The Plain Fetch viewer
In short
The viewer requests a URL the way a plain-fetch agent does: no JavaScript, one request for HTML, one for markdown, one for llms.txt and one for a path that should not exist. It shows the initial HTML on the left, the readable text on the right, and seven flags underneath.
Pre-loaded with www.wikipedia.org, read 4 November 2026. Type any public URL to run your own.
The page answers a plain fetch: 4 of 6 checks found.
Initial HTML what a plain fetch receives
<!DOCTYPE HTML>
<html lang="en-US">
<head>
<meta charset="UTF-8">
<meta name="content-type" content="text/html; charset=UTF-8">
<title class="panspeaktitle">Leader in Cybersecurity Protection & Software for the Modern Enterprises - Palo Alto Networks
</title>
[... 2 more head elements folded ...]
<meta class="panspeaksummary" name="description" content="Implement Zero Trust, Secure your Network, Cloud workloads, Hybrid Workforce, Leverage Threat Intelligence & Security Consulting. Cybersecurity Services & [... 118 characters folded ...]>
<meta name="viewport" content="width=device-width, initial-scale=1, user-scalable=yes">
[... 1 more head element folded ...]
<link rel="canonical" href="https://www.paloaltonetworks.com"/>
<link rel="alternate" type="text/markdown" href="https://www.paloaltonetworks.com/index.md" title="Markdown Version"/>
<link rel="describedby" href="https://www.paloaltonetworks.com/llms.txt"/>
[... 22 more head elements folded ...]
<link rel="alternate" hreflang="de-DE" href="https://www.paloaltonetworks.de"/>
<link rel="alternate" hreflang="en-US" href="https://www.paloaltonetworks.com"/>
<link rel="alternate" hreflang="x-default" href="https://www.paloaltonetworks.com"/>
<link rel="alternate" hreflang="en-CA" href="https://www.paloaltonetworks.ca"/>
<link rel="alternate" hreflang="zh-TW" href="https://www.paloaltonetworks.tw"/>
<link rel="alternate" hreflang="pt-BR" href="https://www.paloaltonetworks.com.br"/>
<link rel="alternate" hreflang="ko-KR" href="https://www.paloaltonetworks.co.kr"/>
<link rel="alternate" hreflang="en-IN" href="https://www.paloaltonetworks.in"/>
<link rel="alternate" hreflang="es-ES" href="https://www.paloaltonetworks.es"/>
<link rel="alternate" hreflang="zh-CN" href="https://www.paloaltonetworks.cn"/>
<link rel="alternate" hreflang="es-MX" href="https://www.paloaltonetworks.com.mx"/>
<link rel="alternate" hreflang="it-IT" href="https://www.paloaltonetworks.it"/>
<link rel="alternate" hreflang="es-LA" href="https://www.paloaltonetworks.lat"/>
<link rel="alternate" hreflang="en-AU" href="https://www.paloaltonetworks.com.au"/>
<link rel="alternate" hreflang="en-SG" href="https://www.paloaltonetworks.sg"/>
<link rel="alternate" hreflang="fr-FR" href="https://www.paloaltonetworks.fr"/>
<link rel="alternate" hreflang="ja-JP" href="https://www.paloaltonetworks.jp"/>
<link rel="alternate" hreflang="en-GB" href="https://www.paloaltonetworks.co.uk"/>
[... 30 more head elements folded ...]
</head>
<body class="dynamicAllComponents ">
<div class="panClean pan-template-dynamicAllComponents">
<div class="cleanHeader mainNavigationComp baseComponent parbase">
<div class="pan-page-alert pan-page-alert-black alert-2023 open" nolozad="true">
<div class="container-fluid">
<div class="row justify-content-center">
<div class="col-12">
<div class="glider-prev pan-page-alert-left-arr">
</div>
<div class="glider-contain glider">
<div class="glider-slide"><a href="/ai-security/secure-ai-coding-anthropic-claude" target="_blank" class="content d-flex align-items-center justify-content-center" nav-track="true" nav-track-breadcrumb="nav:topticker:item0:Build what's next with Claude. Secure it with Palo Alto Networks. Discover how." rel="noopener">
<div class="pan-page-alert-text" data-truncate-lines="2" data-sm-truncate-lines="1">Build what's next with Claude. Secure it with Palo Alto Networks. Discover how.
</div></a>
</div>
<div class="glider-slide"><a href="/network-security/advanced-threat-prevention" target="_self" class="content d-flex align-items-center justify-content-center" nav-track="true" nav-track-breadcrumb="nav:topticker:item1:PHP attacks stopped before Day 1 with Frontier Virtual Patching. Start today." rel="noopener">
<div class="pan-page-alert-text" data-truncate-lines="2" data-sm-truncate-lines="1">PHP attacks stopped before Day 1 with Frontier Virtual Patching. Start today.
</div></a>
</div>
</div>
<div class="glider-next pan-page-alert-right-arr">
</div>
</div>
</div>
</div>
</div>
<div class="nav2021Component dark absolute transparent default main-2023-alert " data-type="default" id="PAN_2021_NAV">
<div class="pan-2021-nav initial-nav with-2023-alert"><button class="btn nav-open" aria-label="open mobile navigation" nav-track="true" nav-track-breadcrumb="nav:open nav"></button><a class="mobile-header-logo" href="/" aria-label="Palo Alto Networks" nav-track="true" nav-track-breadcrumb="nav:logo"></a><span class="mobile-header-spacer"></span><button class="btn mobile-search" aria-label="search" nav-track="true" nav-track-breadcrumb="nav:Search"></button>
<nav class="pan-2021-nav-main" aria-label="main">
<div class="mobile-header"><button class="btn nav-close" nav-track="true" nav-track-breadcrumb="nav:close nav" aria-label="close mobile navigation"><img width="24" height="24" data-src="/etc/clientlibs/clean/imgs/x-black.svg" alt="black x icon for closing mobile navigation" class="lozad "/></button><a href="/" class="nav-logo" nav-track="true" nav-track-breadcrumb="nav:logo" aria-label="paloaltonetworks"><img width="120" height="23" src="/etc/clientlibs/clean/imgs/pan-logo-dark.svg" nolozad="true" alt="Palo Alto Networks logo"/></a><button class="btn mobile-search" nav-track="true" nav-track-breadcrumb="nav:Search" aria-label="search"><img width="28" height="28" src="/etc/clientlibs/clean/imgs/search-black.svg" nolozad="true" alt="magnifying glass search icon to open search field"/></button>
</div>
<div class="container-fluid">
<ul class="nav-left" role="menubar" aria-label="left">
<li class="logo link" role="menuitem"><a href="/" nav-track="true" nav-track-breadcrumb="nav:logo" aria-label="Palo Alto Networks"></a>
</li>
<li class=" " role="menuitem"><a href="#" id="nav_products" aria-haspopup="true" aria-expanded="false" nav-track="true" nav-track-breadcrumb="nav:Products" aria-label="Products"><span>Products</span></a>
<div class="mega-dropdown-menu" aria-labelledby="nav_products" data-type="products">
</div>
</li>
<li class=" " role="menuitem"><a href="#" id="nav_solutions" aria-haspopup="true" aria-expanded="false" nav-track="true" nav-track-breadcrumb="nav:Solutions" aria-label="Solutions"><span>Solutions</span></a>
<div class="mega-dropdown-menu" aria-labelledby="nav_solutions" data-type="solutions">
</div>
</li>
<li class=" " role="menuitem"><a href="#" id="nav_services" aria-haspopup="true" aria-expanded="false" nav-track="true" nav-track-breadcrumb="nav:Services" aria-label="Services"><span>Services</span></a>
<div class="mega-dropdown-menu" aria-labelledby="nav_services" data-type="services">
</div>
</li>
<li class=" " role="menuitem"><a href="#" id="nav_industries" aria-haspopup="true" aria-expanded="false" nav-track="true" nav-track-breadcrumb="nav:Industries" aria-label="Industries"><span>Industries</span></a>
<div class="mega-dropdown-menu" aria-labelledby="nav_industries" data-type="industries">
</div>
</li>
<li class=" " role="menuitem"><a href="#" id="nav_partners" aria-haspopup="true" aria-expanded="false" nav-track="true" nav-track-breadcrumb="nav:Partners" aria-label="Partners"><span>Partners</span></a>
<div class="mega-dropdown-menu" aria-labelledby="nav_partners" data-type="partners">
</div>
</li>
<li class=" " role="menuitem"><a href="#" id="nav_resources" aria-haspopup="true" aria-expanded="false" nav-track="true" nav-track-breadcrumb="nav:Resources" aria-label="Resources"><span>Resources</span></a>
<div class="mega-dropdown-menu" aria-labelledby="nav_resources" data-type="resources">
</div>
</li>
</ul>
<ul class="nav-right align-items-center d-flex list-unstyled mb-0" role="list" aria-label="toolbar dynamic interactions">
<li class="search me-3" role="listitem"><a href="#" nav-track="true" nav-track-breadcrumb="nav:Search" aria-label="search" class="d-block"><img width="24" height="24" src="/etc/clientlibs/clean/imgs/search-black.svg" nolozad="true" alt="search magnifying glass"/></a>
</li>
<li class="language-selector dropdown me-3" role="listitem"><a href="#" class="dropdown-toggle d-flex align-items-center text-decoration-none text-light" data-toggle="dropdown" nav-track="true" nav-track-breadcrumb="nav:language" aria-haspopup="true" aria-expanded="false"><span>us</span></a>
<ul class="dropdown-menu dropdown-menu-right" role="menu">
</ul>
</li>
<li class="account dropdown me-3 " role="listitem"><a href="#" class="dropdown-toggle btn btn-outline-dark px-3 py-2 d-flex align-items-center" data-toggle="dropdown" nav-track="true" nav-track-breadcrumb="nav:Accounts & Support" aria-haspopup="true" aria-expanded="false">
Accounts & Support
</a>
<div class="dropdown-menu dropdown-menu-right" style="min-width: 15rem;">
<ul class="list-unstyled" role="menu">
</ul>
<ul class="list-unstyled" role="menu">
</ul>
<div class="dropdown-actions">
</div>
</div>
</li>
<li class="cta-primary-wrapper" role="listitem"><a href="/get-started" target="_self" class="btn btn-primary py-2 px-4" nav-track="true" nav-track-breadcrumb="nav:Demos and Trials" rel="noopener">Demos and Trials</a>
</li>
</ul>
</div>
</nav>
<div class="dropdown-overlay">
</div>
<div class="pan-nav-search">
<div class="cq-dd-paragraph">
<div class="mainParsys parsys">
<div class="coveosearch baseComponent parbase section"><!-- Each DOM element with a class starting with "Coveo" (uppercase) will instantiate a component. Remove padding later while integration-->
<div id="coveosearch" class='CoveoSearchInterface pan-search-coveo' data-results-per-page='4' data-pipeline='WWW Site Search' data-expression='' data-auto-trigger-query="true">
<div class="pan-search-coveo-header">
<div class="container">
<div class="hidden-xs logo-placeholder">
</div><span class="visible-lg visible-md searchtext">Search</span><span class="searchIconHeader hidden">
<svg version="1.1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" x="0px" y="0px" viewBox="0 0 17 17" style="enable-background:new 0 0 17 17;" xml:space="preserve" aria-hidden="true">[... 140 characters folded ...]
</svg></span>
<div class="coveo-container">
<div class="dropdown"><button class="btn btn-default dropdown-toggle" type="button" id="dropdownMenu1" data-toggle="dropdown" aria-haspopup="true" aria-expanded="true">
All
<span class="caretnew">
<svg width="11" height="7" viewBox="0 0 11 7" fill="none" xmlns="http://www.w3.org/2000/svg" aria-hidden="true"><path d="M1 1L5.5 5.5L10 1" stroke="black" stroke-width="2" stroke-linecap="round" stroke-linejoin="round"/>
</svg></span></button>
<ul class="dropdown-menu" aria-labelledby="dropdownMenu1">
<li><a href="https://docs.paloaltonetworks.com/search" id="tech-docs" rel="nofollow" data-page-track="true" data-page-track-value=":en_us: section:">Tech Docs</a>
</li>
Shown with 61 long blocks (scripts, styles, long tags) folded into a marker that says how many characters they hide; line breaks added before block tags because the source is minified; the pane stops after the first 200 words; the page is 615 KB.
Reading view the text a plain-fetch client can extract
title: Leader in Cybersecurity Protection & Software for the Modern Enterprises - Palo Alto Networks
Ask. Remediate. Optimize.
Build what's next with Claude. Secure it with Palo Alto Networks. Discover how. PHP attacks stopped before Day 1 with Frontier Virtual Patching. Start today. Products Solutions Services Industries Partners Resources us Accounts & Support Demos and Trials Search All Tech Docs CORTEX XCOR Ask. Remediate. Optimize. Meet the next-generation, AI-driven observability platform. Explore Cortex XCOR Read the blog RECOMMENDED Idira: 8x a PAM Leader. 8x Furthest in Vision. See why Close your PHP exposure gap with Frontier Virtual Patching Protect yourself Secure AI coding across your enterprise Explore the solution Introducing Unit 42 Continuous Frontier AI Defense Register for threat briefing Palo Alto Networks Recognized as a Market Shaper Read Gartner® report A 2x Leader in Magic Quadrant™ for Hybrid Mesh Firewall Read report The future of Frontier AI network security Watch now A 4X Gartner Leader in Security Service Edge Read report A 4X Gartner® Magic Quadrant™ Leader for SASE Platforms Read report So you can defend at</span> speed and scale." data-title-tag="h2" data-title-size="h2"> Why Palo Alto Networks?PlatformsSolutionsProven SuccessEngage with Us Why Palo Alto Networks? Platforms Solutions Proven Success Engage with Us Demos and trials Your browser does not support HTML5 video. A new AI world is here THE
1750 more words follow in the initial HTML.
| Check | Result | Detail |
|---|---|---|
| H1 in the initial HTML | Found one H1 | First H1: Ask. Remediate. Optimize. |
| First 200 words in the initial HTML | Found 200 of 200 words | The initial HTML carries 1950 words of visible text; the first 200 are marked in the left pane. |
| llms.txt present and linked | Found present and linked | 17903 bytes, 115 links. Structure grade A (6 of 6). The home page links it, which is how agents reached it in Ora's lab. |
| Markdown on request | Missing 200 text/html | Accept: text/markdown returned 200 with text/html;charset=utf-8. The server ignores the header. |
| Status of a made-up path | Found 404 | /agent-ready-html-missing-path-check returned 404: a real status code for a missing page. |
| JSON-LD types | Missing none | No JSON-LD block on the home page. Ora's lab found it made no difference when the answer was already in the HTML; Google says it is not needed for AI features. |
| OpenAPI link | Note none on the home page | No OpenAPI link on the home page. It matters only for a site that ships an API. |
Run the full check
The viewer read one page with four requests. The full check we recommend next is Ora's scan. Its Access layer runs 42 checks worth 30 of its 100 points, among them content without JavaScript, bot detection, llms.txt, markdown on request, JSON-LD and the sitemap (Ora's check catalogue, contract 1.38.0, read 5 November 2026). Open Ora's report for paloaltonetworks.com.
Limits: Ora reads public URLs only, says two runs of one scan land within a couple of points without publishing repeat-scan data, and keeps the product that fixes what it finds behind a waitlist. Cloudflare's scanner at isitagentready.com is a quick free alternative, and Mintlify's score covers documentation.
What the viewer does
It sends four plain GET requests with the user agent Mozilla/5.0 (compatible; agent-readiness-crawl/1.0): the URL itself, the same URL with Accept: text/markdown, /llms.txt on the same host, and a made-up path at the root. It runs no JavaScript. The left pane is the first bytes of the HTML as text, with long scripts and styles folded into a marker that says how many characters they hide. The H1 and the first 200 words of visible text are marked in both panes. The flags under the panes say what the four responses added up to.
Limits
- Ten seconds for all four requests together, 1.5 MB read from the home page, at most five redirects, each one checked again.
- http and https only, default ports only. Private, local and internal addresses and names are refused.
- Ten runs per address per minute. The counter lives in memory on the edge function, so it is per instance rather than global. Past ten you get a 429 with a Retry-After header.
- Results are cached for 24 hours by the response headers. Nothing is written to a database: the viewer keeps the first 200 words and the extracted fields for the length of the request and keeps no page body beyond that.
What it does not tell you
A plain fetch from this server is not a real agent. Bot protection weighs the source address more than the user agent, so a page that answers 200 here can still refuse an agent, and the reverse. Ora's lab found (2026-10-19) that returning 403 to agent user agents and hiding the answer in JavaScript were the only two of 19 configurations that stopped retrieval; the viewer can see the second, and can only hint at the first. The initial HTML reference covers both. The server logs and the published crawler address ranges settle the first.
The seven flags
- H1 in the initial HTML
- Whether the HTML the server sends already contains an H1. It is the cheapest sign that the page does not depend on scripts to say what it is.
- First 200 words in the initial HTML
- Whether at least 200 words of visible text arrive in the initial HTML. Under 40 words with an app root element is flagged as a JavaScript shell.
- llms.txt present and linked
- Whether /llms.txt answers with a plain-text file, whether the home page links it (an anchor, a link element or a Link header), and the structure grade the index uses.
- Markdown on request
- Whether a request with Accept: text/markdown comes back as text/markdown. Cloudflare Radar found 3.9 percent of scanned top sites passing this at its April 2026 launch.
- Status of a made-up path
- Whether a path that should not exist returns 404 or 410. A 200 is a soft 404 and reads as a live page.
- JSON-LD types
- The schema.org types found in JSON-LD blocks on the page. Ora's lab found JSON-LD made no difference when the answer was already in the HTML.
- OpenAPI link
- Whether the page links an OpenAPI file, by an anchor or a service-desc link relation. It matters only for a site that ships an API.
Sources
- Ora: AgentReady launch post (Ora's lab findings) https://ora.ai/blog/agentready-launch, read 4 November 2026
- Ora check catalogue, contract 1.38.0 (132 checks, 42 in the Access layer) https://ora.ai/api/checks, read 5 November 2026
- Ora home page (the fixing product is behind a waitlist) https://ora.ai/, read 5 November 2026
- Ora: Introducing Deep Scan (repeat scans) https://ora.ai/blog/introducing-deep-scan, read 5 November 2026
- Ora llms.txt (public URLs only) https://ora.ai/llms.txt, read 5 November 2026
- Vercel: Make your site readable by AI agents https://vercel.com/kb/guide/make-your-site-readable-by-ai-agents, read 4 November 2026
- llms.txt proposal (llmstxt.org) https://llmstxt.org/, read 4 November 2026
Last reviewed 5 November 2026