Most of the web is unbuyable by an agent
We ran the same audit we sell against 73 well-known public websites — 30 media sites · 30 retail sites · 11 SaaS products, 33 of the 106-domain cohort still to sweep — and scored each on nineteen checks. Not "is it a good website". Two narrower questions: can an AI agent read this business, and could one buy from it without a human in the loop.
The answers are not the same, and the gap between them is the finding. Average overall score is 36/100. Average commerce readiness is 18/100, and 16 of 73 score zero on it outright.
The numbers
Distribution of overall scores, in ten-point buckets. The committed cohort is 106 domains; 73 have a score this week, and 33 have not been swept yet. Every number on this page is computed over the 73 scored sites only — an unreachable or not-yet-swept domain is excluded, never counted as zero.
Commerce readiness is the gap
In September 2026 the agent-commerce blueprints all landed at once — Anthropic's guidance for commerce agents, ACP, AP2, UCP, x402. They assume four things are true of a merchant: the offer is machine-readable, the catalog is fetchable, the checkout is reachable without running JavaScript, and the shopping agent is not blocked at the door. We measured all four.
The retail number is the one worth sitting with. These are sites whose entire purpose is selling, scored on whether software could complete a purchase. Being findable and being buyable turn out to be different projects, and almost everyone has only done the first.
Average score by section
Each section is normalised to 0–100 within itself, so they are comparable to each other even though they carry different weights in the total.
Tiers
Named entries
A site is named here only if it is ours, or if it holds a current Agent-Ready certification — in which case being named is something it bought. Everything else in the cohort is anonymous below, and stays anonymous.
| Domain | Score | Tier | Commerce | Band |
|---|---|---|---|---|
| virohanalife.com | 91 | A | 74 | agent-ready |
| virohanadentalclinic.com | 82 | A | 48 | mostly legible |
Verify any of these independently at
/verify →
or /api/verify?domain=…. Certification is €149 a year and includes
the audit —
/audit →.
The rest of the cohort
Anonymised. We have not asked these sites for permission to publish a score against their name, so we do not.
| Site | Score | Tier | Commerce |
|---|---|---|---|
| Top-100 SaaS product — tier A | 76 | A | 33 |
| Top-100 SaaS product — tier B | 68 | B | 50 |
| Top-100 SaaS product — tier B | 63 | B | 66 |
| Top-100 SaaS product — tier B | 61 | B | 50 |
| Top-100 retail site — tier B | 61 | B | 52 |
| Top-100 SaaS product — tier B | 56 | B | 40 |
| Top-100 retail site — tier B | 52 | B | 24 |
| Top-100 retail site — tier B | 52 | B | 27 |
| Top-100 retail site — tier B | 51 | B | 30 |
| Top-100 retail site — tier C | 49 | C | 24 |
| Top-100 retail site — tier C | 48 | C | 37 |
| Top-100 media site — tier C | 48 | C | 6 |
| Top-100 retail site — tier C | 48 | C | 24 |
| Top-100 retail site — tier C | 47 | C | 35 |
| Top-100 retail site — tier C | 46 | C | 42 |
| Top-100 retail site — tier C | 46 | C | 42 |
| Top-100 SaaS product — tier C | 44 | C | 9 |
| Top-100 SaaS product — tier C | 44 | C | 24 |
| Top-100 media site — tier C | 43 | C | 15 |
| Top-100 media site — tier C | 43 | C | 15 |
| Top-100 SaaS product — tier C | 43 | C | 24 |
| Top-100 retail site — tier C | 43 | C | 21 |
| Top-100 media site — tier C | 42 | C | 0 |
| Top-100 media site — tier C | 41 | C | 9 |
| Top-100 SaaS product — tier C | 41 | C | 27 |
| Top-100 media site — tier C | 41 | C | 15 |
| Top-100 media site — tier C | 40 | C | 9 |
| Top-100 SaaS product — tier C | 40 | C | 36 |
| Top-100 media site — tier C | 39 | C | 0 |
| Top-100 media site — tier C | 39 | C | 15 |
| Top-100 retail site — tier C | 39 | C | 19 |
| Top-100 retail site — tier C | 38 | C | 27 |
| Top-100 media site — tier C | 38 | C | 6 |
| Top-100 media site — tier C | 38 | C | 0 |
| Top-100 media site — tier C | 38 | C | 6 |
| Top-100 media site — tier C | 38 | C | 15 |
| Top-100 retail site — tier C | 38 | C | 24 |
| Top-100 media site — tier C | 38 | C | 15 |
| Top-100 media site — tier C | 37 | C | 9 |
| Top-100 media site — tier C | 37 | C | 15 |
| Top-100 media site — tier C | 35 | C | 6 |
| Top-100 retail site — tier C | 35 | C | 0 |
| Top-100 media site — tier C | 34 | C | 9 |
| Top-100 media site — tier C | 34 | C | 15 |
| Top-100 SaaS product — tier C | 34 | C | 15 |
| Top-100 media site — tier C | 34 | C | 6 |
| Top-100 retail site — tier C | 34 | C | 9 |
| Top-100 retail site — tier C | 32 | C | 15 |
| Top-100 media site — tier C | 32 | C | 0 |
| Top-100 media site — tier C | 30 | C | 0 |
| Top-100 retail site — tier C | 28 | C | 0 |
| Top-100 media site — tier C | 27 | C | 0 |
| Top-100 media site — tier C | 26 | C | 0 |
| Top-100 retail site — tier C | 25 | C | 0 |
| Top-100 retail site — tier C | 25 | C | 15 |
| Top-100 media site — tier D | 22 | D | 0 |
| Top-100 media site — tier D | 22 | D | 0 |
| Top-100 retail site — tier D | 19 | D | 0 |
| Top-100 retail site — tier D | 18 | D | 0 |
| Top-100 media site — tier D | 17 | D | 0 |
| Top-100 media site — tier D | 13 | D | 0 |
| Top-100 retail site — tier D | 10 | D | 19 |
| Top-100 retail site — tier D | 10 | D | 19 |
| Top-100 retail site — tier D | 9 | D | 19 |
| Top-100 retail site — tier D | 9 | D | 19 |
| Top-100 retail site — tier D | 7 | D | 19 |
| Top-100 retail site — tier D | 5 | D | 19 |
| Top-100 retail site — tier D | 5 | D | 19 |
| Top-100 media site — tier D | 5 | D | 19 |
| Top-100 media site — tier D | 5 | D | 19 |
| Top-100 retail site — tier D | 5 | D | 19 |
Method, and how to get out of it
Method, in one line: once a week we fetch about nineteen public
documents from each domain in a fixed cohort — robots.txt, llms.txt, the sitemap,
a handful of /.well-known/ paths and the homepage — score them 0–100
with the same engine our customers pay for, and publish the distribution.
We follow no links, submit no forms, create no carts, use no credentials or cookies, honour robots.txt, and pause between domains. The whole weekly pass is a few hundred requests — less traffic than one person browsing. Sites that cannot be reached are excluded, never scored zero.
Opt out: email [email protected] and the domain is removed from the cohort. No justification needed, and we do not ask for one.
The machine-readable version of this page is at /md/index-report.md →.
Why we publish this at all
Akshay's worry about publishing an index is the obvious one: it is very easy to turn a measurement into a stick, and a league table of named companies scoring badly is a stick. So this one names almost nobody. The cohort is public household-name websites, the seed list is not published, and a site appears by name only if it is ours or if it paid for a certification and therefore chose to be listed.
What is left is the honest part: a distribution. The finding is not that any particular company is behind — it is that the whole cohort is, in the same place, in the same way, and that almost nobody has noticed yet because the websites look fine to a human. That is worth saying out loud, and it does not require naming anyone to say it.
We are in this table too, at whatever we actually score. Our dental clinic is legible to agents and is currently not buyable by one either. We publish that rather than quietly leaving ourselves out.