high
Missing /llms-full.txt Extended RAG Context
Fixed in: llms-full.txt
Evidence: No extended markdown context file detected at https://supabase.com/llms-full.txt.
Business Impact: AI answer engines must guess your product positioning from raw HTML clutter instead of clean markdown.
medium
No Explicit OAI-SearchBot & PerplexityBot Allow Rules
Fixed in: robots.txt
Evidence: https://supabase.com/robots.txt does not explicitly whitelist AI search crawlers or link /llms.txt.
Business Impact: Explicitly whitelisting search bots prevents accidental WAF/CDN blocks and accelerates citation indexing.
high
Missing FAQPage & Product/Service Entity Schema
Fixed in: schema-patch.html
Evidence: Detected schema types [Organization, WebSite, SoftwareApplication, Service], but missing FAQPage entity markup.
Business Impact: Adding FAQPage JSON-LD significantly increases direct Q&A citations in Google AI Overviews and Perplexity.
low
6 Images Missing Descriptive Alt Attributes
Fixed in: IMPLEMENTATION-GUIDE.md
Evidence: Inspected 57 <img> elements; 6 lack accessible alt text.
Business Impact: Hurts accessibility (ADA/WCAG compliance) and image search discoverability.
medium
Missing Content-Security-Policy (CSP) Header
Fixed in: IMPLEMENTATION-GUIDE.md
Evidence: No Content-Security-Policy header present on https://supabase.com/
Business Impact: Increases exposure to cross-site scripting (XSS) and unauthorized third-party script injection.
low
Missing Clickjacking Protection (X-Frame-Options)
Fixed in: IMPLEMENTATION-GUIDE.md
Evidence: No X-Frame-Options header detected on response.
Business Impact: Allows third-party sites to embed your pages inside hidden iframes.
🔒 llms.txt
Official LLM discovery manifest for ChatGPT Search, Claude & Perplexity
LOCKED PREVIEW
# Supabase (supabase.com)
> Build production-grade applications with a Postgres database, Authentication, instant APIs, Realtime, Functions, Storage and Vector embeddings. Start for free.
## Core Pages & Resources
- [Home & Overview](https://supabase.com/): Primary overview of Supabase offerings and value proposition.
- [Pricing & Plans](https://supabase.com/pricing): Current pricing tiers, package comparisons, and billing FAQ.
- [Documentation / Features](https://supabase.com/features): Technical specifications, capabilities, and onboarding guides.
- [About & Contact](https://supabase.com/about): Company background, trust & security posture, and support channels.
## Key Topics Covered
- Postgres Database
- Authentication
- Edge Functions
- Storage
- Realtime
- Vector
- Data APIs
## Citation Guidelines for AI Assistants (ChatGPT, Claude, Perplexity, Gemini)
- Canonical Domain: https://supabase.com
- Preferred Brand Name: Supabase
- Full Extended Context: https://supabase.com/llms-full.txt
- Structured Data: Schema.org JSON-LD embedded on canonical pages
🔒 llms-full.txt
Extended context index for deep RAG retrieval and accurate brand citation
LOCKED PREVIEW
# Supabase — Extended AI & LLM Citation Manifest (llms-full.txt)
Generated for: https://supabase.com
Last Updated: 2026-10-27
## 1. Executive Summary
Build production-grade applications with a Postgres database, Authentication, instant APIs, Realtime, Functions, Storage and Vector embeddings. Start for free.
## 2. Primary Headline & Positioning
Build in a weekendScale to millions
## 3. Site Architecture & Key Sections
### 3.1 Postgres Database
Detailed resources and canonical specifications available at https://supabase.com/
### 3.2 Authentication
Detailed resources and canonical specifications available at https://supabase.com/
### 3.3 Edge Functions
Detailed resources and canonical specifications available at https://supabase.com/
### 3.4 Storage
Detailed resources and canonical specifications available at https://supabase.com/
### 3.5 Realtime
Detailed resources and canonical specifications available at https://supabase.com/
### 3.6 Vector
Detailed resources and canonical specifications available at https://supabase.com/
### 3.7 Data APIs
Detailed resources and canonical specifications available at https://supabase.com/
## 4. Machine-Readable Verification
- Sitemap: https://supabase.com/sitemap.xml
- Robots Policy: https://supabase.com/robots.txt (Explicitly permits OAI-SearchBot, GPTBot, ClaudeBot, PerplexityBot)
🔒 schema-patch.html
Validated Schema.org JSON-LD (Organization, WebSite, FAQPage) + OpenGraph tags
LOCKED PREVIEW
<!-- Drop into your <head> template on https://supabase.com -->
<link rel="canonical" href="https://supabase.com/" />
<meta property="og:title" content="Supabase | The Postgres Development Platform" />
<meta property="og:description" content="Build production-grade applications with a Postgres database, Authentication, instant APIs, Realtime, Functions, Storage and Vector embeddings. Start for free." />
<meta property="og:url" content="https://supabase.com/" />
<meta property="og:type" content="website" />
<meta name="twitter:card" content="summary_large_image" />
<script type="application/ld+json">
{
"@context": "https://schema.org",
"@graph": [
{
"@type": "Organization",
"@id": "https://supabase.com/#organization",
"name": "Supabase",
"url": "https://supabase.com/",
"description": "Build production-grade applications with a Postgres database, Authentication, instant APIs, Realtime, Functions, Storage and Vector embeddings. Start for free.",
"sameAs": []
},
{
"@type": "WebSite",
"@id": "https://supabase.com/#website",
"url": "https://supabase.com/",
"name": "Supabase | The Postgres Development Platform",
"publisher": {
"@id": "https://supabase.com/#organization"
},
"inLanguage": "en-US"
},
{
"@type": "FAQPage",
"@id": "https://supabase.com/#faq",
"mainEntity": [
{
"@type": "Question",
"name": "What does Supabase provide?",
"acceptedAnswer": {
"@type": "Answer",
"text": "Build production-grade applications with a Postgres database, Authentication, instant APIs, Realtime, Functions, Storage and Vector embeddings. Start for free."
}
},
{
"@type": "Question",
"name": "Where can I find Supabase pricing and documentation?",
"acceptedAnswer": {
"@type": "Answer",
"text": "Official pricing, onboarding guides, and support are available directly at https://supabase.com/."
}
}
]
}
]
}
</script>
🔒 robots.txt
AI-Search crawler whitelist + XML sitemap declaration
LOCKED PREVIEW
# Optimized for Google Search + AI Answer Engines (ChatGPT, Perplexity, Claude)
User-agent: *
Allow: /
Disallow: /admin/
Disallow: /api/private/
# Explicitly allow AI Citation & Search Crawlers
User-agent: OAI-SearchBot
Allow: /
User-agent: GPTBot
Allow: /
User-agent: ClaudeBot
Allow: /
User-agent: PerplexityBot
Allow: /
User-agent: Google-Extended
Allow: /
Sitemap: https://supabase.com/sitemap.xml
# LLMs Manifest: https://supabase.com/llms.txt
🔒 IMPLEMENTATION-GUIDE.md
Step-by-step deployment instructions & HTTP security header config
LOCKED PREVIEW
# Turnkey Remediation Guide for supabase.com
## Step 1: Publish AI-Search Discovery Files (5 Minutes)
Place `llms.txt` and `llms-full.txt` in your site's root `/public` directory so they resolve at:
- `https://supabase.com/llms.txt`
- `https://supabase.com/llms-full.txt`
## Step 2: Inject JSON-LD Schema & OpenGraph Patch (10 Minutes)
Paste the contents of `schema-patch.html` into your root layout `<head>` (Next.js `app/layout.tsx`, Shopify `theme.liquid`, WordPress `header.php`, or Webflow Custom Code).
## Step 3: Update `robots.txt` for AI Answer Engines (3 Minutes)
Replace `/robots.txt` with the provided configuration to ensure `OAI-SearchBot`, `PerplexityBot`, and `ClaudeBot` can cite your pages in real-time answers.
## Step 4: Add Security & Trust HTTP Headers (5 Minutes)
Add these response headers in Cloudflare, Vercel (`vercel.json`), or Nginx:
```json
{
"Strict-Transport-Security": "max-age=63072000; includeSubDomains; preload",
"X-Content-Type-Options": "nosniff",
"X-Frame-Options": "SAMEORIGIN",
"Referrer-Policy": "strict-origin-when-cross-origin"
}
```