The homepage answers automated requests with a bot check, so a site scan sees the company name as "Security Verification" and no description or share image. The GM's brief is to make every action in CRM+ available through Claude, ChatGPT and Copilot, yet the assistants' own fetchers may not be able to read the site that explains it.
First action
Fetch the homepage as a plain request and with Google's URL Inspection tool, and compare.
How to measure it
Assistant answers that describe Virtuous correctly
- Now
- –
- Target
- 3 of 3
- By
- 30 days
Steps
Check the rule
Find the bot rule that returns the 403 and what it matches.
VP of Marketing 2 hours
Allow verified crawlers
Verified search bots and assistant fetchers, by the providers' published lists.
VP of Marketing 1 day
Add the basics
Meta description, share image, favicon.
VP of Marketing 2 hours
Test in Search Console
URL Inspection on the homepage and pricing.
VP of Marketing 1 hour
Ask the assistants
"What is Virtuous CRM?" in three assistants.
Product Marketing Manager, Intelligence 30 minutes
Watch for abuse
Keep the challenge for everything else and watch logs for a week.
VP of Marketing 1 week
Recheck monthly
Same tests each month.
VP of Marketing 30 minutes a month
Why it works
Review the bot rule in the CDN: allow verified search crawlers and the AI assistants' user-facing fetchers, keep the challenge for abusive traffic, and add the missing meta description, social share image and favicon. Then test what Google, Bing and three assistants see for "Virtuous CRM".
Fundraisers who research a new CRM increasingly ask an assistant first. If the homepage cannot be read, the answer comes from comparison sites and competitors' pages.
Ready to use
ChecklistWhat crawlers see
[ ] Homepage returns 200 to Googlebot (URL Inspection) [ ] Homepage returns 200 to Bingbot [ ] Pricing and compare pages return 200 [ ] Meta description present [ ] Social share image present [ ] Favicon present [ ] llms.txt published [ ] Three assistants describe Virtuous correctly [ ] Bot challenge still blocks unverified traffic
Risks and how to handle them
Opening the rule invites scrapers
Allow only verified crawler IP ranges and keep rate limits.
Assistants still use old sources
Publish an llms.txt pointing to product pages.
Evidence
- programmable.infoThe virtuous.org homepage answers automated requests with HTTP 403 and a "Security Verification" page, so the site scan records the company name as "Security Verification" and finds no meta description, social share image or favicon. The sitemap, robots.txt and RSS feed are served normally.Source
- HiringGeneral Manager, CRM+ (August 2026): CRM+ is "a mature, market-leading business with strong retention"; the GM owns new logos, expansion and retention and the shift to a "headless, API/MCP-first, agentic workflow-driven, AI-native architecture" where every action is available "through AI tools like Claude, ChatGPT, and Copilot". Named agents: Prospect research, Page and Form Builder, Email Builder. Also owns platform-led growth, cross-sell across the Virtuous products and partnerships with "CRM ecosystem players, consulting firms, platform partners".Source
- Your websiteSitemap (about 3,400 URLs): 11 comparison URLs for four rivals, with pairs such as /compare/blackbaud and /compare/bb-alternative, /compare/donorperfect, /compare/donorperfect-alternative and /compare/dp-alternative, /compare/bloomerang and /compare/bm-alternative, /compare/salesforce and /compare/sf-alternative, plus /compare/bg; /pricing next to /pricing-older; /solutions/virtuous-for-healthcare next to /solutions-healthcare; /features/crm next to /software/crm. No comparison with Neon One, Bonterra or Givebutter.Source