About our audit tool
For website owners · Last updated: 2 November 2026
If you saw VisibilityReadinessAudit in your server logs, it was our tool. This page explains what it did and how to stop it.
What it is
Visibility Readiness checks whether search engines, AI tools and AI agents can reach and understand a website. Someone ran an audit of your site, usually the site's owner, their developer or their agency. Our terms allow audits only of sites the person owns or is allowed to check.
What it does
- Reads only public pages, the same ones any visitor or search engine sees: the homepage, a sample of up to 15 key pages, robots.txt, sitemaps and llms.txt.
- Requests a few made-up addresses to check that your site answers "not found" properly.
- May open a few pages in a headless browser to see them as a visitor's browser would. The page then loads its own scripts and images, as it would for any visitor.
- Makes a limited number of requests per audit (usually under 100), with a short pause between each.
- Identifies itself on every request as
VisibilityReadinessAudit/0.7 (read-only public-page audit; +https://vendorlens.in/bot).
What it never does
- Sign in, create accounts or use passwords.
- Submit forms, add to carts, book or pay.
- Change, upload or delete anything.
- Access code, databases, hosting or website-builder accounts, or pages behind a login.
We also limit how often any one site can be audited by all our customers in a day.
How to opt out
Add this to your robots.txt and our tool will not audit your site. The person who asked for the audit is told that the site has opted out, and is not charged.
User-agent: VisibilityReadinessAudit Disallow: /
Rules for all bots (User-agent: *) don't stop the audit, because whether search engines and AI tools can reach your site is exactly what it reports on. Only a rule that names our tool does.
You can also email hello@vendorlens.in from an address at your domain, and we'll add your site to our do-not-audit list.
Questions or concerns
Email hello@vendorlens.in with your site's address and the time you saw the visit. We keep a short security log for 30 days (site address, a scrambled code for the customer's key, and the time), so we can look into it and stop misuse. We don't share our customers' identities, but we will act on misuse. See the privacy policy.