5.0★ / 181 reputation. Site's holding you back.
A 19.4 s mobile load and a few gaps are leaving easy wins on the table.
boldcityroofing.com has genuine authority — 5.0★ / 181 on Google (181 reviews, verified). Overall audit health is 53/100 (grade F). The drag isn't reputation, it's the site: no LocalBusiness schema, missing security headers, plus a 19.4 s mobile load.
Domain: boldcityroofing.com · Business: Roofing · Solar · Insulation · Ocala, FL · 35 years · Service area: Ocala, FL (352)
Read this if nothing else.
Real reputation (5.0★ / 181), held back mostly by site speed and missing security/schema. Most fixes are quick.
HTTPS enabled with a valid certificate
Verified strength — keep it.
Real XML sitemap found
Verified strength — keep it.
Add a Strict-Transport-Security (HSTS) header
Flagged in the live security/SEO scan.
Add a Content-Security-Policy with script-src restrictions
Flagged in the live security/SEO scan.
Fix these first.
| # | Action | Why it matters |
|---|---|---|
| 1 | Add a Strict-Transport-Security (HSTS) header | Flagged by the live scan as a top fix. |
| 2 | Add a Content-Security-Policy with script-src restrictions | Flagged by the live scan as a top fix. |
| 3 | Add LocalBusiness schema (sameAs + aggregateRating linking your reviews) | Flagged by the live scan as a top fix. |
| 4 | Allow AI crawlers (GPTBot, ClaudeBot, PerplexityBot) in robots.txt | Flagged by the live scan as a top fix. |
What the live HTML actually says.
Live HTML pulled from boldcityroofing.com on 2026-06-15. Server: nginx · · WordPress + Yoast. Below: what we observed in the rendered DOM.
Stack detected
| Server | nginx |
| Backend | — |
| CMS | WordPress |
| SSL valid | True |
| Sitemap | yes |
| robots.txt | 200 |
No LocalBusiness schema
Detected JSON-LD: BreadcrumbList, EntryPoint, ListItem, PropertyValueSpecification, ReadAction, SearchAction, WebPage, WebSite. No LocalBusiness / industry subtype, so reviews/NAP don't connect to the site.
evidence: JSON-LD @type scan of live HTML
Missing security headers
Security category scored 30/100. Missing: HSTS, Content-Security-Policy.
evidence: response header scan
Speed is the headline problem.
Lighthouse mobile lab data, captured 2026-06-15. Google's Good zone: LCP <2.5s, FCP <1.8s, CLS <0.1, TBT <200ms.
Lighthouse performance 29/100, LCP 19.4 s
Lighthouse performance 29/100; LCP 19.4 s on mobile. Mobile Lighthouse performance 29/100.
What Google can read about you.
Detected JSON-LD types on the homepage: BreadcrumbList, EntryPoint, ListItem, PropertyValueSpecification, ReadAction, SearchAction, WebPage, WebSite.
No LocalBusiness schema linking the site to your Google Business Profile.
Are you findable by ChatGPT, Perplexity, Google AI Overviews?
As of 2026, 22% of all search queries route through an AI surface. Visibility there is now a measurable revenue lever.
robots.txt: AI crawler access
robots.txt does not explicitly name any of the standard AI crawlers (GPTBot, ClaudeBot, PerplexityBot, Google-Extended, …). Conservative crawlers default to skipping.
llms.txt: citation hygiene file
llms.txt present.
How your business appears in local search.
Google Business Profile: 5.0★ / 181 (Google Business Profile (DataForSEO, verified)).
No LocalBusiness schema linking the site to your Google Business Profile. Verified Google rating 5.0★ / 181 across 181 reviews (DataForSEO). No on-site LocalBusiness schema links these reviews to the site via sameAs/aggregateRating.
The order to do this work in.
Ranked by impact on your search visibility and lead flow.
| # | Action | Impact |
|---|---|---|
| 1 | Add a Strict-Transport-Security (HSTS) header | High |
| 2 | Add a Content-Security-Policy with script-src restrictions | High |
| 3 | Add LocalBusiness schema (sameAs + aggregateRating linking your reviews) | High |
| 4 | Allow AI crawlers (GPTBot, ClaudeBot, PerplexityBot) in robots.txt | High |