We scanned 10 of the most recognizable sites on the internet. The best score was 66 out of 100.

On 2026-06-11 we ran the automated ASO scanner against the apex domains of ten companies everyone knows. Every site allows AI crawlers. Almost none of them tell agents what they are, what they sell, what it costs, or how to act. The agent-readable web is still mostly unbuilt -- even at the top.

Scanner: @forgemeshlabs/aso-audit-mcp v0.1.2 (beta) Scope: public signals at the apex domain only Scored: Agent Readiness Index, 0-100

ASO Scores, 2026-06-11

# Site Score Level Discover
/20
Identity
/20
Trust
/15
Commerce
/15
Reputation
/15
Memory
/15
1cloudflare.com66ASO-3 Invocable202082.5015
2vercel.com46ASO-2 Understandable125152.547.5
3stripe.com39ASO-2 Understandable1259.52.527.5
3shopify.com39ASO-2 Understandable16582.507.5
5github.com33ASO-2 Understandable82.5112.545
6huggingface.co29ASO-1 Discoverable82.513.5022.5
7anthropic.com25ASO-1 Discoverable82.59.5022.5
8nike.com20ASO-1 Discoverable854002.5
9openai.com19ASO-1 Discoverable808002.5
10amazon.com15ASO-1 Discoverable42.58000

Average score: 33.1. Median: 31. ASO-3 Invocable starts at 50. One site out of ten reached that level.

Five findings from the first public ASO scan batch.

01

Everyone lets agents in. Almost no one talks to them.

All ten sites allow AI crawlers in robots.txt. But access is not communication: only one site publishes an agent identity manifest, and none publish an A2A agent card or a payment manifest at the paths agents check.

02

Cloudflare is the only site an agent could actually use.

cloudflare.com scored 66 (ASO-3 Invocable): perfect discoverability and identity, llms.txt plus llms-full.txt, an agent.json manifest ("Cloudflare Site Agent"), markdown negotiation via /index.md, and an OpenAPI spec. It is the only site in the batch that reached ASO-3 Invocable.

03

llms.txt splits the field in half.

Cloudflare, Vercel, Stripe, Shopify, and GitHub publish llms.txt. Hugging Face, Anthropic, Nike, and Amazon return 404. OpenAI returns 403 -- the file path is actively blocked on the apex domain.

04

Agent commerce is at zero.

No site in the batch exposes machine-readable pricing, a payment manifest, or x402 support at the apex domain. The highest commerce pillar score was 2.5 out of 15. The companies that process the world's payments are not yet payable by agents.

05

The AI companies are not the leaders.

openai.com scored 19 and anthropic.com scored 25 -- both ASO-1 Discoverable, behind Nike-adjacent retail basics on identity signals. Building frontier models and publishing agent-readable signals are evidently different muscles.

Read the numbers honestly.

These are point-in-time automated scans of public signals at each apex domain, run on 2026-06-11 with the beta scanner. Subdomains, docs sites, and API hosts were not scanned, so a company with a strong developer subdomain can outscore its apex result. The reputation pillar is an emerging category that automation can only partially verify. A score is not an endorsement or a criticism -- it is a snapshot of what an autonomous agent can find, parse, and act on at that origin today. Any site here could change its score overnight by publishing the missing files.

Run the same scan yourself.

@forgemeshlabs/aso-audit-mcp npm | beta
# Claude Code
claude mcp add aso -- npx -y @forgemeshlabs/aso-audit-mcp

# Then ask your agent
"Scan stripe.com for agent readiness"
"Scan my own site and give me a fix plan"

Your customers' agents run these checks whether you publish the files or not.

Scan your site