Inspect public pages for forms, API and webhook signals, security headers, robots rules, latency, and automation-readiness risks.