Agent Readiness Score

paloaltonetworks.com

34 — Limited. Agents will struggle to discover or use this site without human help.

45 of 45 checks conclusive · Confidence High · Evidence coverage 100%

HonestClaw measured how well paloaltonetworks.com's site and APIs work for AI agents — across 9 dimensions and 45 automated checks.

Open interactive report →

Dimensions

Discoverability11.9/24

Content Accessibility15.7/24

Bot Access Control5/12

Protocol & Capability Discovery7/41

Authentication & Credentials3.5/19

Documentation Quality5/10

Structured Data I/O0/13

Observable State & Reliability5.3/15

Agent Safety & Trust3.5/11

Checks

Discoverability

Subdomain sweepsubdomain-sweepBoth an API-family and a docs-family subdomain are live (api.paloaltonetworks.com, docs.paloaltonetworks.com).Useful

Canonical domaincanonical-domainRoot and www converge on www.paloaltonetworks.com, with a matching canonical tag.Cross-verified

robots.txtrobots-txtrobots.txt at https://paloaltonetworks.com/robots.txt declares a sitemap. Declared sitemap https://www.paloaltonetworks.com/sitemap_home.xml resolves as valid XML.Cross-verified

sitemap.xmlsitemap-xmlhttps://www.paloaltonetworks.com/sitemap.xml is a dated sitemap whose URLs include docs/pricing/api surfaces.Cross-verified

API existenceapi-existenceNo API endpoint found at common paths (only HTML pages or 404s).Not detected

API catalogapi-catalogNo RFC 9727 API Catalog found at /.well-known/api-catalog.Not detected

API versioningapi-versioningA versioning-related page exists at https://docs.paloaltonetworks.com/globalprotect/getting-started/what-os-versions-are-supported-with-globalprotect, but it doesn't describe a versioning scheme or deprecation policy. (source: docs)Parseable

Content Accessibility

llms.txtllms-txtA curated llms.txt index is published at https://www.paloaltonetworks.com/llms.txt: 115 links across 10 sections.Cross-verified

llms-full.txtllms-full-txtA comprehensive llms-full.txt is published at https://paloaltonetworks.com/llms-full.txt with 30,486 chars across 10 sections.Cross-verified

Freshness signalsfreshness-signalsFreshness signals present: Last-Modified header, sitemap lastmod.Useful

Crawl-cost estimatecrawl-cost-estimateInformational — not scoredSitemap declares 5601 page URLs — moderate crawl cost; agents should budget accordingly.Parseable

ai.txtai-txtNo ai.txt file found (HTML pages at .txt paths do not qualify).Not detected

Raw content extractabilityraw-content-extractabilitySubstantial visible text (12,777 chars) is readable without JavaScript on at least one probed page.Useful

Markdown twinmarkdown-twinNo markdown twin found alongside probed docs HTML surfaces.Not detected

Bot Access Control

AI bot rulesai-bot-rulesrobots.txt declares explicit rules for 3 AI bot(s): oai-searchbot, chatgpt-user, perplexitybot.Cross-verified

Content signalscontent-signalsrobots.txt is readable but declares no Content-Signal line.Not detected

RSL licensingrslrobots.txt is readable but declares no RSL License directive.Not detected

TDM reservationtdmrepNo TDMRep policy found at /.well-known/tdmrep.json.Not detected

Protocol & Capability Discovery

MCP descriptormcp-descriptorInformational — not scoredNo MCP descriptor found at the standard locations an agent would check.Not detected

MCP supportmcp-supportA first-party MCP support page exists at https://docs.paloaltonetworks.com/ai-runtime-security/activation-and-onboarding/prisma-airs-mcp-server-for-centralized-ai-agent-security, but it does not identify a concrete HTTPS MCP endpoint or fully establish a company-operated service.Parseable

Link headerslink-headersNo RFC 8288 Link headers found on any probed response.Not detected

OpenAPI specificationopenapi-specNo OpenAPI/Swagger specification found.Not detected

A2A Agent Carda2a-agent-cardNo A2A Agent Card found at the standard well-known locations.Not detected

DNS-AIDdns-aidNo DNS-AID index found at _index._agents.paloaltonetworks.com.Not detected

.well-known indexwell-known-indexNo non-owned /.well-known/ descriptors found.Not detected

Auth discoveryauth-discoveryNo standardized authentication-discovery surface found.Not detected

MCP Server Cardmcp-server-cardNo MCP Server Card found at the standard locations an agent would check.Not detected

GraphQL surfacegraphql-surfaceNo GraphQL transport surface found at conventional paths (GET-only; no introspection issued).Not detected

SDK availabilitysdk-availabilitySDK libraries page at https://docs.paloaltonetworks.com/ai-runtime-security/activation-and-onboarding/ai-runtime-security-api-intercept-overview/airs-apis-python-sdk: 0 GitHub repos, 0 registry links, 1 install command (1 pointer).Useful

Rate limit documentationrate-limit-docsA rate-limit documentation page exists at https://docs.paloaltonetworks.com/cloud-ngfw-aws/reference/cloud-ngfw-for-aws-limits-and-quotas, but it doesn't state a concrete limit alongside a rate-limit response header.Parseable

WebMCPwebmcpInformational — not scoredWebMCP browser probing is not yet available in this scanner release.Couldn't verify

Authentication & Credentials

Sandbox environmentsandbox-environmentNo sandbox or test environment documentation found at the standard docs locations an agent would check.Not detected

Programmatic auth flowprogrammatic-auth-flowAn authentication page exists at https://docs.paloaltonetworks.com/cn-series/getting-started/create-service-accounts-for-cluster-authentication-with-cn-series, but it doesn't document a programmatic grant with a token endpoint.Parseable

Credential managementcredential-managementNo credential management documentation found at the standard docs locations an agent would check.Not detected

Auth documentationauth-documentationAn authentication documentation page exists at https://docs.paloaltonetworks.com/cn-series/getting-started/create-service-accounts-for-cluster-authentication-with-cn-series, but it doesn't name a specific method or show how a request is authenticated.Parseable

Documentation Quality

API reference depthapi-reference-depthAPI reference documentation lacks depth or was not found.Not detected

Changelog presencechangelog-presenceA changelog is published at https://docs.paloaltonetworks.com/advanced-threat-prevention/release-notes with multiple recent dated entries, indicating it is actively maintained.Cross-verified

Structured Data I/O

Structured data I/Ostructured-data-ioNo published structured-data contract found (no typed spec response schemas).Not detected

Machine-readable pricingmachine-readable-pricingNo machine-readable pricing endpoint found (HTML pricing pages do not qualify).Not detected

Data export APIdata-export-apiNo data export or bulk API documentation found at the standard docs locations an agent would check.Not detected

Observable State & Reliability

Status & health endpointsstatus-and-healthNo health or status endpoint found.Not detected

Webhook documentationwebhook-documentationA webhook documentation page exists at https://docs.paloaltonetworks.com/saas-security/sspm/assess-posture-security/send-sspm-notifications-to-webhooks, but it doesn't list specific event types with their payload shape.Parseable

Retry & idempotencyretry-and-idempotencyNo retry or idempotency documentation found at the standard docs locations an agent would check.Not detected

Error documentationerror-documentationErrors are documented at https://docs.paloaltonetworks.com/autofocus/autofocus-api/autofocus-api-error-codes/autofocus-api-error-codes-table with specific codes or a documented response shape. To reach the top level, it would need recovery guidance and a machine-readable error format, or corroboration against the API spec.Useful

Machine payments (x402/MPP)x402-or-mpp-supportInformational — not scoredNo machine-payment signal observed (no HTTP 402, no payment-required response header, and no /.well-known/x402.json manifest). Payment support cannot be ruled out from an unauthenticated probe.Couldn't verify

Agent Safety & Trust

Org identity signalsorg-identityHomepage exposes one org-identity signal (social).Detected

Metadata consistencymetadata-consistencyHomepage metadata (canonical, Open Graph, schema) is present and consistent.Cross-verified

security.txtsecurity-txtNo security.txt found at /.well-known/security.txt or /security.txt.Not detected

Legal policy pageslegal-pagesAt least one legal policy page is discoverable.Detected