b/cited
Menu
B
Design Tools

Penpot

penpot.app ↗

How this compares

Penpot ranks #6 of 15 scanned design tools sites, scoring 80/100 — 3 points above the category average of 77. The category leader scores 84. Immediately above is Pitch on 80, and immediately below, Zeplin on 79.

Cited by AI answer engines

In the week of Oct 11, 2026, none of the engines b/cited asked cited penpot.app on the design tools prompts b/cited watches: OpenAI (gpt-4.1-mini) on 0 of 5, Anthropic (claude-sonnet-4-6) on 0 of 5, and Perplexity (sonar) on 0 of 5. Citations are engine output at the time of the run, not a b/cited rating, and the prompts are a sample, not a census.

Overall
80 / 100
AEO
75 / 100
Rank
#6 of 15
Cited by AI
0 of 15
prompt × engine pairs, week of Oct 11, 2026
Last scanned
10/11/2026
Own penpot.app? Sign in and verify it in Search Console to claim this listing.
Results
B
Overall
80 / 100
33 pass19 warn1 fail
Scanned
penpot.app
1.6s · 53 checks
⚠ PSI_API_KEY not configured
Indexing & crawl100 / 10012✓
  • HTTPS
    served over https://
    Docs →
  • HTTP response
    200 OK
    Docs →
  • Time to first byte
    492ms (fast)
    Docs →
  • Redirect chain
    direct hit, no redirects
    Docs →
  • robots.txt present
    450 bytes
    Docs →
  • robots.txt allows this URL
    Googlebot may crawl /
    Docs →
  • Sitemap referenced in robots.txt
    Sitemap: directive present
    Docs →
  • sitemap.xml present
    319 URLs
    Docs →
  • sitemap.xml uses <lastmod>
    lastmod hints help Googlebot prioritize re-crawls
    Docs →
  • No noindex directive
    page is indexable
    Docs →
  • Canonical URL
    self-referential: https://penpot.app/
    Docs →
  • lang attribute on <html>
    lang="en"
    Docs →
Metadata94 / 1007✓1!
  • Title tag length
    50 chars — within SERP-display range
    Docs →
  • Title tag present
    "Penpot: The open-source design platform for teams."
  • Meta description length
    156 chars — within SERP-display range
    Docs →
  • Meta description present
    "Penpot is the open-source design platform for teams building digital products at scale, enabling de…"
  • H1 heading
    single H1: "Think and build digital products. Together."
  • Subheadings (H2)
    8 <h2> elements
  • Mobile viewport
    viewport meta present
  • Favicon
    no favicon — Google shows favicons in mobile SERP results
    Docs →
AEO (Answer Engines)75 / 1004✓4!
  • llms.txt
    2708 bytes — AI crawlers get a curated index
    Docs →
  • ai.txt (Spawning consent)
    missing (optional) — Spawning consent file is not load-bearing for citation, but signals intent
    Docs →
  • AI crawler stance in robots.txt
    4 addressed: GPTBot, ClaudeBot, PerplexityBot, OAI-SearchBot
    Docs →
  • FAQPage schema (citation-friendly)
    absent — FAQPage is one of the most-cited schema types in AI answers
    Docs →
  • HowTo schema
    absent — HowTo gets cited heavily for procedural queries
    Docs →
  • Organization schema
    present
    Docs →
  • WebSite / WebApplication schema
    present
    Docs →
  • Author / Person schema (E-E-A-T)
    absent — author credibility is part of Google E-E-A-T and feeds AI citation trust
    Docs →
Structured data92 / 1005✓1!
  • JSON-LD structured data present
    6 JSON-LD block(s)
    Docs →
  • JSON-LD valid JSON
    all blocks parsed cleanly
    Docs →
  • Organization or WebSite schema
    Organization + WebSite
    Docs →
  • Sitelinks searchbox (SearchAction)
    WebSite.potentialAction declared
    Docs →
  • BreadcrumbList
    no BreadcrumbList — Google may not show your breadcrumb path in SERP
    Docs →
  • Content-specific schema in use
    present: SoftwareApplication / WebApplication
    Docs →
Social cards70 / 1002✓3!
  • Open Graph (core 5)
    og:title, og:description, og:image, og:url, og:type all present
    Docs →
  • og:image dimensions
    no og:image:width / og:image:height — crawlers must download the image to learn dimensions
    Docs →
  • og:image:alt
    no og:image:alt — sets alt text when image is shared
    Docs →
  • Twitter Card (core 4)
    twitter:card, twitter:title, twitter:description, twitter:image all present
    Docs →
  • twitter:image:alt
    no twitter:image:alt — limits accessibility on the X.com card
    Docs →
Security57 / 1002✓4!1✗
  • HSTS (Strict-Transport-Security)
    max-age=15552000 — recommend ≥31536000 (1 year)
    Docs →
  • X-Content-Type-Options nosniff
    nosniff set
    Docs →
  • Clickjacking protection
    no X-Frame-Options and no CSP frame-ancestors — clickjacking risk
    Docs →
  • Content-Security-Policy
    no CSP header — strong defense-in-depth signal
    Docs →
  • Referrer-Policy
    no Referrer-Policy — browsers will use defaults that leak origin
    Docs →
  • Permissions-Policy
    no Permissions-Policy — opportunity to restrict unused browser APIs
    Docs →
  • No mixed content
    no http:// asset references on this https page
    Docs →
Performance50 / 1001!
  • PageSpeed Insights API
    PSI_API_KEY not configured
    Docs →
Mobile60 / 1001✓4!
  • Viewport meta
    width=device-width, initial-scale=1
    Docs →
  • Apple touch icon
    no apple-touch-icon — iOS home-screen bookmarks will use a fallback
    Docs →
  • theme-color meta
    no theme-color — mobile browser chrome uses default color
    Docs →
  • AMP variant
    no AMP variant — Google no longer requires AMP; informational only
    Docs →
  • Web app manifest
    no manifest — site is not installable as a PWA
    Docs →
International50 / 1001!
  • hreflang annotations
    no hreflang declarations — fine for English-only sites; required for localized variants
    Docs →

Scores reflect the last automated crawl and refresh weekly; citation-panel results are engine output and refresh weekly with the scan. Want a live audit of your own site? Run a free scan.