Verified purchaser
Found real issues I had missed
I ran a scan on my site through MCP from my AI assistant: start it, poll the status, read the report. The report sorts findings by severity. Medium were a DMARC policy still on “none” and a missing X-Frame-Options header. Low ones included missing DNSSEC, COOP and CORP headers, and HSTS without includeSubDomains and preload. It also flagged a missing og:image on two pages, no structured data on my article index, no llms.txt, no terms of use and no accessibility statement.
Each finding names the affected URL, so I could check it against my source before changing anything. I’m fixing them now and will post the rescan result here. DNSSEC has to wait for me.
jacobperks
Oct 21, 2026Thanks so much, KimchiDee! Really glad VAS caught issues you’d missed and that scanning through your AI assistant worked well.
Making each finding easy to check against your own source is a big priority, so I really appreciate you highlighting the affected URLs and evidence.
I’d love to hear how the rescan goes once you’ve made your changes. If anything is unclear, or you have feature requests for the MCP workflow, please let me know.
Thanks again for the detailed review and five tacos!
Jacob