Lockheed Martin: 40 of 100 on Ora's agent-readiness scan

The score

Lockheed Martin is a defence and aerospace manufacturer based in Bethesda, Maryland.

• 40of 100, grade D
  Ora's agent-readiness scan of lockheedmartin.com, read 9 November 2026.
• 3Discovery, of 10
  Whether assistants find the company: search presence, Wikipedia and Wikidata, catalogues.
• 29Access, of 59
  Whether they can read it: the door, text without JavaScript, llms.txt, structured data.
• 22Usability, of 57
  Whether they can act through it: an MCP server, an API with a specification, sign-in for agents.
• 0Payments, of 0
  No check in this layer applied to the site.

43 percent of the 132,085 domains Ora ranks score under 40, and the average score is 44.

What an assistant meets at the door

Before an assistant can read, compare or buy, it has to get in. These rows are the door: whether the bot shield lets the main agents through, what robots.txt tells the search, training and user-triggered agents, and whether the home page has text without running JavaScript.

What it can read, and what it can do

The reading layer is what an assistant takes away from the pages: a text file written for it, markdown on request, structured data about the company, a sitemap. The act layer is whether it can do anything through a published interface rather than by clicking through the site.

The six payment checks did not apply on this read: Ora did not read the site as a shop.

Three fixes to hand to the web team

Ora estimates how many points each open check would return. These are the largest on this read, in Ora's words where it gave them, so a leader can hand the list over without translating it.

1. Public API with reachable endpoints, worth about 5.5 points by Ora's estimate: No publicly reachable API surface detected (REST and GraphQL both absent or auth-gated).
2. Developer resource discoverability, worth about 4.4 points by Ora's estimate: Agent struggled to find developer resources by name - only 1 result(s) out of 9. Not found in this search sample: API docs, OpenAPI spec, developer portal, auth docs, MCP server, SDK documentation.
3. Brand name discoverability, worth about 4.4 points by Ora's estimate: lockheedmartin.com appears once in brand-name search results for "Lockheed Martin" (position #6 out of 6).

Our read

Lockheed Martin has built more of the act layer than its D shows. ClaudeBot and Google-Extended get in while GPTBot and ChatGPT-User are blocked, robots.txt allows every crawler, the home page gives 1,549 characters with an H1 at a 4 percent text ratio, the sitemap lists 2,075 pages and the metadata is complete, so the Access layer reads 29 of 59; the JSON-LD blocks contain invalid JSON, and the llms.txt at /.well-known/llms.txt returns an HTML page. Behind that sit a portal at /console, documentation at /api, OpenID Connect discovery, and an MCP manifest at /.well-known/mcp/manifest.json that answers in something other than valid JSON; there is no reachable public API and no OpenAPI specification, so the Usability layer reads 22 of 57. The Discovery layer is 3 of 10: the domain appears once, last of six, in a search for its own name, and no Wikipedia article or Wikidata item points at it. Two broken JSON files, the structured data and the MCP manifest, are the cheapest points on this page.

Test your own site

Run the same scan on your own domain at ora.ai. The score, the layers and the fixes on this page come from its public result for lockheedmartin.com; a scan of a public site takes a few minutes and needs no account.

• Scan your domain on OraThe same checks, the same scoring, on your own site.
• The self-check, 18 questionsWhat to ask for, in business terms, before the scan.
• All the 360 checksThe other companies in this series, newest first.