Audit: Brafton.com — AI Ingestion Diagnostic
Why Brafton.com is invisible to ChatGPT, Claude, Gemini, and Perplexity — and what to do about it.
Audit captured: 2026-04-27 — frozen at this URL.
This audit was prepared by GEOlocus.ai. The findings are reproducible by anyone with curl.
Brafton.com returns HTTP 403 Forbidden to every major AI bot at /sitemap.xml, /robots.txt, and /sitemap_index.xml.
Real users (Chrome, Safari, Firefox) get the full site. AI crawlers — Googlebot, ChatGPT-User, ClaudeBot, PerplexityBot — get a 919-byte CloudFront error page. Brafton has surgically removed itself from AI search via a single bot-UA WAF rule.
1. Reproducibility — UA vs. HTTP response
Identical request, identical URL (https://www.brafton.com/sitemap.xml), only the User-Agent header changes. Real users pass; every AI crawler is blocked at the edge.
| User-Agent tested | HTTP | Size | What this means |
|---|---|---|---|
Googlebot/2.1 |
403 | 919 bytes | CloudFront error — Google AI Overviews, Gemini cannot crawl |
ChatGPT-User/1.0 |
403 | 919 bytes | ChatGPT/OpenAI cannot retrieve site content for citations |
ClaudeBot/1.0 |
403 | 919 bytes | Claude.ai / Anthropic cannot index for citations |
PerplexityBot/1.0 |
403 | 919 bytes | Perplexity cannot ground answers in Brafton content |
curl/8.0 (bare) |
403 | 919 bytes | Even unidentified clients are blocked |
Chrome/120 (Windows) |
200 | 2,698 bytes | Real sitemap_index.xml served — humans see the full site |
2. Reproducibility script
Paste into any terminal. Verify in five seconds.
# Brafton blocks bot UAs but serves browser UAs — verify in 5 seconds:
for ua in "Googlebot/2.1" "ClaudeBot/1.0" "Chrome/120"; do
echo "$ua → $(curl -sS -o /dev/null -w 'HTTP %{http_code}' -A "$ua" https://www.brafton.com/sitemap.xml)"
done
Expected output:
Googlebot/2.1 → HTTP 403
ClaudeBot/1.0 → HTTP 403
Chrome/120 → HTTP 200
3. What Brafton's site actually is (browser-UA delivery)
Brafton has a respectable site — if you're a human. Browser UAs receive a healthy sitemap index, child sitemaps with <lastmod> tags, and 23,971 indexed URLs delivered with sub-second TTFB. None of that is reachable to AI bots.
| Metric | Brafton (browser UA) |
|---|---|
Total records (terminal <url> entries) |
23,971 |
| TTLB to last byte, root sitemap (p50) | 108 ms |
| TTLB to last byte, full tree (parallel) | 30.08 s |
| TTFB p50 (supporting) | 108 ms |
| 19 child sitemaps, all 200 OK | ✓ |
Sitemap <lastmod> tags |
✓ present |
Above measurements use Chrome User-Agent and follow redirects. Brafton's bot-UA test results are 0 records / HTTP 403 — see Section 1.
4. The GEO implication
What Brafton is missing
AI systems route real consumer traffic to sources they can ingest, verify, and cite. ChatGPT, Claude, Gemini, and Perplexity collectively serve hundreds of millions of consumer queries per month. None of them can cite Brafton's content — even when Brafton's content is the best answer — because the WAF returns 403 to every bot UA before any content is delivered.
The competitive context
GEOlocus.ai recently benchmarked four established U.S. content marketing agencies' sitemap delivery to AI bots. Three of the four served bots cleanly. Brafton was the only site that returned a hard 403 at the edge — a singular failure mode in the comparison set.
Why this happened
This is almost certainly an unintentional WAF rule — a “block obvious bots” pattern from CloudFront's default ruleset that was reasonable in 2018 but is GEO-fatal in 2026. Reversing it is a single rule change. The downstream effect on AI citation surface is large.
5. How GEOlocus.ai helps
GEOlocus.ai operates a parallel delivery layer — the AI fluency layer — that sits alongside a publisher's existing site. AI bots receive purpose-built clean-room HTML; humans continue to receive the existing site unchanged. No CMS migration, no workflow change, no compliance review.
For Brafton specifically, the immediate fix is simpler — adjust the CloudFront bot rule. The longer play is to build for AI ingestion deliberately rather than be invisible to it accidentally. We've helped one client (Top10Lists.us) go from cold-start to gold-standard AI citation in five months. Read more at GEOlocus.ai.
Want a 30-min walkthrough of these findings + a path to AI citation visibility?
Robert Maynard, Co-Founder & CEO — [email protected]
Or read more about the methodology: geolocus.ai/methodology/sitemap-benchmark/2026-04-26 →
All measurements captured 2026-04-27 from a single test client. Reproducible by any reader with curl. Brafton's bot-UA policy may change after this date — verify by re-running the script in Section 2. This page is frozen at the audit capture date and will not be updated.