b/cited
Menu
C
Analytics

Heap

heap.io ↗

How this compares

Heap ranks #11 of 15 scanned analytics sites, scoring 77/100 — 1 point below the category average of 78. The category leader scores 84. Immediately above is Simple Analytics on 78, and immediately below, Pirsch on 73.

Cited by AI answer engines

In the week of Oct 11, 2026, heap.io was cited by OpenAI (gpt-4.1-mini) on 1 of 5, Anthropic (claude-sonnet-4-6) on 1 of 5, and Perplexity (sonar) on 0 of 5 analytics prompts b/cited watches. Its best position was #3, on “What is the best web analytics tool for a small SaaS company that wants product usage insights?” (OpenAI (gpt-4.1-mini)). Citations are engine output at the time of the run, not a b/cited rating, and the prompts are a sample, not a census.

Overall
77 / 100
AEO
44 / 100
Rank
#11 of 15
Cited by AI
2 of 15
prompt × engine pairs, week of Oct 11, 2026
Last scanned
10/11/2026
Own heap.io? Sign in and verify it in Search Console to claim this listing.
Results
C
Overall
77 / 100
29 pass16 warn3 fail
Scanned
heap.io
3.4s · 48 checks
⚠ PSI_API_KEY not configured
Indexing & crawl96 / 10011✓1!
  • HTTPS
    served over https://
    Docs →
  • HTTP response
    200 OK
    Docs →
  • Time to first byte
    135ms (fast)
    Docs →
  • Redirect chain
    1 redirect (acceptable)
    Docs →
  • robots.txt present
    96 bytes
    Docs →
  • robots.txt allows this URL
    Googlebot may crawl /
    Docs →
  • Sitemap referenced in robots.txt
    Sitemap: directive present
    Docs →
  • sitemap.xml present
    752 URLs
    Docs →
  • sitemap.xml uses <lastmod>
    lastmod hints help Googlebot prioritize re-crawls
    Docs →
  • No noindex directive
    page is indexable
    Docs →
  • Canonical URL
    canonical points elsewhere: https://www.heap.io/
    Docs →
  • lang attribute on <html>
    lang="en"
    Docs →
Metadata94 / 1007✓1!
  • Title tag length
    38 chars — within SERP-display range
    Docs →
  • Title tag present
    "Heap - Better Insights. Faster. | Heap"
  • Meta description length
    185 chars — will truncate in SERP (target 120–160)
    Docs →
  • Meta description present
    "Heap by Contentsquare is the only digital insights platform that shows everything users do on your …"
  • H1 heading
    single H1: "Better Insights. Faster."
  • Subheadings (H2)
    15 <h2> elements
  • Mobile viewport
    viewport meta present
  • Favicon
    icon link tag present
AEO (Answer Engines)44 / 1007!1✗
  • llms.txt
    missing — recommended for sites you want cited by LLMs
    Docs →
  • ai.txt (Spawning consent)
    missing (optional) — Spawning consent file is not load-bearing for citation, but signals intent
    Docs →
  • AI crawler stance in robots.txt
    no AI crawler rules — robots.txt is default-permissive (most AI bots will follow this)
    Docs →
  • FAQPage schema (citation-friendly)
    absent — FAQPage is one of the most-cited schema types in AI answers
    Docs →
  • HowTo schema
    absent — HowTo gets cited heavily for procedural queries
    Docs →
  • Organization schema
    absent — Organization schema lets AI engines name your brand correctly
    Docs →
  • WebSite / WebApplication schema
    absent — anchors site identity for AI answer engines
    Docs →
  • Author / Person schema (E-E-A-T)
    absent — author credibility is part of Google E-E-A-T and feeds AI citation trust
    Docs →
Structured data0 / 1001✗
  • JSON-LD structured data present
    no <script type="application/ld+json"> blocks — page has no structured data for rich results
    Docs →
Social cards70 / 1003✓1!1✗
  • Open Graph (core 5)
    og:title, og:description, og:image, og:url, og:type all present
    Docs →
  • og:image dimensions
    og:image:width + og:image:height declared
    Docs →
  • og:image:alt
    no og:image:alt — sets alt text when image is shared
    Docs →
  • Twitter Card (core 4)
    missing 3: twitter:title, twitter:description, twitter:image
    Docs →
  • twitter:image:alt
    alt text declared for Twitter image
    Docs →
Security86 / 1005✓2!
  • HSTS (Strict-Transport-Security)
    max-age=31536000 (≥1 year)
    Docs →
  • X-Content-Type-Options nosniff
    nosniff set
    Docs →
  • Clickjacking protection
    X-Frame-Options: SAMEORIGIN
    Docs →
  • Content-Security-Policy
    no CSP header — strong defense-in-depth signal
    Docs →
  • Referrer-Policy
    strict-origin-when-cross-origin
    Docs →
  • Permissions-Policy
    no Permissions-Policy — opportunity to restrict unused browser APIs
    Docs →
  • No mixed content
    no http:// asset references on this https page
    Docs →
Performance50 / 1001!
  • PageSpeed Insights API
    PSI_API_KEY not configured
    Docs →
Mobile80 / 1003✓2!
  • Viewport meta
    width=device-width, initial-scale=1
    Docs →
  • Apple touch icon
    apple-touch-icon link tag present
    Docs →
  • theme-color meta
    no theme-color — mobile browser chrome uses default color
    Docs →
  • AMP variant
    no AMP variant — Google no longer requires AMP; informational only
    Docs →
  • Web app manifest
    manifest link declared
    Docs →
International50 / 1001!
  • hreflang annotations
    no hreflang declarations — fine for English-only sites; required for localized variants
    Docs →

Scores reflect the last automated crawl and refresh weekly; citation-panel results are engine output and refresh weekly with the scan. Want a live audit of your own site? Run a free scan.