360 checks: the largest companies on Ora's scan

How to read a check

Each page takes one company and reads Ora's public result for its main domain on the day the check is published: the score out of 100 and the grade, the four layers, what an assistant meets at the door, what it can read and do, and the three open checks Ora values most. The editors then write their own read, and every page ends with the scan to run on your own domain.

The companies are the largest in the world by revenue, taken in no particular order within the series. A score is one read on one day; Ora rescans, and a company that fixes its door can look different a month later.

November 2026

• Oracle: 22 of 100, grade F15 Nov 2026. Every assistant Ora sent was blocked, with a GraphQL endpoint and API docs behind the wall.
• Cisco: 32 of 100, grade D14 Nov 2026. The developer docs rank first in search, but the firewall stops agents before they find them.
• Intel: 16 of 100, grade F13 Nov 2026. A bot challenge meets every assistant at the home page, before any product does.
• Glencore: 41 of 100, grade D12 Nov 2026. A 733-entry sitemap, no JSON-LD, and Usability at 1 of 10.
• Trafigura: 56 of 100, grade C11 Nov 2026. Open to every agent, well labelled, and nothing yet for an agent to do.
• Alibaba Group: 29 of 100, grade D10 Nov 2026. Thirty characters of home page, an HTML robots.txt, and nothing for an agent to call.
• NTT: 68 of 100, grade C10 Nov 2026. A clean door, a 0.8 percent home page, and one fix worth 14 points.
• Tencent: 36 of 100, grade D10 Nov 2026. An open door, a developer portal found only by name, and no specification behind it.
• Alphabet: 17 of 100, grade F9 Nov 2026. A one-page holding company site the scan could not fetch, searched under the name abc.
• Amazon: 42 of 100, grade D9 Nov 2026. Robots.txt turns the search agents away, and the D is the price of that choice.
• Apple: 54 of 100, grade C9 Nov 2026. Four agents in, a full developer portal, and no sign-in an agent can use.
• AT&T: 34 of 100, grade D9 Nov 2026. A challenge for every agent, in front of a developer portal that handles sign-in for people.
• Bank of America: 48 of 100, grade C9 Nov 2026. A readable bank whose developer portal keeps a bot shield between itself and the agents.
• Berkshire Hathaway: 46 of 100, grade D9 Nov 2026. A list of links with no robots.txt, scored as permission by default.
• Boeing: 66 of 100, grade C9 Nov 2026. The door open, the sitemap full, and a search for boeing that does not find it.
• Cencora: 43 of 100, grade D9 Nov 2026. A well-built reading layer in front of an API that has no documentation at all.
• Centene: 50 of 100, grade C9 Nov 2026. Six agents in and a developer portal with sign-in, on a home page without JSON-LD.
• Chevron: 18 of 100, grade F9 Nov 2026. Six agents blocked, a 403 at robots.txt and an Access layer of 0 of 41.
• Citigroup: 44 of 100, grade D9 Nov 2026. Open to every agent, with 854 characters waiting inside.
• Comcast: 12 of 100, grade F9 Nov 2026. A corporate domain the scan could not open, probed under the string comcastcorporation.
• Costco: 39 of 100, grade D9 Nov 2026. A door opening onto 414 characters, on a shop the scan did not read as one.
• CVS Health: 54 of 100, grade C9 Nov 2026. A readable site with broken JSON-LD and a developer portal written for people.
• Dell Technologies: 74 of 100, grade B9 Nov 2026. The series' first B, with a soft 404 and a bot shield that answered the probes.
• Elevance Health: 56 of 100, grade C9 Nov 2026. A full home page whose canonical tag still points at a staging host.
• ExxonMobil: 71 of 100, grade B9 Nov 2026. An oil company with a live MCP server at its support desk, and a B.
• Fannie Mae: 26 of 100, grade F9 Nov 2026. A challenge at the door and a Usability layer of 3 of 44 behind it.
• FedEx: 42 of 100, grade D9 Nov 2026. Every agent in, 314 characters of home page, and a portal the shield hides.
• Ford Motor Company: 31 of 100, grade D9 Nov 2026. Four agents challenged, a portal behind them, and a Wikipedia match on the F-Series.
• Foxconn: 31 of 100, grade D9 Nov 2026. Zero characters without JavaScript, a sitemap that will not parse, an llms.txt in HTML.
• General Motors: 27 of 100, grade F9 Nov 2026. A 403 for every agent and an Access layer of 1 of 51.
• Goldman Sachs: 26 of 100, grade F9 Nov 2026. Six agents blocked in front of a page the reading checks mostly pass.
• HCA Healthcare: 33 of 100, grade D9 Nov 2026. Two agents blocked, two let in, and a robots.txt that says none may enter.
• Hitachi: 15 of 100, grade F9 Nov 2026. A home page that returned nothing and a Usability layer of 0 of 30.
• Honda: 66 of 100, grade C9 Nov 2026. A C on a short denominator, with no robots.txt and no sitemap to find.
• Humana: 33 of 100, grade D9 Nov 2026. A front door that did not open, over a developer portal with live OAuth.
• Hyundai Motor: 44 of 100, grade D9 Nov 2026. An MCP manifest that answers in invalid JSON, on a site the search engines miss.
• IBM: 27 of 100, grade F9 Nov 2026. Four agents blocked at the door of a company that sells agent platforms.
• Johnson & Johnson: 16 of 100, grade F9 Nov 2026. A challenge at the door and a three-letter domain the knowledge graph cannot place.
• JPMorgan Chase: 35 of 100, grade D9 Nov 2026. Readable and open, with no Wikipedia or Wikidata entry pointing at its own domain.
• Kroger: 20 of 100, grade F9 Nov 2026. A home page that would not open, scored on denominators of 29 and 7.
• Lockheed Martin: 40 of 100, grade D9 Nov 2026. Two JSON files that will not parse, one of them an MCP manifest.
• Marathon Petroleum: 28 of 100, grade D9 Nov 2026. A 403 for every agent, with a developer host only a search engine knows about.
• McKesson: 67 of 100, grade C9 Nov 2026. A readable distributor with no JSON-LD, scored on a Usability denominator of 24.
• Meta: 51 of 100, grade C9 Nov 2026. The maker of Muse shows an agent 296 characters of its own home page.
• Microsoft: 62 of 100, grade C9 Nov 2026. The strongest act layer so far, under a home page whose JSON-LD names nothing.
• Mitsubishi Corporation: 12 of 100, grade F9 Nov 2026. The lowest score in the series, from a home page that returned nothing.
• Nvidia: 77 of 100, grade B9 Nov 2026. The highest score in the series, with a JSON-LD block that never says Organization.
• PepsiCo: 44 of 100, grade D9 Nov 2026. A door that opens onto 510 characters and a developer portal that is a PDF.
• Pfizer: 27 of 100, grade F9 Nov 2026. A challenge for every agent, with sign-in and a GraphQL endpoint behind it.
• Phillips 66: 45 of 100, grade D9 Nov 2026. A refiner that reads well and does nothing, with a developer portal at /dashboard.
• Procter & Gamble: 40 of 100, grade D9 Nov 2026. A two-letter domain whose developer rows belong to another company entirely.
• Reliance Industries: 37 of 100, grade D9 Nov 2026. A robots.txt that is an HTML page, in front of 93,890 characters of home page.
• Samsung Electronics: 62 of 100, grade C9 Nov 2026. An API documented 7 of 7, and an /mcp path that redirects to a web page.
• Sony: 24 of 100, grade F9 Nov 2026. Six agents blocked, a portal behind them, and a brand search that lost the brand.
• Tesla: 25 of 100, grade F9 Nov 2026. A 403 for every agent at the carmaker that sells software over the air.
• The Cigna Group: 64 of 100, grade C9 Nov 2026. A readable insurer with no JSON-LD, scored on a Usability denominator of 17.
• The Home Depot: 24 of 100, grade F9 Nov 2026. Six agents challenged, with sign-in and an API endpoint waiting behind the wall.
• The Walt Disney Company: 60 of 100, grade C9 Nov 2026. A corporate site every agent can read, ranked ninth for its own name.
• Toyota: 16 of 100, grade F9 Nov 2026. The world's largest carmaker asks every assistant to prove it is human first.
• UnitedHealth Group: 64 of 100, grade C9 Nov 2026. An llms.txt in HTML, an ard.json that will not parse, and a soft 404.
• UPS: 37 of 100, grade D9 Nov 2026. A robots.txt, an llms.txt and an MCP manifest, each answering in the wrong format.
• Valero Energy: 62 of 100, grade C9 Nov 2026. Readable to every agent, with no JSON-LD and two Open Graph tags missing.
• Verizon: 48 of 100, grade C9 Nov 2026. Open to every agent, with SDKs and a portal and no sign-in for agents.
• Walgreens: 28 of 100, grade D9 Nov 2026. A pharmacy that challenges every agent, with a gated GraphQL endpoint behind the wall.
• Walmart: 59 of 100, grade C9 Nov 2026. A live MCP server at the developer portal, and a home page at 2 percent text.
• Wells Fargo: 61 of 100, grade C9 Nov 2026. A bank within reach of a B, held back by two files that answer in HTML.

Test your own site

The same scan is open to any public site at ora.ai; it takes a few minutes and needs no account. The self-check says, in business terms, what to ask for before you run it.