what a hostile page can do in their browser. The inspected source provides this signal.

Nothing to do here.

An enforced CSP restricts scripts and object embedding.

HTTPS protects what visitors send you, and response headers limit what a hostile page can do in their browser. The inspected source provides this signal.

Review the complete policy against the application's resource and inline-script needs.

Response headers restrict cross-origin framing (frame-ancestors 'none').

HTTPS protects what visitors send you, and response headers limit what a hostile page can do in their browser. The inspected source provides this signal.

Nothing to do here.

Referrer-Policy is strict-origin-when-cross-origin.

HTTPS protects what visitors send you, and response headers limit what a hostile page can do in their browser. The inspected source provides this signal.

Nothing to do here.

A Permissions-Policy disables at least one sensitive browser feature.

HTTPS protects what visitors send you, and response headers limit what a hostile page can do in their browser. The inspected source provides this signal.

Review remaining features and allow only origins the application needs.

nosniff is set.

HTTPS protects what visitors send you, and response headers limit what a hostile page can do in their browser. The inspected source provides this signal.

Nothing to do here.

No insecure subresources detected.

HTTPS protects what visitors send you, and response headers limit what a hostile page can do in their browser. The inspected source provides this signal.

Nothing to do here.

No X-Powered-By disclosure.

HTTPS protects what visitors send you, and response headers limit what a hostile page can do in their browser. The inspected source provides this signal.

Nothing to do here.

No /llms.txt file.

This is what an AI assistant relies on when deciding whether it can quote your page. It is there, but weaker than this check expects.

Optional: publish an llms.txt index of useful pages. This proposal is not a requirement for Google AI features, and its absence does not reduce the core score.

Only 0% of 37 H2/H3 headings are question-shaped.

This is what an AI assistant relies on when deciding whether it can quote your page. It is there, but weaker than this check expects.

Phrase key subheadings as the questions users actually ask ("How much does X cost?"). This improves the measured question-heading signal; the audit does not guarantee citations.

The opening paragraph doesn't define what the site/topic is: "One little icon that watches your Vercel, Cloudflare and GitHub deploys.…"

This is what an AI assistant relies on when deciding whether it can quote your page. It is there, but weaker than this check expects.

"X is a Y that does Z for W" in the first paragraph gives answer engines a liftable definition of you. Write it once, benefit everywhere.

No dateModified schema or visible 'updated' dates found.

This is what an AI assistant relies on when deciding whether it can quote your page. It is there, but weaker than this check expects.

For content where dates matter, show the actual update date and mirror it in dateModified. Do not invent dates or change them without a substantive update. Missing dates alone do not prove stale content.

Only 1 of 4 provenance signal types were found: author.

This is what an AI assistant relies on when deciding whether it can quote your page. It is there, but weaker than this check expects.

Add the missing author, date, breadcrumb, or contact signal so machines can identify provenance and site structure.

• https://deployedyet.com/
• https://deployedyet.com/privacy

No markdown copy answered at /index.md or /privacy.md or /index.html.md.

This is what an AI assistant relies on when deciding whether it can quote your page. It is there, but weaker than this check expects.

Publish a clean markdown copy of each key page at /page.md (or /page.html.md). It strips navigation and scripts, so a retriever spends its budget on your content.

• https://deployedyet.com/
• https://deployedyet.com/privacy

No /llms-full.txt.

This observation could not be established from the available evidence. Resolve the collection limit or inspect the relevant source before deciding whether a change is needed.

Optional companion to llms.txt containing your full content as one markdown file — useful for sites whose pages are JS-heavy.

No Article/BlogPosting schema found.

This observation could not be established from the available evidence. Resolve the collection limit or inspect the relevant source before deciding whether a change is needed.

Add Article schema with author and datePublished so the page exposes clear provenance for retrieval. This audit does not measure or guarantee citations or rankings.

42 concrete figures across 1224 words.

This observation could not be established from the available evidence. Resolve the collection limit or inspect the relevant source before deciding whether a change is needed.

Good — keep facts specific and current, and date-stamp them.

No readable llms.txt was available to inspect for Markdown links.

This observation could not be established from the available evidence. Resolve the collection limit or inspect the relevant source before deciding whether a change is needed.

Publish a readable llms.txt, then link its important pages with same-origin Markdown URLs.

No question-shaped H2/H3 headings were available to pair with answer paragraphs.

This observation could not be established from the available evidence. Resolve the collection limit or inspect the relevant source before deciding whether a change is needed.

Write the questions your audience asks as H2/H3 headings, then answer each in a concise paragraph immediately below it.

No readable /llms.txt, so its structure cannot be checked.

This observation could not be established from the available evidence. Resolve the collection limit or inspect the relevant source before deciding whether a change is needed.

Publish llms.txt first — the llms.txt check covers that — then this one verifies the structure.

The homepage answered Accept: text/markdown with text/html.

This is what an AI assistant relies on when deciding whether it can quote your page. This check does not apply to the features observed in this sample.

Optional: return a stripped markdown body when the request asks for text/markdown. Some hosts and CDNs do this for you; a plain HTML answer is not a defect.

No OpenAPI interface was advertised by sampled HTML.

This is what an AI assistant relies on when deciding whether it can quote your page. This check does not apply to the features observed in this sample.

An API is optional. Add a service-desc link if you already publish a machine-readable API specification.

The audited URL is allowed for evaluated answer-search crawlers.

This is what an AI assistant relies on when deciding whether it can quote your page. The inspected source provides this signal.

Nothing to do here.

FAQ/QA schema found.

This is what an AI assistant relies on when deciding whether it can quote your page. The inspected source provides this signal.

Nothing to do here.

Semantic structure present: main×1, article×6, section×6, nav×2, footer×1, aside×1.

This is what an AI assistant relies on when deciding whether it can quote your page. The inspected source provides this signal.

Nothing to do here.

Paragraphs get to the point without preamble.

This is what an AI assistant relies on when deciding whether it can quote your page. The inspected source provides this signal.

Nothing to do here.

Paragraphs average 12 words, lists present — chunk-friendly.

This is what an AI assistant relies on when deciding whether it can quote your page. The inspected source provides this signal.

Nothing to do here.

27 outbound reference(s) across crawled pages.

This is what an AI assistant relies on when deciding whether it can quote your page. The inspected source provides this signal.

Nothing to do here.

Brand declared: og:site_name "Deployed Yet?".

This is what an AI assistant relies on when deciding whether it can quote your page. The inspected source provides this signal.

Nothing to do here.

Meta description works as a standalone summary.

This is what an AI assistant relies on when deciding whether it can quote your page. The inspected source provides this signal.

Nothing to do here.

The site is consistently named "Deployed Yet?" and 2 identity URL(s) stay on deployedyet.com.

This is what an AI assistant relies on when deciding whether it can quote your page. The inspected source provides this signal.

Nothing to do here.

Fetched privacy policy lacks third-party/vendor disclosure signals.

A publisher review looks for this before it accepts a site. It is there, but weaker than this check expects.

Describe data collection, sharing, and cookie use by Google and other third-party ad vendors.

• https://deployedyet.com/privacy

No terms of use page found.

A publisher review looks for this before it accepts a site. It is there, but weaker than this check expects.

Consider adding terms that identify the service rules and publisher. This is a transparency heuristic, not an AdSense requirement.

No about page found.

A publisher review looks for this before it accepts a site. It is there, but weaker than this check expects.

Add an About page that identifies the publisher, site purpose, and relevant experience. This supports content transparency but is not a standalone AdSense requirement.

No contact page or mailto link found.

A publisher review looks for this before it accepts a site. It is there, but weaker than this check expects.

Add a working contact route or visible email so users can reach the publisher. This is a trust heuristic, not a published approval rule.

2/3 crawled pages don't link to the privacy policy.

A publisher review looks for this before it accepts a site. It is there, but weaker than this check expects.

Place the privacy link in shared navigation or footer markup so users can reach disclosures from any sampled entry page.

• https://deployedyet.com/privacy
• https://deployedyet.com/changelog

2/2 attributed editorial pages provide no discoverable author or publisher background.

A publisher review looks for this before it accepts a site. It is there, but weaker than this check expects.

Link the byline to an author profile or About page, or add truthful structured author details. This is a transparency heuristic, not an AdSense approval rule.

• https://deployedyet.com/
• https://deployedyet.com/changelog

No public contact email was found in the sampled home, About, or Contact pages.

This observation could not be established from the available evidence. Resolve the collection limit or inspect the relevant source before deciding whether a change is needed.

A public email is optional. The separate contact-method check covers whether readers have a way to reach the publisher.

No ads.txt yet.

This observation could not be established from the available evidence. Resolve the collection limit or inspect the relevant source before deciding whether a change is needed.

When AdSense provides your publisher entry, publish it exactly at /ads.txt and monitor authorization status in your account.

Domain age isn't visible from the site itself.

This observation could not be established from the available evidence. Resolve the collection limit or inspect the relevant source before deciding whether a change is needed.

Do not use age as a content-quality proxy. Verify ownership and account eligibility in AdSense; Google's general eligibility page publishes no domain-age threshold.

No article-shaped page was found on this site, so there is nothing to read.

This observation could not be established from the available evidence. Resolve the collection limit or inspect the relevant source before deciding whether a change is needed.

Publish articles under a path such as /blog/… and list them in the sitemap. This check then reads the newest one.

No article-shaped page was found on this site, so there is nothing to read.

This observation could not be established from the available evidence. Resolve the collection limit or inspect the relevant source before deciding whether a change is needed.

Publish articles under a path such as /blog/… and list them in the sitemap. This check then reviews its style signals.

No article-shaped page was found on this site, so there is nothing to read.

This observation could not be established from the available evidence. Resolve the collection limit or inspect the relevant source before deciding whether a change is needed.

Publish articles under a path such as /blog/… and list them in the sitemap. This check then looks for its byline and date.

Privacy policy found: https://deployedyet.com/privacy

A publisher review looks for this before it accepts a site. The inspected source provides this signal.

Nothing to do here.

All 2 editorial pages expose at least 250 publisher words; those pages hold 2433 publisher words in total. 1 of the 3 sampled pages is a support or tool page and was excluded from this check.

A publisher review looks for this before it accepts a site. The inspected source provides this signal.

Nothing to do here.

2/2 editorial pages clear the audit's publisher-content triage threshold. 1 of the 3 sampled pages is a support or tool page and was excluded from this check.

A publisher review looks for this before it accepts a site. The inspected source provides this signal.

Nothing to do here.