Website readiness profile · Snapshot 23 October 2026

kimi.com

kimi.com's public homepage, certificate and DNS checked against 31 practices and compared with 94 Generative AI Chatbots & Assistants sites.

Readiness index: 68/100
Ahead of: 30%
Practices observed: 16/28
Popularity band: Top 50K

Measured 2026-10-23 11:54:21 UTC from one location. How we measure

Readiness by lane

Green: kimi.com. Thin bar: Generative AI Chatbots & Assistants peer median.

Enable

85/100

Peers 89

Harden

54/100

Peers 62

Accelerate

83/100

Peers 77

Recover

0/100

Peers 4

Priority fixes for kimi.com

Ordered by impact and by how common each practice is among peers.

Priority 1 · Harden
DMARC policy enforces quarantine or reject
Observed: The DMARC policy for kimi.com was p=none, which asks receivers to take no action on failing mail.
Why it matters: An enforcing DMARC policy helps receiving mail systems reject email that falsely claims to come from your domain, a common route for phishing your customers.
What to do: Publish DMARC with p=none and a reporting address first, fix any legitimate senders that fail SPF or DKIM alignment, then move to quarantine and finally reject.
41% of Generative AI Chatbots & Assistants peers do this. Limit: Read from public DNS at the time of the check; records may have changed since.
Guide: A Practical Website Health Check for Owners
Priority 2 · Harden
Framing restricted
Observed: The homepage did not send frame-ancestors or X-Frame-Options, so other sites may frame it.
What to do: Send Content-Security-Policy: frame-ancestors 'self' (or a list of trusted origins). X-Frame-Options: SAMEORIGIN covers older browsers.
On Cloudflare: Add the header with a response header transform rule.
55% of Generative AI Chatbots & Assistants peers do this.
Guide: A Practical Website Health Check for Owners
Priority 3 · Enable
Social preview image set
Observed: The homepage had no og:image, so shared links may show without a preview image.
What to do: Add Open Graph tags, including og:image with a 1200 x 630 image.
80% of Generative AI Chatbots & Assistants peers do this.
Guide: SEO Checklist for a New Website
Priority 4 · Harden
Content Security Policy present
Observed: The homepage response did not include a Content-Security-Policy header.
What to do: Start with Content-Security-Policy-Report-Only to see what would break, tighten the policy over a few weeks, then enforce it.
40% of Generative AI Chatbots & Assistants peers do this.
Guide: Payment Security and PCI DSS: What Website Owners Need to Know

What kimi.com already does well

Practices fewer than half of Generative AI Chatbots & Assistants peers use.

No render-blocking scripts in <head>Head scripts load without blocking.44% of peers
HSTS kept for at least a yearHSTS with a 365-day max-age covering subdomains.46% of peers

What we saw

Homepage checked: https://www.kimi.com/
Homepage response: HTTP 200
TLS: TLSv1.3, HTTP/2
Certificate: Google Trust Services, 90-day validity, expiring 2026-12-03
CDN or edge: Cloudflare
DNS operators: Alibaba Cloud DNS
HSTS: max-age 365 days, includeSubDomains
DMARC policy: p=none
Homepage HTML: 139 KB, gzip
Images on homepage: 2 (svg 2)

Limits: homepage only, one location, one moment. Header checks reflect the homepage response; other pages may differ.

Stack and providers

Seen in the homepage response, certificate and DNS. Provider pages compare how their customers configure the same checks.

Cloudflare (cdn and edge platform)Alibaba Cloud DNS (dns operator)Google Trust Services (certificate authority)Service guide: Cloudflare

All 31 checks

Select a gap for the method and fix. How each check works

Not observed 12

Observed 16

HTTP requests move to HTTPS
HSTS kept for at least a year
TLS 1.3 negotiated
Certificate has more than 14 days left
Certificate lifetime of 100 days or less
HTTP/2 negotiated
HTML compressed
No render-blocking scripts in <head>
robots.txt published
XML sitemap discoverable
Reachable over IPv6
Canonical URL declared
Meta description written
Mobile viewport configured
Page language declared
At most one redirect to the homepage

Not measured 3

Static files cached for 30 days or more
Modern image formats in use
Offscreen images lazy-loaded

Own kimi.com?

Re-run the checks after a change, or verify the site in a free workspace to save reports with history, compare against similar sites and competitors, and track a private action plan. What owners get.

Re-check kimi.com now Add to owner workspace Request a correction or removal

Live status for this site: Status Is Down: kimi.com. This profile covers configuration only.

Compare with other Generative AI Chatbots & Assistants sites

Generative AI Chatbots & Assistants readiness benchmark