45% of people now use AI assistants to find local businesses. ChatGPT recommends just 1.2% of them. Antileak fetches your homepage exactly the way GPTBot, ClaudeBot and PerplexityBot do — raw HTML, no JavaScript — and tells you what they don't get.
Sample output. Scan your own domain above for your own numbers.
GPTBot, ClaudeBot and PerplexityBot fetch your page — then stop. They never execute the scripts that load your hours, your menu, your prices, your booking link. Your site can rank perfectly on Google and still be a blank page to an AI assistant, because Google renders JavaScript and these crawlers do not. (Google's Gemini is the one exception; it reads through Google's renderer.)
An illustration of a client-rendered site, not your site. Your scan reports your own homepage's actual numbers.
The free scan fetches your homepage the way an AI crawler does — the raw HTML, with no JavaScript executed — and reads your robots.txt and your public DNS records. Everything below is a statement about what those requests actually returned. Nothing is estimated, and nothing is compared against an industry average.
We measure how much readable text is in your HTML before any JavaScript runs, and whether your phone number, address and opening hours are in it. If the page is an empty shell that JavaScript fills in, we can see that in the markup and we say so.
Plenty of sites block GPTBot, ClaudeBot or PerplexityBot by accident in robots.txt. We parse yours the way the crawlers do — including which rules override which — and name the ones that are shut out.
Empty LocalBusiness markup is close to no markup at all. We read your JSON-LD and report which of the fields AI answers are built from — name, address, telephone, opening hours, geo, price range — actually carry a value.
Whether the homepage is served over HTTPS, sets a mobile viewport, and has a title, meta description and H1. Plus how fast it answered, and how many of the links on it are broken.
We look up your domain's public DNS records. Without DMARC anyone can send email that appears to come from you, and your own mail is likelier to land in spam — the one security check with a hard commercial deadline behind it.
It does not render your page in a browser, so it can't tell you what appears after JavaScript runs — only what's missing before. It doesn't cross-check your details against Google or directories, read your certificate's expiry date, or look at trackers and consent. When those land we'll list them here; until then we don't charge for them or claim them.
No account, no card. Just your address, and a straight answer about whether AI can see you.
Scan my site free