Technical SEO Audit Checklist For Google And AI Crawlers

A technical SEO audit checklist that covers Googlebot and AI crawlers, built from Google and crawler docs and our own October 19, 2026 audit of 50 business sites: robots rules, firewalls, JavaScript, sitemaps, structured data and the soft block a status code won't show.

RankControl9 min read
Technical SEO Audit Checklist For Google And AI Crawlers

Someone asked r/SEO in September whether anyone had re-tested the claim that AI crawlers don't run JavaScript. Every source they followed led back to one Vercel analysis from December 2024. One reply said the answer depends on how much JavaScript a page has. Another pointed out that a person had just watched Claude summarize a JavaScript page using only its metadata.

r/SEO· u/waterproofwebwizard· Sep 1, 2026

Has anyone re-tested whether AI crawlers render JavaScript since Dec 2024?

Two things I keep reading everywhere and cannot verify. I would rather ask than repeat them. "AI crawlers don't execute JavaScript." Every citation I follow ends at the same Vercel analysis from 17 December 2024. That is 20 months old, and...

↑ 3 upvotes20 comments
Via Reddit

That's the problem with technical SEO in 2026. The checklists were written for Googlebot, and AI crawlers behave differently. This one covers both, and we ran it on 50 real business sites to see where they trip.

What we checked on 50 sites

On October 19, 2026, we audited the homepages of 50 business sites, made up of 30 software companies, 13 online stores and 7 local service businesses. We fetched each homepage, its robots.txt, sitemap and llms.txt, and requested the homepage again while labeled as OpenAI's, Perplexity's and Anthropic's crawlers.

CheckResult
Homepage loaded for a normal request41 of 50
robots.txt blocking AI search crawlers1 of 44 we could read
robots.txt naming AI crawlers at all10 of 44
Homepage text missing without JavaScript1 of 41
Sitemap found40 of 41
Structured data (JSON-LD) on the homepage33 of 41
Exactly one H1 heading32 of 41
llms.txt file28 of 41

Most sites passed the basics. The trouble sat in places a status code or a robots.txt check won't show you.

RANKCONTROL

AI search traffic grew 835% this year. Is your content ready?

RankControl generates 26 content formats optimized for ChatGPT, Claude, and Perplexity. Published on your domain, matched to your brand.

1. Crawler access in robots.txt

Start with robots.txt, since it's the one place every crawler checks first. Look for rules that block Googlebot, Bingbot or the AI search crawlers, which are OpenAI's OAI-SearchBot, Perplexity's PerplexityBot and Anthropic's Claude-SearchBot.

In our audit, only one site blocked the AI search crawlers. Its robots.txt blocked every crawler we checked, Googlebot included. Ten sites named AI crawlers in their file. Apart from that one site, none of them blocked the AI search crawlers from the homepage.

Know which crawler does what before you block anything. OpenAI says blocking GPTBot stops training but doesn't remove you from ChatGPT search, while blocking OAI-SearchBot does. Our complete AI crawler list covers each one.

2. Crawler access through your firewall

This is where we found the real problems. Nine of the 50 sites refused our plain scripted request with a 403 error, and six of those also refused the requests labeled as AI crawlers. Online stores were hit hardest, with 5 of 13 blocking us, against 1 of 30 software sites.

That doesn't prove the real crawlers are blocked. OpenAI, Perplexity and Anthropic publish the IP ranges their crawlers use, and firewalls often let verified crawlers through while blocking scripts like ours. Brooks Running refused all our requests, yet ChatGPT linked to Brooks product pages in a shopping test we ran the same day.

The only reliable test is your own data. Check your server logs for visits from the AI crawlers, and check your CDN's bot settings. Cloudflare changed its defaults for AI and mixed-use crawlers in September 2026, so a setting you never touched may have changed. Our guide to auditing AI crawlers in server logs walks through it.

3. The soft block

We'd call this one a soft block, a page that returns a normal 200 status but serves an error page instead of your content. Status-code checks miss it completely.

L.L.Bean's homepage gave our normal request about 3,100 words of text. The same request labeled as OpenAI's search crawler got a 200 status and 77 words, which turned out to be a firewall error page with an incident number. Any tool that only checked the status would have marked it as fine.

To catch soft blocks, compare what a crawler request gets with what a browser gets, and count the words as well as checking the status. A sudden drop in page size for one crawler is the clue.

Built by the team that got cited in 48 hours.

Content generation, backlink building, AI visibility tracking, and Google rankings. One platform, zero guesswork.

Show me the platform →One platform · 7 AI agents

4. Content that loads without JavaScript

Google renders JavaScript, so a page built in the browser can still rank. Most AI crawlers don't. Vercel's analysis of crawler traffic found that ChatGPT's and Claude's crawlers fetch JavaScript files but don't run them, while Gemini uses Google's rendering.

Vercel blog post The rise of the AI crawler from December 17, 2024, with data from MERJ and Vercel showing GPTBot made 569 million requests and Claude 370 million in a month

As the Reddit thread points out, that study is almost two years old, and the vendor sells server-side rendering. But we couldn't find newer public evidence that the big AI crawlers run JavaScript, so build as if they don't.

In our audit, one of the 41 homepages had no readable text in its raw HTML, only a script that built the page in the browser. The median homepage carried about 1,550 words in plain HTML. To check your own pages, view the page source or fetch it without a browser and see whether your main text is there.

5. Indexing signals

These checks matter to Google and AI crawlers alike, since both rely on the same signals to decide what a page is.

  1. Status codes. Key pages should return 200, and moved pages should 301 to the new address.
  2. Noindex tags. None of the 41 homepages had one, but check templates after every release.
  3. Canonical tags. 2 of 41 homepages had none.
  4. Redirect chains. Keep them to one hop.

6. Sitemaps

A sitemap helps every crawler find your pages. 40 of the 41 sites we could load had one at /sitemap.xml or listed in robots.txt. Submit yours to Google Search Console and Bing Webmaster Tools, since Bing's index feeds Copilot and is one of ChatGPT's sources.

7. Titles, headings and structured data

Every site we loaded had a title and a meta description. Headings were messier. 32 of 41 had exactly one H1, 7 had more than one and 2 had none. Google's John Mueller has said multiple H1s are fine, but one clear H1 makes the page's topic obvious to any reader, human or crawler.

Structured data was common, on 33 of 41 homepages. Use JSON-LD for your organization, products, articles and FAQs, and keep it matching what's visible on the page.

8. Speed

Our full homepage fetch took a median of 0.84 seconds from our test machine, and 7 of 41 took over 1.5 seconds. Google's Core Web Vitals measure what users experience, which our check doesn't. Our post on Core Web Vitals and rankings covers what Google actually measures.

Speed matters for AI fetchers too, because some fetch pages live while answering a question. A slow server makes it harder for those live fetches to get your content in time.

9. llms.txt

28 of the 41 sites had an llms.txt file, mostly software companies. No major AI engine has confirmed it uses the file to choose sources, so treat it as optional. Our robots.txt and llms.txt checklist covers how to set both up.

The checklist on one page

Here's the whole audit in one table, with the quickest way to test each item.

CheckWhy Google caresWhy AI crawlers careQuick test
robots.txt rulesBlocks keep pages out of SearchBlocks keep pages out of AI answersRead the file for each crawler name
Firewall and CDNRarely blocks GooglebotOften blocks scripted fetchesServer logs and CDN bot settings
Soft blocksError pages get indexed as contentError pages replace your contentCompare word counts by user agent
JavaScriptGoogle renders itMost AI crawlers don'tView source for your main text
Indexing signalsDecide what gets indexedDecide which version gets readStatus, canonical and noindex checks
SitemapHelps discoveryHelps discoveryOpen /sitemap.xml
Headings and schemaClarify the page topicMake facts easy to liftCheck H1 and JSON-LD
SpeedPart of page experienceLive fetches need a fast replyTime a full page fetch

How to prioritize what you find

Audits can produce hundreds of warnings. A thread in r/TechSEO in August asked how to rank them, and the best replies said to group duplicates into single fixes and weigh each by how many pages and how much traffic it touches.

r/TechSEO· u/posticycom· Aug 27, 2026

Hundreds of findings found in the audit. How to prioritize the technical SEO issues?

Large technical SEO audits often produce hundreds or even thousands of findings but treating every issue as equally important doesn't look practical. For example, I might have crawlability issues, indexation inconsistencies, duplicate URLs,...

↑ 11 upvotes27 comments
Via Reddit

We'd order this checklist the same way. Access problems come first, because a blocked crawler sees nothing else on your site. JavaScript and indexing come next, and headings, schema and llms.txt last.

Limits of our audit

We checked homepages only, once, from one server. Our requests copied crawler user agents but came from our own IP address, so firewalls could treat them differently from the real crawlers. The 50 sites came from our earlier studies, so they lean toward software companies and online stores.

What this takes by hand

Here's a rough budget for a technical audit of a small site, by our estimate.

TaskHours
Robots.txt, firewall and log checks2 to 3
JavaScript and soft-block checks on key templates2 to 3
Indexing, sitemap and heading checks2 to 4
Structured data and speed checks2 to 3
Writing up and prioritizing fixes2 to 3
Total for one audit10 to 16

Doing it by hand or with help

You can run this audit yourself once or twice a year. The part that changes without warning is crawler access, since firewall and CDN defaults move on their own. RankControl tests every day whether the AI crawlers can reach your site and flags a block when it finds one. Its AI visibility tracking checks 50 of your buyer questions every week on ChatGPT, Perplexity, Claude, Gemini, Grok, Google AI Mode and Google AI Overviews. If you run a software site, our technical SEO guide for SaaS goes deeper on templates and docs.

RANKCONTROL

See your first AI citation report in under 5 minutes.

No setup calls. No onboarding meetings. Connect your domain and see where AI mentions your brand right now.

Frequently Asked Questions

Crawler access through robots.txt and your firewall, content that loads without JavaScript, indexing signals like canonicals and noindex tags, sitemaps, titles and headings, structured data and speed. Check each one for Googlebot and for AI crawlers like OAI-SearchBot and PerplexityBot.

Mostly no, based on the best public data. Vercel's December 2024 analysis found ChatGPT's and Claude's crawlers fetch JavaScript files but don't run them, while Gemini uses Google's rendering. Content that only appears after JavaScript runs may be invisible to them.

Read your robots.txt for rules naming AI crawlers, check your firewall or CDN settings, and look in your server logs for visits from OAI-SearchBot, PerplexityBot and Claude-SearchBot. Outside tests can't fully copy the real crawlers, which come from published IP ranges.

It's when a site returns a normal 200 status but serves an error or challenge page instead of the real content. In our October 2026 audit, one large retailer sent a firewall error page with a 200 status to a request labeled as OpenAI's search crawler.

Run a full audit once or twice a year and after any redesign, migration or CDN change. Check crawler access and robots.txt monthly, because firewall and CDN defaults can change without you touching anything.

RANKCONTROL

Turn AI search into a customer acquisition channel

Content that ranks on Google and gets cited by AI search engines. Published on your domain. Citations tracked weekly.

Related Articles

Is SEO Dead Now With AI?

Nov 1, 2026 · 9 min read

Is SEO Dead Now With AI?

Is SEO dead now that AI answers so many searches? We asked ChatGPT and Google AI Mode 10 versions of the question on October 19, 2026, checked where their answers came from, and lined them up with Google's own guidance and the latest click data.

What Is Semantic Search? How It Shapes SEO And AI Answers

Oct 30, 2026 · 10 min read

What Is Semantic Search? How It Shapes SEO And AI Answers

Semantic search matches what you mean, not only the words you type. We searched 14 pairs of same-meaning queries on Google and ChatGPT on October 19, 2026, and ran three open embedding models, to show what that means for SEO and AI answers.

SEO For Law Firms In 2026: How To Win Google And AI Search

Oct 30, 2026 · 9 min read

SEO For Law Firms In 2026: How To Win Google And AI Search

SEO for law firms in 2026, built from what Google and ChatGPT actually show for legal searches: the map pack for hiring searches, AI Overviews for questions, and why your practice area decides how hard this gets.

Hreflang For AI Translated Pages: How To Handle DeepL Content Safely

Nov 2, 2026 · 10 min read

Hreflang For AI Translated Pages: How To Handle DeepL Content Safely

What Google says about machine-translated pages, the hreflang setup a DeepL workflow needs, the mistakes we found on live multilingual sites, and which translated pages to review, noindex or never translate.

Google Search Statistics 2026: Searches Per Day, Share And Trends

Oct 28, 2026 · 13 min read

Google Search Statistics 2026: Searches Per Day, Share And Trends

Google search statistics for 2026, traced to their sources: Google's own 5 trillion searches a year, about 13.7 billion a day, its 89.94% share, 68% zero-click searches and AI Mode's billion users. Plus our check of 15 ranking stats pages that quoted daily figures from 3.5 billion to 22 billion.

How Long Does SEO Take To Work? Real Timelines For New And Older Sites

Oct 30, 2026 · 8 min read

How Long Does SEO Take To Work? Real Timelines For New And Older Sites

How long does SEO take? We checked the ages of 309 pages on Google's first page for 40 searches. The median page was 2.2 years old, and only 3% sat on domains younger than two years.

Best SEO Tools For Small Business In 2026

Oct 30, 2026 · 11 min read

Best SEO Tools For Small Business In 2026

The best SEO tools for small business in 2026, sorted by budget: the free tools every owner should set up, the paid tools under $50 a month, and the ones worth $100 or more. Prices checked October 19, 2026.

SEO For Dentists In 2026: Google, Maps And AI Search

Oct 30, 2026 · 9 min read

SEO For Dentists In 2026: Google, Maps And AI Search

SEO for dentists in 2026, built from what Google actually shows for dental searches: map packs for hiring searches, AI Overviews for questions, and the practice pages, profiles and reviews that win both.

SEO For Real Estate In 2026: How Agents Get Found On Google And AI Search

Oct 30, 2026 · 8 min read

SEO For Real Estate In 2026: How Agents Get Found On Google And AI Search

SEO for real estate agents in 2026, built from what Google shows for real searches: where Zillow can't be beaten, where local agents rank first, and which pages AI Overviews cite for cost and neighborhood questions.

THE SIGNAL

Insights on AI and Google search strategy. No fluff.

Get the latest on AI citations, Google rankings, and content strategy.

No spam. Unsubscribe anytime.