- Visibility40
- Citations2
- Sentiment87
- Site quality80
- AI readiness71
AI assistants name Cloudflare in 33.3% of answers, more often than the typical company in the technology sector, which is named in 10% of answers. Cloudflare's overall score is 50 out of 100, ranking 19th of 2,047 companies. The website passes 9 out of 14 technical checks showing its readiness for AI tools.
We asked 15 unbranded questions about the technology market: none named Cloudflare. AI assistants named it in 20 of 60 answers (33.3%). The typical technology company is named in 10.0% of answers. By how often it is named, Cloudflare ranks 42 of 273 in its sector.
Every dot is a company in the study. Hover one to see it; click to open its report.
This companySame sectorEvery other companyNever named
Five parts, each scored out of 100.
How often AI assistants name the company
How often AI uses the company's own website as a source
How positively AI describes the company
How well built the website's own pages are
How easily AI tools can read and use the website
Visibility is calculated from the answers on this page. How the score is built.
273 companies in this sector. The line on each bar is the typical company.
An answer that names the company
“Best solutions for protecting customer data in high-traffic ecommerce applications”
Below is a practical, prioritized set of solutions and patterns for protecting customer data in high‑traffic e‑commerce apps. I cover architecture, data handling, runtime protections, compliance, operational controls, and performance considerations so you can apply measures that scale.
High-level principles (apply everywhere)
Least privilege: grant the minimum access required at every layer (services, DB, keys, logs).
Defense in depth: multiple, independent controls so a single failure isn’t catastrophic.
Minimize & separate sensitive data: don’t collect or store more than you need; kee …
The AI’s answer as we received it, shortened and not checked for accuracy.
How the mentions in these answers were split between this company and its rivals
Answers naming it, out of answers received
What this website publishes for an AI agent to read, use and buy from, on a scale of six levels.
- 0
- 1
- 2
- 3
- 4
- 5
Level 4: Agent-integrated. At least one of an MCP card, A2A card, skills index or API catalog is published.
- Web Bot Auth
- 4 of MCP Server Card, A2A Agent Card, Agent Skills, API Catalog
- 1 of OAuth discovery, OAuth Protected Resource, auth.md
Show every check, for your technical teamHide the checks
- study: 92.0%robots.txtPassed
A valid robots.txt with crawl rules at the site root.
- study: 86.8%SitemapPassed
An XML sitemap listing the pages, ideally referenced from robots.txt.
- study: 0.3%Link headersPassed
HTTP Link headers on the homepage that point agents at machine readable resources.
- study: 5.5%DNS for AI DiscoveryNot present
Advertise agent endpoints with SVCB records under _agents.
- study: 1.9%Markdown negotiationPassed
Requests sent with Accept: text/markdown receive a markdown version of the page.
- study: 25.1%llms.txtPassed
An llms.txt that tells language models what the site offers.
- study: 93.4%AI bot rulesPassed
Explicit robots.txt rules for AI crawlers such as GPTBot, ClaudeBot and PerplexityBot.
- study: 1.4%Content SignalsPassed
Content-Signal lines in robots.txt declaring search, AI input and AI training preferences.
- study: 0.2%Web Bot AuthNot present
Only relevant if you run your own agents or crawlers: publish a signing key directory.
- study: 0.3%API CatalogNot met
List public APIs in a linkset at /.well-known/api-catalog.
- study: 11.8%OAuth discoveryNot met
Publish OpenID Connect or OAuth server metadata under /.well-known.
- study: 10.3%OAuth Protected ResourceNot met
Serve protected resource metadata at /.well-known/oauth-protected-resource.
- study: 0.0%auth.mdNot met
Publish an auth.md describing how agents sign in.
- study: 0.2%MCP Server CardPartly met
Offer an MCP server and publish its server card under /.well-known.
- study: 0.1%A2A Agent CardNot met
Publish an agent card at /.well-known/agent-card.json.
- study: 0.2%Agent SkillsPartly met
Publish a skills index with the main tasks agents can do.
- study: 33.7%WebMCPCould not check
Register key actions such as search or cart as WebMCP tools.
- study: 0.1%ARD manifestNot met
Publish an ai-catalog.json listing every agent interface.
Score 76 of 100 · 97% of checks could run · checked on October 5, 2026 · www.cloudflare.com · 2,047 companies scanned
9 of 14 passed. This list is for your technical team. The percentage is how many companies in the study pass each check.
These 14 checks ran during the audit and are what the AI readiness part of the overall score counts. The scan above ran later and is stricter on Link headers and Markdown, so a check can pass here and not there.
Show the 14 checksHide them
- Passedrobots.txt publishedstudy: 85.0%
- PassedXML sitemapstudy: 73.2%
- PassedHTTP Link headers (RFC 8288)study: 29.0%
- PassedMarkdown content negotiationstudy: 8.3%
- Passedllms.txt publishedstudy: 21.7%
- PassedToken budget (page weight)study: 95.2%
- PassedExplicit AI bot rulesstudy: 13.0%
- Not metAPI Catalog (.well-known/api-catalog)study: 0.2%
- Not metOAuth Authorization Server discoverystudy: 10.1%
- Not metOAuth Protected Resource discoverystudy: 9.3%
- PassedMCP Server Cardstudy: 0.0%
- PassedA2A Agent Cardstudy: 0.0%
- Not metWebMCP toolsstudy: 4.2%
- Not metAgent Skills declaredstudy: 0.0%
This website sets rules for 6 AI crawlers by name. All others follow its general rules.
- GPTBot*allowed
- ClaudeBotallowed
- Anthropic-AI*allowed
- Google-Extended*allowed
- Applebot-Extendedallowed
- Meta-ExternalAgentallowed
- FacebookBotallowed
- Bytespiderallowed
- CCBot*allowed
- Diffbotallowed
- Omgilibotallowed
- OAI-SearchBotallowed
- Claude-SearchBotallowed
- PerplexityBot*allowed
- Applebotallowed
- Amazonbotallowed
- YouBotallowed
- ChatGPT-User*allowed
- Claude-Userallowed
- Perplexity-Userallowed
- DuckAssistBotallowed
- MistralAI-Userallowed
Read from the website’s own rules file (robots.txt). An asterisk marks a crawler the file names. The rest follow its general rules. “Partly” means only some pages are blocked.
How many times each website was listed as a source in these answers
In the study as US-listed.
- Best solutions for protecting customer data in high-traffic ecommerce applications
- What are the differences between agent-powered and serverless application delivery networks?
- How do you run serverless workloads at scale while maintaining low network latency?
- Why might a cloud security solution not be blocking all types of web-based attacks?
- Cheaper alternatives to enterprise-grade global application delivery networks
- Is a unified cloud application platform worth the investment for a startup looking to scale quickly?
- What are other ways to deliver agent-based applications without using a full-stack cloud platform?
- Top cloud-based solutions for unified application delivery and security for businesses
- What are the best platforms for building and scaling internet-facing applications without managing infrastructure?
- What should I consider before choosing a platform to secure and accelerate my web applications?
- Are there free options for basic DDoS protection for small businesses?
- How can I troubleshoot high latency when using a global app delivery platform?
- Alternatives to unified cloud application platforms for scaling and securing web workloads
- How do edge application security platforms compare with traditional on-premises firewalls?
- How do pricing tiers for cloud-based application security platforms typically work?
Columns, left to right: OpenAI, Claude, Perplexity, Gemini. The AI assistants often disagree. Across the study, on 40% of the questions where a company is named, only one of the four names it.
A badge of this result that you can show on your own website. Copy the code below.
<a href="https://aeo-audit.rezolve.com/us/cloudflare.com"><img src="https://aeo-audit.rezolve.com/us/badges/cloudflare.com.svg" alt="Overall score 50 of 100, US AI Visibility Study 2026" width="280" height="64"></a>