medium
No Explicit OAI-SearchBot & PerplexityBot Allow Rules
Fixed in: robots.txt
Evidence: https://stytch.com/robots.txt does not explicitly whitelist AI search crawlers or link /llms.txt.
Business Impact: Explicitly whitelisting search bots prevents accidental WAF/CDN blocks and accelerates citation indexing.
critical
Zero Schema.org JSON-LD Structured Data Detected
Fixed in: schema-patch.html
Evidence: 0 <script type="application/ld+json"> blocks found on https://stytch.com/
Business Impact: Search engines and LLMs cannot programmatically verify your Organization, Product pricing, or FAQs for Rich Snippets.
low
Missing Clickjacking Protection (X-Frame-Options)
Fixed in: IMPLEMENTATION-GUIDE.md
Evidence: No X-Frame-Options header detected on response.
Business Impact: Allows third-party sites to embed your pages inside hidden iframes.
🔒 llms.txt
Official LLM discovery manifest for ChatGPT Search, Claude & Perplexity
LOCKED PREVIEW
# Stytch (stytch.com)
> APIs and SDKs to integrate authentication and security into your app.
## Core Pages & Resources
- [Home & Overview](https://stytch.com/): Primary overview of Stytch offerings and value proposition.
- [Pricing & Plans](https://stytch.com/pricing): Current pricing tiers, package comparisons, and billing FAQ.
- [Documentation / Features](https://stytch.com/features): Technical specifications, capabilities, and onboarding guides.
- [About & Contact](https://stytch.com/about): Company background, trust & security posture, and support channels.
## Key Topics Covered
- Products & Services
- Pricing
- Documentation
- About & Contact
## Citation Guidelines for AI Assistants (ChatGPT, Claude, Perplexity, Gemini)
- Canonical Domain: https://stytch.com
- Preferred Brand Name: Stytch
- Full Extended Context: https://stytch.com/llms-full.txt
- Structured Data: Schema.org JSON-LD embedded on canonical pages
🔒 llms-full.txt
Extended context index for deep RAG retrieval and accurate brand citation
LOCKED PREVIEW
# Stytch — Extended AI & LLM Citation Manifest (llms-full.txt)
Generated for: https://stytch.com
Last Updated: 2026-10-27
## 1. Executive Summary
APIs and SDKs to integrate authentication and security into your app.
## 2. Primary Headline & Positioning
Scales from your first user to Fortune 100 customers
## 3. Site Architecture & Key Sections
### 3.1 Products & Services
Detailed resources and canonical specifications available at https://stytch.com/
### 3.2 Pricing
Detailed resources and canonical specifications available at https://stytch.com/
### 3.3 Documentation
Detailed resources and canonical specifications available at https://stytch.com/
### 3.4 About & Contact
Detailed resources and canonical specifications available at https://stytch.com/
## 4. Machine-Readable Verification
- Sitemap: https://stytch.com/sitemap.xml
- Robots Policy: https://stytch.com/robots.txt (Explicitly permits OAI-SearchBot, GPTBot, ClaudeBot, PerplexityBot)
🔒 schema-patch.html
Validated Schema.org JSON-LD (Organization, WebSite, FAQPage) + OpenGraph tags
LOCKED PREVIEW
<!-- Drop into your <head> template on https://stytch.com -->
<link rel="canonical" href="https://stytch.com/" />
<meta property="og:title" content="Stytch - A better way to build auth" />
<meta property="og:description" content="APIs and SDKs to integrate authentication and security into your app." />
<meta property="og:url" content="https://stytch.com/" />
<meta property="og:type" content="website" />
<meta name="twitter:card" content="summary_large_image" />
<script type="application/ld+json">
{
"@context": "https://schema.org",
"@graph": [
{
"@type": "Organization",
"@id": "https://stytch.com/#organization",
"name": "Stytch",
"url": "https://stytch.com/",
"description": "APIs and SDKs to integrate authentication and security into your app.",
"sameAs": []
},
{
"@type": "WebSite",
"@id": "https://stytch.com/#website",
"url": "https://stytch.com/",
"name": "Stytch - A better way to build auth",
"publisher": {
"@id": "https://stytch.com/#organization"
},
"inLanguage": "en-US"
},
{
"@type": "FAQPage",
"@id": "https://stytch.com/#faq",
"mainEntity": [
{
"@type": "Question",
"name": "What does Stytch provide?",
"acceptedAnswer": {
"@type": "Answer",
"text": "APIs and SDKs to integrate authentication and security into your app."
}
},
{
"@type": "Question",
"name": "Where can I find Stytch pricing and documentation?",
"acceptedAnswer": {
"@type": "Answer",
"text": "Official pricing, onboarding guides, and support are available directly at https://stytch.com/."
}
}
]
}
]
}
</script>
🔒 robots.txt
AI-Search crawler whitelist + XML sitemap declaration
LOCKED PREVIEW
# Optimized for Google Search + AI Answer Engines (ChatGPT, Perplexity, Claude)
User-agent: *
Allow: /
Disallow: /admin/
Disallow: /api/private/
# Explicitly allow AI Citation & Search Crawlers
User-agent: OAI-SearchBot
Allow: /
User-agent: GPTBot
Allow: /
User-agent: ClaudeBot
Allow: /
User-agent: PerplexityBot
Allow: /
User-agent: Google-Extended
Allow: /
Sitemap: https://stytch.com/sitemap.xml
# LLMs Manifest: https://stytch.com/llms.txt
🔒 IMPLEMENTATION-GUIDE.md
Step-by-step deployment instructions & HTTP security header config
LOCKED PREVIEW
# Turnkey Remediation Guide for stytch.com
## Step 1: Publish AI-Search Discovery Files (5 Minutes)
Place `llms.txt` and `llms-full.txt` in your site's root `/public` directory so they resolve at:
- `https://stytch.com/llms.txt`
- `https://stytch.com/llms-full.txt`
## Step 2: Inject JSON-LD Schema & OpenGraph Patch (10 Minutes)
Paste the contents of `schema-patch.html` into your root layout `<head>` (Next.js `app/layout.tsx`, Shopify `theme.liquid`, WordPress `header.php`, or Webflow Custom Code).
## Step 3: Update `robots.txt` for AI Answer Engines (3 Minutes)
Replace `/robots.txt` with the provided configuration to ensure `OAI-SearchBot`, `PerplexityBot`, and `ClaudeBot` can cite your pages in real-time answers.
## Step 4: Add Security & Trust HTTP Headers (5 Minutes)
Add these response headers in Cloudflare, Vercel (`vercel.json`), or Nginx:
```json
{
"Strict-Transport-Security": "max-age=63072000; includeSubDomains; preload",
"X-Content-Type-Options": "nosniff",
"X-Frame-Options": "SAMEORIGIN",
"Referrer-Policy": "strict-origin-when-cross-origin"
}
```