Why Site Vetted scores 88/100 on its own audit

We run our 12-pillar rubric on ourselves. Nightly. The receipt is SHA-256 fingerprinted and the score is public. Two pillars are gaps. Here is exactly why — with nothing hidden.

88/100 Above the 80-point self-audit floor
Receipt hash: 69c03cdb5d9bc391b39251c6bfc7ceb49f4a6062ca09d354c6de4abd08aac616
Snapshot: 2026-08-19T15:04:11 UTC · Scorer: v2.1.0 · Commit: 5ef7dad5d7f9e97f059257f2c3234e46921eed7b

The overall picture

88 out of 100 — with two applicable pillars (HIPAA + FERPA) not counted because Site Vetted is neither a healthcare provider nor an educational institution. That is 88 out of 100 real, applicable points, not out of 120.

Overall self-audit
88 / 100
Green fill = pillars we passed. The orange marker is the 80-point floor Site Vetted publicly commits to holding on its own site. We are 8 points above it and we are showing you the two pillars that keep us from being closer to 100.

All 12 pillars, side by side

Green cards are pillars we pass at full weight. Orange cards are the two we do not. Gray cards are pillars our own vertical does not activate (they still exist for healthcare and education clients).

P110/10

Privacy & Consent

Pass

Privacy policy, terms of service, and CCPA "Do Not Sell" link all present. No advertising trackers on the landing page.

P210/10

ADA / Accessibility

Pass

Accessibility statement published, alt text on images, form labels present. Zero critical axe violations.

P310/10

Security (FTC Safeguards)

Pass

HTTPS, HSTS, CSP, X-Frame-Options, X-Content-Type-Options, Referrer-Policy, Permissions-Policy — all eight security headers present.

P410/10

Technical SEO

Pass

Canonical tag, single H1, meta description within length, robots.txt reachable.

P54/10

Trust & Conversion

Gap

We have Organization and FAQ schema plus a public Founding Members program — but no paying customers yet means no honest AggregateRating.

P610/10

Lifecycle & Freshness

Pass

Current copyright year, fast performance, robots.txt reachable, canonical present.

P710/10

AI-Readiness

Pass

llms.txt published, robots.txt AI-friendly, JSON-LD structured data for Organization, LocalBusiness, WebSite, FAQPage.

P810/10

GEO / AI-Search

Pass

LocalBusiness schema, GeoCoordinates, PostalAddress, llms.txt — all four AI-search signals present.

P99/10

Local / GBP

Almost

LocalBusiness schema, PostalAddress, GeoCoordinates all present. Missing 1 point: AggregateRating schema (blocked by "no paying customers yet" — same Rule #1 block as P5).

P105/10

Bot / Chat Disclosure

Gap

Support email present. Missing a tel: phone link because Tim has publicly declined a phone number on principle; scorer treats absence as -3 regardless of intent.

P11n/a

HIPAA

Not applicable

Not a healthcare provider. Pillar exists and is scored for dental practices, medspas, clinics, and healthcare marketing sites — just not for Site Vetted itself.

P12n/a

FERPA

Not applicable

Not an educational institution. Pillar exists and is scored for K-12, universities, and edtech vendors — just not for Site Vetted itself.

The two real gaps — deep dive

Rule #1 says every claim traces to primary evidence. Here is exactly what the scorer looks for on each gap pillar and what we do and do not have.

P5 — Trust & Conversion (4/10)

Trust & Conversion is scored across six sub-signals. Site Vetted passes four of the six.

Sub-signal breakdown 4 / 10

+Organization schema — present (JSON-LD Organization + LocalBusiness in the head, verifiable via view-source)
+FAQPage schema — present (12 canonical questions covering pricing, evidence, and category boundaries)
+Terms of Service link — present in the footer, links to /legal/terms
+Founding-Members program signal — publicly disclosed Founder Tier, no dark patterns
AggregateRating schemaabsent. Would need at least one real customer review. Zero paying customers to date. Rule #1 blocks us from inventing one.
Review schemaabsent. Same reason: no honest customer testimonials to embed.
Why this is a public gap, not a hidden one: the scanner has no way to distinguish "no reviews yet because pre-revenue" from "no reviews because bad." So the honest answer for anyone auditing us today is 4/10. This score improves the moment we log our first paying-customer review — not a moment sooner.

P10 — Bot / Chat Disclosure (5/10)

Bot / Chat pillar rewards accessible contact affordances. Site Vetted passes two of the four sub-signals.

Sub-signal breakdown 5 / 10

+Email linkmailto:tim.devolve@sitevetted.com present in footer + contact block
+Form labels present — every input on the scan form and Founder Tier form has an accessible label
+Bot disclosure paragraph — published in the footer, discloses the 5-engine Quintus cross-verification and AI-produced output
tel: phone linkabsent by design. Tim has publicly declined a phone number for Site Vetted. The scorer applies -3 for any site without a tel:, regardless of intent.
This is a rubric-vs-reality moment worth flagging: the P10 rubric was designed for local SMBs (dentists, plumbers, HVAC) where the absence of a phone number is a real trust problem. For a compliance-audit SaaS with an email-only support model, that same -3 is arguably too harsh. We are not adjusting the rubric to grade ourselves better. We keep the 5/10 as a Rule #1 signal that our own product will hold its own site to the same standard as any customer site.

How to verify this receipt yourself

You do not have to take our word for any of it. The receipt hash is a SHA-256 fingerprint of the entire audit JSON. Change any pillar score, any evidence line, or any metadata and the hash breaks. It is the same fingerprint we lock onto the Bitcoin blockchain nightly via OpenTimestamps.

Receipt lineage

Target URL
https://www.sitevetted.com/
Snapshot UTC
2026-08-19T15:04:11Z
Scorer version
2.1.0
Deployed commit
5ef7dad5d7f9e97f059257f2c3234e46921eed7b
Receipt hash
69c03cdb5d9bc391b39251c6bfc7ceb49f4a6062ca09d354c6de4abd08aac616
Floor commitment
80 / 100 — alarms fire if we drop below
Snapshot cadence
Daily · 8 AM PT

The receipt-hash field is not a marketing signal — it is the same hash we publish for every paying customer's audit and the same hash that gets rolled up into a Merkle tree and anchored on Bitcoin nightly. It is how we prove that this 88 is the 88 that existed at scan time, not a number we tuned after the fact.

Become a Founder and watch the score move

The two gaps above are not marketing gaps. They are Rule #1 gaps that can only be closed by real people leaving real feedback. If you become a Founder, your honest review directly moves specific numbers on this page — in real time, receipt-locked, no fakes.

Founding Members program · open now

Your review, your fingerprint on the receipt

Site Vetted runs its 12-pillar rubric on itself every day at 8 AM PT. When a Founder posts a real review, three things happen the next morning:

P5 Trust & Conversion 4/10 → up to 8/10

Your Review-schema entry (+2) and AggregateRating (+2) get baked into the JSON-LD on the site. Scorer picks them up next scan.

P9 Local / GBP 9/10 → 10/10

The missing AggregateRating on P9 closes at the same time. This is the smallest gap and the fastest fix.

Overall score 88 → up to 93

A single Founder review is worth +5 to the composite. The daily snapshot posts the new number publicly — with your review’s Rule #1 receipt hash.

What Founders get in return

  • Lifetime 12-pillar audits for one primary domain — no monthly fee, ever
  • Receipt-locked SHA-256 fingerprint on every audit, same as paying enterprise clients
  • 5-engine Quintus cross-verification (GPT-5, Claude Sonnet 4.5, Gemini 3.1 Pro, Grok 4, Perplexity Sonar)
  • Bitcoin-anchored receipt lineage via nightly OpenTimestamps Merkle roll-up
  • Founder badge visible in your public audit report
  • Direct feedback line to Tim — your input shapes the next rubric version
  • Price locked at $97 lifetime for the first 100 seats (moves to $197 after that)
Rule #1 fine print, because you deserve it: your Founder review has to be honest. If you think we’re rubbish, say so — we publish it anyway and the score drops accordingly. That’s the point. This page will show whatever number your feedback produces, not the number we’d prefer.

Or run your own audit first

Every scan runs against the same 12-pillar rubric we use on ourselves. Same receipt-lock. Same evidence lines. Same public methodology. See where you stand before you commit.

Run your own 12-pillar scan