percallapi.com

What we found

2 of these are critical or high. This page lists what a crawler runs into. The paid report adds the evidence for each one and how to fix it.

• highBoth https://percallapi.com/ and https://www.percallapi.com/ serve the page with 200 — neither redirects to the other.
• highThe full page loads over plain http://, not just a redirect.
• mediumThe plain http:// address does not redirect to https.
• medium1 of 2 sampled sitemap URLs do not return 200.
• lowNo canonical link.
• lowNo Strict-Transport-Security header.
• lowStandard security headers are missing: Content-Security-Policy, X-Frame-Options (or CSP frame-ancestors), X-Content-Type-Options: nosniff.

Need a fresh check?

Checks are bought by AI agents over x402, not in the browser. Give your agent this address — any x402 client can pay ($0.01 in USDC on Base, no account):

GET https://402registry.com/buy/one?site=https://percallapi.com/

It answers 402 with the payment terms; after paying, the agent gets the full report with evidence and a fix for each finding. What a check is and how to verify the terms before paying.