Scovant Research

The Scovant Agent Web Index

A monthly measurement of how ready websites actually are for AI agents — computed from Scovant's own production scans: declared crawler policy, observed WAF behavior toward an honestly-identified agent, protocol adoption, and the rating distribution. Published as an open, machine-readable dataset.

Oct 2026 · 8,638 sites measured
Methodology readiness-r1 · evidence estimated (passive scans, no agent journeys)
Index
88.9
Corpus median rating (0–100)
Scoring ≥ 80
71%
Share of sites with an overall score of 80 or more
Below 60
11.5%
Sites scoring < 60 overall
WAF-blocked
21.6%
Honestly-identified agent fetch blocked

Declared AI crawler policy

Share of sites whose robots.txt allows each AI crawler at /, grouped by the crawler's intent. Measured on 8,412 sites.

CrawlerIntentAllowed
CCBotTraining96%
GPTBotTraining95.9%
ApplebotSearch98%
ClaudeBotTraining96.2%
Claude-UserAgent / user97.7%
ChatGPT-UserAgent / user97.1%
DuckAssistBotAgent / user97.7%
OAI-SearchBotSearch97.7%
PerplexityBotSearch97.2%
Google-ExtendedTraining96.7%
Perplexity-UserAgent / user97.8%
Claude-SearchBotSearch97.7%
Applebot-ExtendedTraining96.7%
3% of sites block at least one search-intent AI crawler, 3.1% block at least one agent-intent crawler, and 4.8% opt out of at least one training crawler.

Agent protocol adoption

Machine-readable agent interfaces detected on 8,412 sites.

MCP declared
2.9%
/.well-known/mcp.json present
MCP working
0%
Of declarers: handshake + tools/list succeed
UCP profile
3.5%
Universal Commerce Protocol profile published
llms.txt
7.4%
llms.txt file present
WebMCP
0%
navigator.modelContext present (8067 pages measured)
WebMCP tools annotated
42.9%
Of tools on sites that have WebMCP, share declaring any safety hint · 2.3 tools per site on average
Weak structured data
0.1%
Structured-data score < 60
Access stability
87.2%
Sites whose honest-agent reachability never flipped across ≥3 weekly scans (8,222 sites with enough history)
Verified agents pass
2%
Sites that challenge anonymous automation but admit a request carrying a verifiable signature (8,010 measured)
Spoofed claim trusted
2.1%
Sites that admitted the same claim with an unverifiable signature — identity taken on trust (8,010 measured)

Historical series

PeriodIndexΔ indexMethodologyScoring ≥ 80WAF-blockedMCP declaredSample
Oct 202688.9+0.4readiness-r171%21.6%2.9%8,638
Sep 202688.50readiness-r169.4%10.6%3%9,126
Aug 202688.5—readiness-r169.4%10.7%3%9,098

Cloudflare AI-bot defaults — September 2026

Three independent snapshots of the marketing corpus around Cloudflare's 2026-09-15 AI-bot default change, taken with the same crawler identity (ScovantBot honest UA + a browser-UA baseline). This is not a before/after comparison: each two-day window reached a different set of sites (see `overlap`), and from 2026-09-21 the crawler follows redirects to the final page before judging a block, so the first two snapshots (first hop) and the third (redirects followed) measure differently. Each snapshot's shares describe that snapshot only. Edge provider labelled by a one-off header probe or by the crawler's own headers; 'none' = no CDN marker recognised. Layers under 20 domains report null. Causality is not claimed.

Share of domains where our honestly identified agent was blocked, per snapshot
LayerBefore · 09-13–09-15
first hop · 452 sites
After 1 · 09-20–09-22
first hop · 646 sites
After 2 · 09-27–09-29
redirects followed · 7,972 sites
cloudflare17.4% of 20116.2% of 17333.3% of 2,961
akamainot enough domains (< 20)3.0% of 3340.6% of 362
fastlynot enough domains (< 20)2.9% of 3419.7% of 295
cloudfront3.2% of 316.6% of 7615.6% of 946
othernot enough domains (< 20)not enough domains (< 20)13.9% of 158
none8.4% of 2027.4% of 32411.7% of 3,250
Cloudflare: declared crawler policy and observed edge policy differ16.9%15.6%33.3%

The snapshots are different samples, not the same sites re-measured. Domains shared: before∩after 1 0 · before∩after 2 439 · after 1∩after 2 550.

cloudflare-2026-09.jsonFull snapshot payload (JSON)cloudflare-2026-09.csvPer-snapshot, per-layer shares (CSV)

Machine-readable dataset

The full series and the latest snapshot are published as data, so agents, researchers, and journalists can read the numbers directly instead of quoting this page. Open data, licensed CC BY 4.0 — reuse freely with attribution to Scovant.

Methodology

Each monthly snapshot aggregates the latest scan of every site in Scovant's research corpus — independent, publicly reachable websites scanned by Scovant's own crawler. Corpus sites did not opt in and are not endorsed by or affiliated with Scovant; a site can request removal at any time, and removed sites leave the index.

One site, one vote: rates are computed per site over its most recent scan, never per scan. Metrics that depend on newer probes report their own measured-site count rather than assuming missing data means "no". Scores follow Scovant's public scoring model; the headline index is the corpus median overall score — not a novel composite. Each snapshot records the exact rule-set version that produced it.

Scovant is an AI agent readiness testing platform that scans, simulates, and continuously monitors websites to determine how reliably AI agents can discover, understand, and interact with them.