Can my AI audit my website? Yes. Hand it the URL.

You shipped a site and you cannot see it the way the internet sees it: what a search engine can read, what an AI answer engine can find, where a buyer who arrived ready to act quietly leaks out. An AI with the right tool can run that audit for you. Zambo is the verifiable work layer for AI, and the instrument here is ghost_audit_site: one call on a public URL, returning the gaps in five areas, a score from 0 to 100, and a report at its own URL, with a verifiable receipt for the audit itself.

Our own test, reported straight

On October 16, 2026, the work session behind this page called ghost_audit_site on a public site (https://www.python.org). The tool did not run. It answered that the connection's free calls for the day were used up, in its own words: "You have used your 20 free calls for today", and offered the $0.99 one-time Day Pass instead. Nothing was charged, and no audit exists from that call to quote. So this page does the honest thing: it shows you the tool's contract, what it checks and what it hands back, and invents no sample score. Run the same call on a fresh allowance and the audit itself comes back.

See the pattern first: the live demo runs one real call and hands you its verifiable receipt, no signup.

Published October 16, 2026. Updated October 17, 2026. Written against AER-1, IETF Internet-Draft revision 23: draft-zambo-aer1-23. AER-1 is an IETF Internet-Draft, not a finalized standard.

What the audit checks

Per the tool's own description, one audit covers five areas:

  • SEO gaps: what a search engine cannot read, find, or rank on the page.
  • AI discoverability issues: whether AI answer engines can find, read, and cite the site at all. This is the half most site owners have never seen measured.
  • Conversion leaks: the places a visitor who arrived ready to act gets dropped, stalled, or sent in a circle.
  • Brand-presence gaps: where the site's own story is missing, thin, or contradicted.
  • Competitor intelligence: how the page stands next to the alternatives a buyer will compare it with.

What comes back: a score from 0 to 100, stage findings, an audit ID, a live stream URL while the audit runs, and a report URL for the finished audit. Two companion tools ride along: ghost_audit_status for progress and ghost_audit_report to fetch the report afterwards. And because the audit is a Zambo call, it returns a verifiable receipt like every other call: the report your AI hands you can be checked against the report the tool produced.

Run one, step by step

  1. Connect once. Add https://zambo.dev/mcp to your AI (Claude, ChatGPT, Grok, Cursor, Gemini, VS Code, Windsurf, or any MCP client). One paste, no key, no signup.
  2. Ask for the audit. Tell your AI: audit this site with ghost_audit_site, and give it the full URL, https included.
  3. Read the report, keep the receipt. Work from the report URL and the stage findings. The call's verifiable receipt pins what the tool returned, so a report quoted to you next week can be checked against the audit that actually ran.
  4. Fix and re-run. An audit is a snapshot. Fix the findings that matter, run it again, and compare scores and findings across the two receipts.

The repository side of the same worry, AI-written code with leaked secrets and swallowed errors, is covered in is my vibe-coded app safe. The two audits look at different surfaces: that one reads the code, this one reads the public site.

What an audit cannot tell you

It reads the public page from outside. It cannot see your analytics, your server logs, or anything behind a login, and it does not watch real visitors; the conversion findings are inferences from the page, not measurements of your traffic. A score is a snapshot of one moment, not a ranking promise, and no audit can tell you what a search engine will do next month. The receipt has its own limit, stated plainly: a verifiable receipt shows the saved output of the audit has not changed since it was recorded; it does not prove the findings are right. AER-1 (draft-zambo-aer1-23) has no issuer authentication. Treat the report as a strong, checkable worklist, and verify any finding you are about to spend real money on.

Why this page quotes no score: the only audit call behind it was declined on a used-up free allowance (see the card at the top). Quoting a score anyway would mean inventing one. The tool contract above is quoted from the live tool catalog, read the same day.

Questions, answered

Can my AI audit my website?

Yes. Add the Zambo endpoint (https://zambo.dev/mcp, one paste, no key) to your AI and ask it to run ghost_audit_site on your site's URL. The tool audits the public page and returns SEO gaps, AI discoverability issues, conversion leaks, brand-presence gaps, competitor intelligence, a score from 0 to 100, stage findings, an audit ID, a live stream URL while it runs, and a report URL. The audit call itself returns a verifiable receipt, like every Zambo call.

What does the website audit actually check?

Five areas, per the tool's own description: SEO gaps, AI discoverability issues (whether search engines and AI answer engines can find, read, and cite the site), conversion leaks (where a visitor who arrived ready to act gets dropped), brand-presence gaps, and competitor intelligence. Findings come back staged, with a score from 0 to 100, and the finished report lives at its own URL; ghost_audit_status and ghost_audit_report fetch progress and the report afterwards.

How much does an AI website audit cost?

The tool has a free daily allowance. When the allowance is used up, the tool says so and offers the Day Pass instead: $0.99, one time, for 24 hours, no subscription and no auto-renew, paid by a person with a card through PayPal or by an agent in USDC on Base. An email tied to an active Zambo Pass or Day Pass makes audits unlimited. The Zambo Pass is $29 a month or $290 a year ($19 a month for $ZAMBO holders). On October 16, 2026, the test behind this page hit the used-up allowance and was charged nothing.

Will the audit change anything on my website?

No. The audit inspects the public page you give it and returns findings and a report. It does not edit your site, your DNS, or your listings. Fixing what it finds is the next job, yours or your AI's, and that work can be run through recorded calls too, so each fix carries its own receipt.

How do I know the report my AI hands me is the report the tool produced?

Every Zambo call returns a verifiable receipt for the saved output. A receipt shows the saved result has not changed since it was recorded, so the report in your hand can be checked against the report the tool produced. It does not prove the findings are right, and AER-1, IETF Internet-Draft draft-zambo-aer1-23, has no issuer authentication, so verify any finding you are about to spend money on before you act on it.

Related