Sample Report

“Brimley Hills Family Dental” — visibility & exposure

A fictional Markham dental clinic, audited in the exact format I deliver. Two parts: how visible the business is to AI assistants, and what an outside scan found on the site. Your report would read the same way — different numbers, same plain English.

Part A — AI Visibility Audit

CLIENT: Brimley Hills Family Dental (FICTIONAL) · Markham, ON
CHECKED AGAINST: ChatGPT, Gemini, Copilot, Perplexity · Google
SCOPE: website, Google Business Profile, directories, structured data
METHOD: automated crawl + assistant query panel (25 local-intent questions)

Bottom line: if a Markham resident asks an AI assistant for a family dentist, this business is unlikely to be among the names given. The clinic is fine on old Google (page 1, 41 reviews) and nearly invisible to the new one.

CheckResultDetail
AI crawlers allowedBlockedrobots.txt blocks GPTBot and PerplexityBot — likely inherited from the website builder's default settings.
Structured data (schema.org)MissingNo Dentist or LocalBusiness markup. The site looks like a brochure; assistants can't reliably extract what it offers.
Name / address / phone consistencyWeakPhone on the site ends -18; Google Business Profile ends -14. Assistants treat mismatch as a trust penalty.
Service pages answer questionsWeakServices are photo galleries with one-line captions. “Do you take ODSP?”, “How much is a cleaning?”, “Are you accepting new patients?” — none answered in text.
Reviews used as quotable contentThin41 Google reviews exist; the site quotes none. Assistants lean on sources that quote their own proof.
Assistant query panel0 of 25Of 25 local questions (“best family dentist Markham”, “dentist near me open Saturday”, etc.), the clinic was named 0 times. A competitor 2 km away was named 11 times.
Site speed / mobileOKNo issues. Not the problem here.

The five fixes, in payoff order

  1. Unblock AI crawlers in robots.txt. Ten minutes. The single highest-payoff change on this site, and it's currently blocking the future for free.
  2. Add Dentist structured data. One or two hours. Tells every assistant exactly what the business is, where, and what it does.
  3. Make phone number consistent everywhere. Thirty minutes. Fix the -18/-14 mismatch on the site, GBP, and directories.
  4. Turn service pages into answers. Half a day. Plain text answering insurance accepted, pricing ranges, new-patient status, Saturday hours — the questions the query panel actually asked.
  5. Quote your own reviews on the pages they belong to. One hour. Proof, in your words, where assistants can find it.

What to ignore

You do not need: a blog posting schedule, paid “AI optimization” packages, a chatbot on your website, or new photos. None of those move the 0-of-25 number. Fixes 1–4 do.

Re-measure included: 30 days after fixes go live, the same 25-question panel runs again and you get the before/after. That's how you know it worked instead of taking someone's word for it.

Part B — External Exposure Scan (summary)

CONSENT: written authorization on file before scanning (required, always)
SCOPE: external only — public website and mail domain. No internal network, no password attempts against real accounts.
STATUS: fictional findings for a fictional site — a realistic mix for a website-builder dental site
FindingSeverityWhat it means
WordPress login page exposed with no rate limitingHighAnyone on the internet can guess your admin password as fast as their software can type. This is how small-business sites get defaced.
PHP version past end-of-lifeHighThe software running the site no longer receives security fixes. Known holes stay open.
Old TLS versions (1.0/1.1) still enabledMediumOutdated encryption on the connection to your site. Easy fix, rarely done.
No DMARC/SPF on the business email domainMediumAnyone can send email pretending to be your clinic — to your patients. This is how your patients get phished in your name.
Database admin tool reachable at a guessable URLHighNot open, but findable. Should not be reachable at all.
What was not foundCleanNo open file shares, no exposed patient data, no subdomain surprises. The scary stuff mostly wasn't there.
The no-hostage rule, in practice: this full list — every finding, with fix instructions — goes to the client free, in writing, whether or not they hire me. Fix it with your web person, fix it yourself, or hire me. The information is never the product.
Request this for your business Services & pricing