The Plain Fetch viewer
In short
The viewer requests a URL the way a plain-fetch agent does: no JavaScript, one request for HTML, one for markdown, one for llms.txt and one for a path that should not exist. It shows the initial HTML on the left, the readable text on the right, and seven flags underneath.
Pre-loaded with www.wikipedia.org, read 4 November 2026. Type any public URL to run your own.
The page answers a plain fetch: 4 of 6 checks found.
Initial HTML what a plain fetch receives
<!DOCTYPE html><!-- Last Published: Fri Nov 06 2026 18:17:55 GMT+0000 (Coordinated Universal Time) -->
<html data-wf-domain="www.threatlocker.com" data-wf-page="6acfe3cdf66b82268bc8d713" data-wf-site="6356c441ce34029b327802bf" data-wf-intellimize-customer-id="117995822" lang="en-US">
<head>
<meta charset="utf-8"/>
[... 1 more head element folded ...]
<title>Enterprise Cybersecurity Solutions | ThreatLocker
</title>
<meta content="A Zero Trust cybersecurity solutions platform, ThreatLocker delivers world-class enterprise security software and solutions worldwide." name="description"/>
[... 8 more head elements folded ...]
<meta content="width=device-width, initial-scale=1" name="viewport"/>
[... 11 more head elements folded ...]
<link href="https://www.threatlocker.com" rel="canonical"/>
[... 47 more head elements folded ...]
</head>
<body class="homepage-2026-body">
<div id="top-bar" class="top-bar_section">
<div class="top-bar_contact-container w-container">
<div class="top-bar-contact-header-div"><a data-wf-native-id-path="87276cbf-2f90-f0d9-91d0-338fa810bd7b" data-wf-ao-click-engagement-tracking="true" data-wf-element-id="87276cbf-2f90-f0d9-91d0-338fa810bd7b" href="/company/contact-us" class="navbar_contact-links-block w-inline-block">
<div class="text-base font-weight-600">Contact us
</div></a><a data-wf-native-id-path="87276cbf-2f90-f0d9-91d0-338fa810bd7e" data-wf-ao-click-engagement-tracking="true" data-wf-element-id="87276cbf-2f90-f0d9-91d0-338fa810bd7e" href="tel:833-292-7732" class="navbar_contact-links-block navbar_contact-link w-inline-block">
<div class="text-base font-weight-600">833-292-7732
</div></a><a rel="noopener noreferrer" data-wf-native-id-path="87276cbf-2f90-f0d9-91d0-338fa810bd81" data-wf-ao-click-engagement-tracking="true" data-wf-element-id="87276cbf-2f90-f0d9-91d0-338fa810bd81" href="https://portal.threatlocker.com/" target="_blank" class="top-bar_portal-login-link w-inline-block">
<div class="text-base font-weight-600">Client portal login
</div></a>
</div>
</div>
</div>
<div data-w-id="900c0de8-ea5a-c9b5-2f7d-cc6e62439bfa" data-animation="default" data-collapse="medium" data-duration="500" data-easing="ease" data-easing2="ease" role="banner" class="navbar_menu-logo-left new-nav w-nav">
<div class="navbar__wrapper new-nav">
<div class="navbar__container-2 nav-2026"><a data-wf-native-id-path="c061821d-b047-e0d2-e806-54d1fe4a5f29:7e3f9625-4e41-7193-df57-fb7f6502b3e7" data-wf-ao-click-engagement-tracking="true" data-wf-element-id="7e3f9625-4e41-7193-df57-fb7f6502b3e7" data-wf-componen [... 214 characters folded ...]>
<div><img src="https://cdn.prod.website-files.com/6356c441ce34029b327802bf/63eebaf42d2925e34203e31a_logo-white.svg" loading="lazy" width="3507" height="318" alt="ThreatLocker Zero Trust Platform logo" class="navbar_logo-image nav-2026"/>
</div></a>
<nav role="navigation" class="nav-menu_container nav-2026 w-nav-menu">
<ul role="list" class="navmenu__link-list-3 nav-2026 w-list-unstyled">
<li class="link-list_list-item cc-first nav-2026">
<div data-hover="true" data-delay="0" data-w-id="900c0de8-ea5a-c9b5-2f7d-cc6e62439c02" class="navmenu_link-list-dropdown-wrapper nav-2026 w-dropdown">
<div data-wf-native-id-path="c061821d-b047-e0d2-e806-54d1fe4a5f29:900c0de8-ea5a-c9b5-2f7d-cc6e62439c03" data-wf-ao-click-engagement-tracking="true" data-wf-element-id="900c0de8-ea5a-c9b5-2f7d-cc6e62439c03" data-wf-compon [... 214 characters folded ...]><a data-wf-native-id-path="c061821d-b047-e0d2-e806-54d1fe4a5f29:900c0de8-ea5a-c9b5-2f7d-cc6e62439c04" data-wf-ao-click-engagement-tracking="true" data-wf-element-id="900c0de8-ea5a-c9b5-2f7d-cc6e62439c04" data-wf-componen [... 207 characters folded ...]>
<div class="text-block-153 nav-2026">Why ThreatLocker
</div></a>
<div class="link-list_dropdown-icon nav-2026 w-embed">
<svg xmlns="http://www.w3.org/2000/svg" width="12" height="12" viewBox="0 0 12 12">[... 300 characters folded ...]
</svg>
</div>
</div>
<nav class="navmenu_dropdown nav-2026 w-dropdown-list">
<div class="navmenu_dropdown-grid nav2026">
<div id="w-node-_900c0de8-ea5a-c9b5-2f7d-cc6e62439c0a-62439bfa" class="navmenu_container-dropdown navmenu_container-mobile-section nav-2026">
<div class="navmenu_dropdown-left nav-2026">
<div class="navbar_dropdown-button-div is-platform nav-2026"><a data-wf-native-id-path="c061821d-b047-e0d2-e806-54d1fe4a5f29:900c0de8-ea5a-c9b5-2f7d-cc6e62439c0d" data-wf-ao-click-engagement-tracking="true" data-wf-element-id="900c0de8-ea5a-c9b5-2f7d-cc6e62439c0d" data-wf-componen [... 208 characters folded ...]>ThreatLocker® Platform <span class="fa-icon is-navbar"></span></a>
</div>
<ul role="list" class="navmenu_dropdown-list nav-2026 w-list-unstyled">
<li class="navmenu_dropdown-section nav-2026"><a data-wf-native-id-path="c061821d-b047-e0d2-e806-54d1fe4a5f29:900c0de8-ea5a-c9b5-2f7d-cc6e62439c2c" data-wf-ao-click-engagement-tracking="true" data-wf-element-id="900c0de8-ea5a-c9b5-2f7d-cc6e62439c2c" data-wf-componen [... 248 characters folded ...]>
<div class="navmenu_dropdown-section-link-heading">ThreatLocker® Platform
</div>
<div class="fa-icon">
</div></a>
<div class="navmenu_dropdown-section-heading is-middle-section-title nav-2026">WHY ThreatLocker
</div>
<ul role="list" class="navmenu__dropdown-section-list nav-2026 w-list-unstyled">
<li class="navmenu__dropdown-section-list-item nav-2026"><a data-wf-native-id-path="c061821d-b047-e0d2-e806-54d1fe4a5f29:900c0de8-ea5a-c9b5-2f7d-cc6e62439c35" data-wf-ao-click-engagement-tracking="true" data-wf-element-id="900c0de8-ea5a-c9b5-2f7d-cc6e62439c35" data-wf-componen [... 239 characters folded ...]>
<div class="icon-column"><img src="https://cdn.prod.website-files.com/6356c441ce34029b327802bf/6aa3fed9dcd3a747829f5ccd_ThreatLocker_Nav%20Icons_Why%20ThreatLocker_Your%20Advantage.svg" loading="lazy" alt=""/>
</div>
<div>
<div class="navmenu_dropdown-section-link-heading nav-2026">Your ThreatLocker advantage
</div>
</div></a>
</li>
<li class="navmenu__dropdown-section-list-item"><a data-wf-native-id-path="c061821d-b047-e0d2-e806-54d1fe4a5f29:900c0de8-ea5a-c9b5-2f7d-cc6e62439c3e" data-wf-ao-click-engagement-tracking="true" data-wf-element-id="900c0de8-ea5a-c9b5-2f7d-cc6e62439c3e" data-wf-componen [... 255 characters folded ...]>
<div class="icon-column"><img src="https://cdn.prod.website-files.com/6356c441ce34029b327802bf/6aa3febffc8103aab2f58477_ThreatLocker_Nav%20Icons_Why%20ThreatLocker_Success%20Stories.svg" loading="lazy" alt=""/>
</div>
<div>
<div class="navmenu_dropdown-section-link-heading nav-2026">Success stories
</div>
</div></a>
</li>
<li class="navmenu__dropdown-section-list-item"><a data-wf-native-id-path="c061821d-b047-e0d2-e806-54d1fe4a5f29:900c0de8-ea5a-c9b5-2f7d-cc6e62439c47" data-wf-ao-click-engagement-tracking="true" data-wf-element-id="900c0de8-ea5a-c9b5-2f7d-cc6e62439c47" data-wf-componen [... 249 characters folded ...]>
<div class="icon-column"><img src="https://cdn.prod.website-files.com/6356c441ce34029b327802bf/6aa3fe9b9a0f873448d6f8c6_ThreatLocker_Nav%20Icons_Why%20ThreatLocker_Industry%20Reports.svg" loading="lazy" alt=""/>
</div>
<div>
<div class="navmenu_dropdown-section-link-heading nav-2026">Industry reports
</div>
</div></a>
</li>
<li class="navmenu__dropdown-section-list-item"><a data-wf-native-id-path="c061821d-b047-e0d2-e806-54d1fe4a5f29:900c0de8-ea5a-c9b5-2f7d-cc6e62439c50" data-wf-ao-click-engagement-tracking="true" data-wf-element-id="900c0de8-ea5a-c9b5-2f7d-cc6e62439c50" data-wf-componen [... 266 characters folded ...]>
<div class="icon-column"><img src="https://cdn.prod.website-files.com/6356c441ce34029b327802bf/6aa3fe7b67ab02270e7e80ea_ThreatLocker_Nav%20Icons_Why%20ThreatLocker_Community.svg" loading="lazy" alt=""/>
</div>
<div>
<div class="navmenu_dropdown-section-link-heading nav-2026">Community
</div>
</div></a>
</li>
</ul>
</li>
</ul>
</div>
</div>
</div>
</nav>
</div>
</li>
<li class="link-list_list-item nav-2026">
<div data-hover="true" data-delay="0" data-w-id="d279dae6-4046-976c-59eb-7ea73135e9e5" class="navmenu_link-list-dropdown-wrapper w-dropdown">
<div data-wf-native-id-path="c061821d-b047-e0d2-e806-54d1fe4a5f29:d279dae6-4046-976c-59eb-7ea73135e9e6" data-wf-ao-click-engagement-tracking="true" data-wf-element-id="d279dae6-4046-976c-59eb-7ea73135e9e6" data-wf-compon [... 214 characters folded ...]><a data-wf-native-id-path="c061821d-b047-e0d2-e806-54d1fe4a5f29:d279dae6-4046-976c-59eb-7ea73135e9e7" data-wf-ao-click-engagement-tracking="true" data-wf-element-id="d279dae6-4046-976c-59eb-7ea73135e9e7" data-wf-componen [... 210 characters folded ...]>
<div class="text-block-154 nav-2026">Capabilities
</div></a>
<div class="link-list_dropdown-icon nav-2026 w-embed">
<svg xmlns="http://www.w3.org/2000/svg" width="12" height="12" viewBox="0 0 12 12">[... 300 characters folded ...]
</svg>
</div>
</div>
<nav class="navmenu_dropdown w-dropdown-list">
<div class="navmenu_dropdown-grid nav-2026">
<div id="w-node-d279dae6-4046-976c-59eb-7ea73135e9ed-62439bfa" class="navmenu_container-dropdown navmenu_container-mobile-section">
<div class="navmenu_dropdown-left nav-2026">
<ul id="w-node-d279dae6-4046-976c-59eb-7ea73135e9ef-62439bfa" role="list" class="navmenu_dropdown-list w-list-unstyled">
<li class="navmenu_dropdown-section">
<div>
<div class="navmenu_dropdown-section-heading nav-2026">Capabilities
</div>
</div>
<ul role="list" class="navmenu__dropdown-section-list why-threatlocker w-list-unstyled">
<li class="navmenu__dropdown-section-list-item"><a data-wf-native-id-path="c061821d-b047-e0d2-e806-54d1fe4a5f29:d279dae6-4046-976c-59eb-7ea73135e9f6" data-wf-ao-click-engagement-tracking="true" data-wf-element-id="d279dae6-4046-976c-59eb-7ea73135e9f6" data-wf-componen [... 248 characters folded ...]><img src="https://cdn.prod.website-files.com/6356c441ce34029b327802bf/6a7342943a2273a43f2e2264_Control_AI_Solutions.svg" loading="lazy" width="20" height="20" alt="" class="navigation-icons"/>
<div>
<div class="navmenu_dropdown-section-link-heading">Zero Trust AI Control
</div>
</div></a>
</li>
<li class="navmenu__dropdown-section-list-item"><a data-wf-native-id-path="c061821d-b047-e0d2-e806-54d1fe4a5f29:d279dae6-4046-976c-59eb-7ea73135ea1a" data-wf-ao-click-engagement-tracking="true" data-wf-element-id="d279dae6-4046-976c-59eb-7ea73135ea1a" data-wf-componen [... 252 characters folded ...]><img src="https://cdn.prod.website-files.com/6356c441ce34029b327802bf/6a1ee5f27cd7ef364525ddc3_ThreatLocker_Capabilities_Regular_Zero%20Trust%20Network%20Access_30x30.svg" loading="lazy" width="20" height="20" alt=""/>
<div>
<div class="navmenu_dropdown-section-link-heading">Zero Trust Network Access
</div>
</div></a>
</li>
<li class="navmenu__dropdown-section-list-item"><a data-wf-native-id-path="c061821d-b047-e0d2-e806-54d1fe4a5f29:d279dae6-4046-976c-59eb-7ea73135ea0a" data-wf-ao-click-engagement-tracking="true" data-wf-element-id="d279dae6-4046-976c-59eb-7ea73135ea0a" data-wf-componen [... 250 characters folded ...]><img src="https://cdn.prod.website-files.com/6356c441ce34029b327802bf/6a1ee668bf1be83c61f10efb_ThreatLocker_Capabilities_Regular_Zero%20Trust%20cloud%20access_30x30.svg" loading="lazy" width="20" height="20" alt="" class="navigation-icons"/>
<div>
<div class="navmenu_dropdown-section-link-heading">Zero Trust Cloud Access
</div>
</div></a>
</li>
<li class="navmenu__dropdown-section-list-item"><a data-wf-native-id-path="c061821d-b047-e0d2-e806-54d1fe4a5f29:66f34e95-378a-76df-56b2-44a45fddeaee" data-wf-ao-click-engagement-tracking="true" data-wf-element-id="66f34e95-378a-76df-56b2-44a45fddeaee" data-wf-componen [... 239 characters folded ...]><img src="https://cdn.prod.website-files.com/6356c441ce34029b327802bf/6a1ee5698e88a4cb3e3e127c_ThreatLocker_Capabilities_Regular_Allowlisting_30x30.svg" loading="lazy" width="20" height="20" alt="" class="navigation-icons"/>
Shown with 268 long blocks (scripts, styles, long tags) folded into a marker that says how many characters they hide; line breaks added before block tags because the source is minified; the pane stops after the first 200 words; the page is 290 KB.
Reading view the text a plain-fetch client can extract
title: Enterprise Cybersecurity Solutions | ThreatLocker
Zero Trust solutions for AI, Endpoints, Cloud, and Network
Contact us 833-292-7732 Client portal login Why ThreatLocker ThreatLocker® Platform ThreatLocker® Platform WHY ThreatLocker Your ThreatLocker advantage Success stories Industry reports Community Capabilities Capabilities Zero Trust AI Control Zero Trust Network Access Zero Trust Cloud Access Allowlisting Privileged Access Management Patch Management Ringfencing EDR Real-Time Threat Detection Web Content Control External Storage Device Control Managed Detection and Response (MDR) Defense Against Configurations (DAC) Data Storage Access Control Cyber Hero Approvals Controlled Application Testing Environment Centralized Configuration Management Zero Trust Endpoint Firewall Solutions Solutions Stop ransomware Achieve compliance Stop token and phishing theft Reduce admin privilege abuse AI security Stop data exfiltration Contain lateral movement Industries Industries Logistics Energy Financial Healthcare Education State and Local Government Manufacturing MSP/MSSP Federal Government Legal Aviation Resources Get Started ThreatLocker University Cyber Hero Certification Cybersecurity 101 Knowledge Base Media Cyber Hero Frontline Blogs Webinars eBooks In the news Press releases CONNECT Contact us Start your free trial Events Zero Trust World 2027 CONNECT Contact us Start your free trial Events Zero Trust World 2027 Company Company About ThreatLocker Careers Contact us threatlocker magazine Get the latest issue Start Free Trial Contact Us Client Portal Login Request a demo Book
2605 more words follow in the initial HTML.
| Check | Result | Detail |
|---|---|---|
| H1 in the initial HTML | Found one H1 | First H1: Zero Trust solutions for AI, Endpoints, Cloud, and Network |
| First 200 words in the initial HTML | Found 200 of 200 words | The initial HTML carries 2805 words of visible text; the first 200 are marked in the left pane. |
| llms.txt present and linked | Note present, not linked | 8262 bytes, 33 links. Structure grade A (6 of 6). Nothing on the home page points to it. Ora's lab found 86 percent of llms.txt fetches arrived through a link. |
| Markdown on request | Missing 200 text/html | Accept: text/markdown returned 200 with text/html; charset=utf-8. The server ignores the header. |
| Status of a made-up path | Found 404 | /agent-ready-html-missing-path-check returned 404: a real status code for a missing page. |
| JSON-LD types | Found Corporation, Organization | 2 schema.org types in JSON-LD blocks on the home page: Corporation, Organization. |
| OpenAPI link | Note none on the home page | No OpenAPI link on the home page. It matters only for a site that ships an API. |
Run the full check
The viewer read one page with four requests. The full check we recommend next is Ora's scan. Its Access layer runs 42 checks worth 30 of its 100 points, among them content without JavaScript, bot detection, llms.txt, markdown on request, JSON-LD and the sitemap (Ora's check catalogue, contract 1.38.0, read 5 November 2026). Open Ora's report for threatlocker.com.
Limits: Ora reads public URLs only, says two runs of one scan land within a couple of points without publishing repeat-scan data, and keeps the product that fixes what it finds behind a waitlist. Cloudflare's scanner at isitagentready.com is a quick free alternative, and Mintlify's score covers documentation.
What the viewer does
It sends four plain GET requests with the user agent Mozilla/5.0 (compatible; agent-readiness-crawl/1.0): the URL itself, the same URL with Accept: text/markdown, /llms.txt on the same host, and a made-up path at the root. It runs no JavaScript. The left pane is the first bytes of the HTML as text, with long scripts and styles folded into a marker that says how many characters they hide. The H1 and the first 200 words of visible text are marked in both panes. The flags under the panes say what the four responses added up to.
Limits
- Ten seconds for all four requests together, 1.5 MB read from the home page, at most five redirects, each one checked again.
- http and https only, default ports only. Private, local and internal addresses and names are refused.
- Ten runs per address per minute. The counter lives in memory on the edge function, so it is per instance rather than global. Past ten you get a 429 with a Retry-After header.
- Results are cached for 24 hours by the response headers. Nothing is written to a database: the viewer keeps the first 200 words and the extracted fields for the length of the request and keeps no page body beyond that.
What it does not tell you
A plain fetch from this server is not a real agent. Bot protection weighs the source address more than the user agent, so a page that answers 200 here can still refuse an agent, and the reverse. Ora's lab found (2026-10-19) that returning 403 to agent user agents and hiding the answer in JavaScript were the only two of 19 configurations that stopped retrieval; the viewer can see the second, and can only hint at the first. The initial HTML reference covers both. The server logs and the published crawler address ranges settle the first.
The seven flags
- H1 in the initial HTML
- Whether the HTML the server sends already contains an H1. It is the cheapest sign that the page does not depend on scripts to say what it is.
- First 200 words in the initial HTML
- Whether at least 200 words of visible text arrive in the initial HTML. Under 40 words with an app root element is flagged as a JavaScript shell.
- llms.txt present and linked
- Whether /llms.txt answers with a plain-text file, whether the home page links it (an anchor, a link element or a Link header), and the structure grade the index uses.
- Markdown on request
- Whether a request with Accept: text/markdown comes back as text/markdown. Cloudflare Radar found 3.9 percent of scanned top sites passing this at its April 2026 launch.
- Status of a made-up path
- Whether a path that should not exist returns 404 or 410. A 200 is a soft 404 and reads as a live page.
- JSON-LD types
- The schema.org types found in JSON-LD blocks on the page. Ora's lab found JSON-LD made no difference when the answer was already in the HTML.
- OpenAPI link
- Whether the page links an OpenAPI file, by an anchor or a service-desc link relation. It matters only for a site that ships an API.
Sources
- Ora: AgentReady launch post (Ora's lab findings) https://ora.ai/blog/agentready-launch, read 4 November 2026
- Ora check catalogue, contract 1.38.0 (132 checks, 42 in the Access layer) https://ora.ai/api/checks, read 5 November 2026
- Ora home page (the fixing product is behind a waitlist) https://ora.ai/, read 5 November 2026
- Ora: Introducing Deep Scan (repeat scans) https://ora.ai/blog/introducing-deep-scan, read 5 November 2026
- Ora llms.txt (public URLs only) https://ora.ai/llms.txt, read 5 November 2026
- Vercel: Make your site readable by AI agents https://vercel.com/kb/guide/make-your-site-readable-by-ai-agents, read 4 November 2026
- llms.txt proposal (llmstxt.org) https://llmstxt.org/, read 4 November 2026
Last reviewed 5 November 2026