What each verdict means — pass, warn, fail, blocked

# What each verdict means Findings use a small, honest set of statuses. We'd rather tell you "we couldn't check this" than score you on a guess. ## pass The check ran and your site is doing the right thing. Nothing to act on. ## warn Not broken, but worth fixing — a recommended-but-missing header, a soft SEO issue, a cookie without a hardening flag. Safe to ship; better to address. ## fail The check ran and found a real problem (a form posting over plain HTTP, an auth token in a URL, mixed content). These come with an AI fix prompt — start here. ## inconclusive We couldn't get a reliable answer — usually because the page needed login, the relevant page wasn't reachable in the walk, or the site changed mid-scan. It's **not** counted against your score. ## blocked A firewall / WAF / bot-protection vendor stopped our walker before we could see enough. You get a **partial report** plus a short allowlist note (our walker's identity is published at `/bots`). Allowlist us and re-test free — a blocked scan is about *their* gate, not your site's quality, so we never fail you for it. ## How statuses roll up An area's score reflects its findings; the headline score rolls up the areas. A single security **fail** weighs more than a cosmetic SEO **warn** — security problems are the ones that actually hurt users.