SEO / Portfolio / Public Site
Professional Website Review of Intelligence724
Report summary
Intelligence724 presents a distinctive and potentially credible consulting position : process-first, vendor-independent machine-intelligence advisory focused on measurable workflows rather than indiscriminate AI adoption. The strongest parts of the site are its disciplined language around evidence,
Key topics
- SEO / Portfolio / Public Site
- SEO
- Portfolio
- Public Site
- AI
- WordPress
- Runtime
- Privacy
- Semantic Systems
Research provenance
For citation, use the report title and canonical URL. Archival presence does not establish authorship or promote report statements into portfolio evidence.
Source availability: 50 citation markers in the source export have no recoverable source links. Those markers are omitted from this reader; any supplied bibliography and ordinary links remain. Check the original sources before relying on the cited claims.
This page renders the archived Markdown as safe, formatted HTML. It is background research and does not become a portfolio claim without evidence review.
Full report
On this page
Executive summary
Intelligence724 presents a distinctive and potentially credible consulting position: process-first, vendor-independent machine-intelligence advisory focused on measurable workflows rather than indiscriminate AI adoption. The strongest parts of the site are its disciplined language around evidence, human accountability, stop conditions, vendor independence, public pricing, and the separation of historical consulting experience from modern AI outcome evidence. The service pages are generally more substantive than typical consulting-site copy and reference recognized sources such as NIST, ISO, OWASP, and CISA.
The principal problem is a material gap between the site’s evidence-led positioning and the evidence actually presented about Intelligence724 itself. There are no visible, verified Intelligence724 case studies, client outcomes, testimonials, named practitioners, leadership biographies, professional credentials, or representative deliverables. The About page explicitly says the practice is still building its independent record and does not claim inherited AI outcomes. That intellectual honesty is commendable, but at the published price points—starting at $18,000 for a diagnostic and $150,000 for a controlled pilot—the absence of delivery proof becomes a significant commercial obstacle.
Several public pages also expose language that reads like unfinished theme documentation or prelaunch instructions rather than approved website copy. The About page says the precise legal relationship with Info724 “should be configured by the site owner in theme settings and legal documents”; the pricing page says public pricing can be disabled in theme settings; and the privacy and legal pages warn that leadership or counsel still needs to review them against the live entity and practices. These statements make the site appear unfinished and undermine trust more than ordinary copy imperfections would.
The most serious content-quality defect is the Insight library. Multiple ostensibly distinct articles contain the same generic paragraphs under different section headings. For example, articles about a buyer-side AI portfolio office, stalled implementation rescue, deciding against AI, and prompt-injection security repeatedly use identical passages about turning an idea into a decision artifact and asking whether a complete system improves defined work. This creates the appearance of programmatically generated or incompletely edited content and directly conflicts with the site’s claims of research-backed, carefully bounded guidance.
Technically, the apex HTTPS site was reachable, but the www hostname returned a 502 error during the audit. More importantly, the HTML sitemap states that a WordPress XML sitemap is the machine crawl inventory, while the conventional WordPress sitemap endpoint returned 404. Publicly surfaced URLs also rely heavily on query parameters such as ?page_id= and custom-post query strings, creating a less polished appearance and potential canonicalization risk unless canonical tags and redirects are correctly configured.
The overall assessment is therefore:
| Dimension | Provisional assessment | Principal conclusion |
|---|---|---|
| Branding and positioning | Moderate to strong | Differentiated philosophy, but jargon-heavy and too broad |
| Content quality and depth | Weak to moderate | Strong service methodology; serious duplication in Insights |
| UX and information architecture | Moderate | Comprehensive, but overly dense and repetitive |
| Visual communication | Moderate, provisional | Structured design, but too much abstract copy and too little proof-oriented visualization |
| Technical and SEO foundations | Weak to moderate | HTTPS apex works; www, sitemap, URL and validation issues require attention |
| Trust and credibility | Weak | Policies exist, but people, entity details and client evidence are missing |
| Conversion and engagement | Moderate | Clear high-intent offer, but competing CTAs and form friction |
| Security and privacy posture | Moderate, unverified | Privacy-conscious claims, but legal status and technical controls need independent verification |
Overall priority: the site should not primarily be treated as a design-refresh project. The immediate need is a credibility and publication-quality remediation: remove internal notes, repair duplicated content, clarify the operating entity, resolve the www and sitemap failures, identify the people delivering the work, and add verifiable proof or clearly labeled demonstration artifacts.
Audit scope and methodology
The review covered the homepage, service and industry indexes, representative service pages, the Why and About pages, pricing, contact, privacy, terms, accessibility, editorial standards, source policy, vendor-independence charter, HTML sitemap, and several Insight articles. The evaluation was performed on August 4, 2026, against the public site; no authenticated or client-only content was identified, so any materials behind login remain unspecified.
The technical review included hostname behavior, HTTPS reachability, sitemap behavior, public URL structure, the available SSL Labs test, and the site’s own accessibility, privacy, editorial, and security representations. Google PageSpeed Insights describes its assessment as a combination of Lighthouse lab testing and, where sufficient traffic exists, Chrome User Experience Report field data. A completed site-specific PageSpeed report did not surface through the accessible audit interface, so no performance score or Core Web Vitals result has been invented in this report.
Google retired its standalone Mobile-Friendly Test on December 1, 2023, so current mobile evaluation should use Lighthouse, PageSpeed Insights, Chrome responsive testing, and manual device checks rather than citing the retired tool as a present-day pass/fail authority.
The W3C Nu HTML Checker is the appropriate primary validation tool, but a completed Intelligence724-specific error report was not retrievable in the available audit session. W3C also cautions that validation is a quality-control aid rather than a complete guarantee of accessibility, usability, or interoperability. The recommendation is therefore to run and archive a fresh validator report during remediation rather than interpreting the absence of a completed report as a pass.
The SSL Labs endpoint recognized the apex host and IP address but remained in an in-progress state in the accessible report, so a final TLS grade was not available. The existence of HTTPS should not be confused with confirmation of protocol, certificate-chain, cipher-suite, HSTS, or security-header quality.
Pixel-level judgments about typeface rendering, exact color contrast, animation behavior, breakpoints, and touch-target dimensions remain provisional because the available web extraction exposed content hierarchy rather than a complete browser screenshot. The structural annotations below reconstruct the live hierarchy and conversion journey; they are not pixel-for-pixel captures.
Branding, positioning, content, and trust
The core market position is meaningful but not yet expressed in the simplest buyer language. “Modernize the work. Apply the right intelligence. Prove the result.” is stronger than generic “AI transformation” language, and the supporting principles—process-first, vendor-independent, evidence-led, and human-accountable—create a coherent point of view. The site also makes a responsible argument that a conventional process or no-AI solution may be the correct answer.
The weakness is that the hero initially foregrounds methodology more than audience and business outcome. The homepage later identifies operating leaders and specific outcomes, while service pages identify buyers such as COOs, CFOs, risk leaders, decision owners, and technology leaders. That information should be brought into the first screen.
A clearer opening could be:
Improve one high-value workflow before committing to AI.
Intelligence724 helps mid-market operating leaders measure the current process, compare AI and non-AI options, run a controlled pilot, and make an evidence-based scale or stop decision.
That wording retains the differentiation while immediately answering who the company serves, what changes, and what the engagement produces.
The offer is too broad for an emerging practice with limited public proof. The site presents eight service categories and at least ten industry paths, spanning strategy, workflow automation, enterprise knowledge, predictive systems, bounded agents, governance, procurement, implementation rescue, logistics, insurance, manufacturing, banking, healthcare, legal operations, biotechnology, software, and the public sector. Breadth may represent real capability, but without named experts or case evidence it can read as aspirational rather than established specialization.
A more credible launch position would lead with two or three beachheads, such as:
“We specialize in document-heavy, exception-heavy workflows in commercial insurance, logistics, and professional services.”
The broader capabilities can remain available, but the homepage should emphasize where Intelligence724 has the strongest repeatable method, buyer access, and relevant experience.
Brand architecture between Intelligence724 and Info724 remains unclear. The site calls Intelligence724 a “modern sister practice” and points to Info724’s consulting history. Yet the About FAQ says the exact legal and organizational relationship still needs to be configured, and the footer uses an info724.com email address rather than an Intelligence724 address. A prospective client cannot readily tell whether Intelligence724 is a trade name, product line, separate company, division, or informal brand.
The site should publish one definitive statement, for example:
“Intelligence724 is a service line of [full legal entity name], the company that operates Info724. Contracts, invoicing, data processing, and professional liability are handled by that legal entity.”
If it is a separate company, the wording should instead identify both entities and explain any shared ownership, personnel, intellectual property, or delivery resources.
Internal implementation notes are visible to the public. This is the highest-priority professionalism issue. References to what the “site owner” should configure, whether public pricing can be disabled in theme settings, and whether leadership or counsel has reviewed public policies sound like instructions intended for an administrator or template purchaser. They signal that the site may have been published before final governance and legal review.
All such language should be removed immediately. The relevant policies should instead provide an effective date, legal entity, jurisdiction, policy owner, revision history, and contact route.
The Insight library contains substantial repeated boilerplate. The title and executive answer of each article are usually specific, but much of the middle content is not. Under unique headings such as “What the office owns,” “Estimate to complete,” “No-AI triggers,” and “Untrusted content and trust labels,” identical generic passages recur. Even the same questions, application checklist, source list, FAQs, and CTA blocks appear across multiple articles.
This is more damaging than ordinary repetition because the pages label themselves “research-backed guidance and method synthesis.” The visible repetition suggests one of three possibilities to a sophisticated reader: unfinished templating, automated content expansion, or insufficient subject-matter review. It may also create low-differentiation pages that search engines perceive as thin or duplicative.
The recommended fix is to unpublish or noindex incomplete articles until each contains:
- A genuinely topic-specific argument and decision framework.
- At least one worked example or scenario.
- Sources mapped to individual factual or normative claims.
- Limitations and counterarguments unique to the topic.
- An original checklist, table, diagram, or diagnostic artifact.
- A named author and substantive reviewer.
For example, the prompt-injection article should include a trust-boundary diagram, attack paths, deterministic authorization controls, evaluation cases, and links from each recommendation to the specific OWASP, NIST, or CISA guidance supporting it—not generic process-management paragraphs.
Source quality is stronger than source application. The standards page appropriately distinguishes voluntary alignment from certification and cites recognized primary organizations. Representative service pages also cite NIST. This is a substantive strength.
However, many Insight pages append the same four references without showing which source supports which claim. A bibliography is not equivalent to claim-level evidence. The editorial standard’s distinction among verified fact, inference, unknown, and decision is excellent in principle, but the articles should visibly implement it with inline citations, footnotes, or source markers tied to specific passages.
Industry priority scores are unexplained. The industry index gives numerical values such as 88/100 and 86/100, but the visible page does not explain the scoring model, weights, evidence source, sample, date, or uncertainty. An unexplained score creates false precision and is inconsistent with the site’s explicit stance against precise-looking answers based on weak evidence.
The best correction is either to remove the numbers or publish the full rubric. A defensible display would read:
Priority fit: High
Based on transaction volume, document intensity, exception frequency, measurable cycle time, data availability, reversibility, and regulatory consequence. Assessed August 2026; this is a market hypothesis, not a client-specific finding.
Trust signals are policy-rich but person-poor. The site has unusually detailed policy pages covering editorial standards, evidence boundaries, vendor independence, accessibility, privacy, terms, and responsible use. Those are valuable institutional signals.
Yet no visible page in the reviewed information architecture identifies the principal consultants, founders, delivery leaders, technical reviewers, or governance advisers. The About page discusses experience categories but not who possesses that experience. At consulting prices reaching six figures, buyers will reasonably ask who is accountable, who performs the work, and whether the stated expertise resides in employees, owners, partners, or subcontractors.
The About page should include professional photographs, names, roles, concise biographies, relevant project history, certifications where applicable, external profiles, speaking or publication history, and explicit disclosure of the delivery model. If the practice is intentionally principal-led, state:
“Every engagement is led by [name and title]. Specialist subcontractors are identified and approved in writing before accessing client information or performing delivery work.”
Client proof is intentionally absent, but an alternative proof strategy is still necessary. The About page says Intelligence724 intends to build its own record and does not inherit unverified customer logos or AI outcomes from Info724. This is ethically sound, but the site currently substitutes extensive method copy for evidence that the method can be executed.
Until verified case studies exist, the practice should publish demonstration evidence that is clearly labeled as such:
- A redacted sample diagnostic.
- A fictional but realistic workflow baseline.
- A model-versus-rules evaluation template.
- A completed scale-gate memorandum.
- A sample governance evidence register.
- A sample cost-per-successful-outcome calculation.
- A detailed pilot plan with acceptance and stop criteria.
These artifacts must be marked “illustrative example—not a client result.” That would preserve honesty while demonstrating implementation competence.
UX, information architecture, visual design, and conversion
The site contains a substantial amount of well-organized material, but its architecture resembles a knowledge system more than a focused consulting-sales journey. The navigation exposes eight service areas, multiple industry paths, search, diagnostic entry points, method pages, evidence pages, policy pages, and a large Insight library. The HTML sitemap confirms a broad public inventory with dozens of routes.
[Figure omitted from source export: Annotated structural audit map of the Intelligence724 homepage]
Figure: Structural reconstruction of the homepage from the live content hierarchy, highlighting density, unexplained scores, repeated evidence modules, and competing calls to action. It is not a pixel-for-pixel screenshot.
The global navigation is too expansive for first-time visitors. The services and industries menus attempt to expose most of the catalog immediately. This supports expert exploration but increases decision cost for an executive who only wants to know whether the firm can help with one workflow.
A simpler primary navigation would be:
Services | Industries | How We Work | Proof | About | Contact
“Proof” could contain case studies, demonstration artifacts, standards, and evidence policies. Detailed service and industry paths can remain in secondary menus and the sitemap.
The homepage overuses governance metadata. Blocks such as “This page answers,” “Decision enabled,” “Evidence status,” “Last reviewed,” and “Claim boundary” are intellectually consistent with the brand. On every marketing page, however, they delay the benefit narrative and make the experience feel more like regulated documentation than executive communication.
Retain the metadata but collapse it into an “Evidence and limitations” drawer or compact sidebar. On the homepage, one concise trust statement is enough:
“Method claims are supported by published sources. Client outcomes are reported only when verified and approved.”
The site repeats entire conversion sections across pages. Service pages, policy pages, articles, and the sitemap frequently end with both “Start with evidence” and “Evidence before scale” blocks, followed by variants of assessment, diagnostic, and Scale Gate buttons. Repetition extends the page length without necessarily improving decision clarity.
One reusable conversion module should be sufficient:
Primary CTA: Request a workflow diagnostic
Secondary CTA: View a sample diagnostic deliverable
The current labels—“Request Workflow Evidence Diagnostic,” “Review diagnostic,” “Request an assessment,” “Start a diagnostic,” “Discuss this service,” and “Review the Scale Gate”—should be consolidated into a stable action vocabulary.
Visual communication relies too heavily on abstract prose. The pages reference images in the extracted hierarchy, but their core explanatory burden remains textual. For a consultancy selling workflow reconstruction, architecture, evaluation, governance, and scale gates, the highest-value imagery would be real method artifacts rather than decorative graphics. Representative pages discuss decision maps, loss functions, baselines, data lineage, evaluation, monitoring, and rollback, yet do not expose enough sample visual evidence of those outputs in the rendered content.
Recommended visual additions include:
- A before-and-after workflow map.
- A one-page engagement ladder.
- A sample evaluation scorecard.
- A system-boundary architecture diagram.
- A scale/defer/stop decision tree.
- A sample evidence register.
- A visual comparison of AI, rules, workflow redesign, and no-change alternatives.
This would increase credibility while reducing the need for repetitive explanatory copy.
Typography and color should be reassessed through a formal responsive design review. The content structure contains long headings, dense paragraphs, tabular pricing, numbered steps, FAQs, metadata, and multiple CTA blocks. Even with competent typography, this information volume can become difficult on narrow screens. The accessibility page claims semantic HTML, visible focus, responsive layouts, contrast targets, labels, reduced-motion support, and skip links, but does not state a WCAG conformance level or provide an audit report.
The visual acceptance criteria should include WCAG 2.2 AA contrast, 200% text zoom without loss of content, 320 CSS-pixel reflow, visible keyboard focus, minimum practical touch-target sizes, short line lengths for long-form reading, and testing of tables and accordions on small screens.
The contact experience asks for significant commitment before enough relational trust has been established. The page requests detailed process and organizational information, describes a human qualification workflow, warns against transmitting sensitive material, and asks for privacy consent. This is responsible, but demanding for a first interaction. It also lacks a prominently stated response-time commitment and a low-friction scheduling route.
[Figure omitted from source export: Annotated friction map of the Intelligence724 contact journey]
Figure: Structural reconstruction of the contact journey, showing qualification burden, the confidentiality warning, and the lack of a clearly stated response-time or scheduling path. It is not a pixel-for-pixel screenshot.
A progressive form would first ask for name, work email, organization, workflow, and desired outcome. Deadline, evidence availability, accountable owner, systems, risk, and budget can appear after the visitor selects “Continue” or can be gathered during a discovery call.
Suggested confirmation text:
“A senior practitioner reviews every submission. You will receive a response within two business days. We do not add inquiries to automated sales sequences.”
For visitors with sensitive requirements, provide a secure alternative:
“Do not send confidential or regulated information through this form. Request a secure intake link or mutual NDA first.”
Pricing transparency is a strength but should be incorporated into the buyer journey. The site publishes unusually specific planning ranges, including $2,500 for an executive opportunity session, diagnostics from $18,000, pilots from $150,000, and implementations from $400,000. This helps qualify buyers and differentiates the practice from consultancies that hide all commercial expectations.
The page should be linked more prominently from Services and paired with “what the client receives,” example timelines, client responsibilities, and fit criteria. At present, the ranges can feel large relative to the limited public proof. Showing a sample deliverable beside each tier would improve perceived value.
Conversion measurement is not described. The privacy page says the site does not use external analytics, advertising pixels, social widgets, remote fonts, or third-party form processors. That is a meaningful privacy advantage, but it leaves unclear whether the organization measures CTA usage, form completion, field abandonment, channel attribution, content engagement, or qualified-lead conversion through privacy-preserving first-party analytics.
A suitable approach would use minimal first-party or self-hosted analytics, avoid cross-site identifiers, document retention, and record events such as service-page CTA selection, form start, form completion, and sample-artifact download. The privacy policy should state exactly what is measured.
Technical performance, accessibility, SEO, security, and privacy
The www hostname is broken. Both HTTP and HTTPS requests to the www form produced a 502 response during the audit, while the apex domain was available. This can lose direct traffic, break old links, confuse users, fragment analytics, and create inconsistent search-engine signals.
The fix is straightforward: configure DNS and the web server so every www request has a valid certificate and returns a permanent 301 redirect to the chosen canonical apex URL. Test all combinations of HTTP/HTTPS and apex/www after deployment.
The advertised XML sitemap appears unavailable. The HTML sitemap states that the WordPress XML sitemap remains the machine crawl inventory and provides an “Open the WordPress XML sitemap” link. The standard WordPress sitemap endpoint returned 404 in the audit. This is a direct contradiction between the site’s SEO documentation and its technical behavior.
Restore the XML sitemap, include only canonical indexable URLs, use accurate lastmod values, reference it in robots.txt, submit it to Google Search Console and Bing Webmaster Tools, and add an automated uptime test that alerts on non-200 sitemap responses.
Public URLs look like WordPress implementation routes. Reviewed pages resolve to patterns such as ?page_id=14, ?i724_service=predictive-decision-intelligence, and ?i724_insight=no-ai-best-answer. Parameterized URLs can be indexed, but they are less readable, less shareable, and more vulnerable to duplicate/canonical inconsistencies than clean paths.
Recommended routes would be:
/about/
services/predictive-decision-intelligence/
insights/when-no-ai-is-the-best-answer/
industries/commercial-insurance/
Every current parameter URL should 301-redirect to one clean canonical route. Canonical tags, Open Graph URLs, structured-data URLs, internal links, and sitemap entries should all use the same version.
Titles are generally descriptive, but metadata and structured data require source-level verification. Page titles such as “Predictive and Decision Intelligence | Intelligence724” and “About Intelligence724 | Process-First AI Consulting” are specific and useful. The rendered extraction does not establish whether every page has a unique meta description, canonical element, Open Graph data, Twitter card data, or valid JSON-LD.
At minimum, implement and test:
OrganizationorProfessionalServicewith the legal name, brand name, address, telephone, and official profiles.Personfor named principals.Servicefor major service pages.Articlefor Insights, including genuine author, publisher, published date, and modified date.BreadcrumbList.FAQPageonly when the visible content and current Google eligibility requirements justify it.- Unique titles and descriptions based on search intent rather than repeated brand language.
The same-day publication pattern across numerous articles and uniform “4 minutes” labels should also be reviewed. When combined with repeated article text, it can make the library appear bulk-generated rather than progressively developed and reviewed.
Performance has not been baselined with publishable evidence. PageSpeed Insights is designed to report mobile and desktop lab data and, when available, real-user field data. No completed Intelligence724 result was available through the audit interface, and the site does not publish a performance budget or monitoring status.
Run repeatable tests against the homepage, a service page, an Insight article, and the contact page. Record mobile and desktop Lighthouse scores plus LCP, INP or TBT in lab testing, CLS, FCP, TTFB, total transfer size, request count, JavaScript execution time, and image weight. A reasonable remediation target is to pass Core Web Vitals at the 75th percentile where field data exists and to prevent regression through continuous testing.
Because the homepage and content pages are long and image-bearing, likely optimization areas to verify—not assume—include image dimensions and modern formats, lazy loading below the fold, font loading, CSS and JavaScript payloads, cache headers, server response time, unused WordPress assets, database/page caching, and third-party requests.
Accessibility is currently self-attested rather than demonstrated. The accessibility page lists semantic HTML, keyboard navigation, focus indicators, reduced-motion support, responsive layout, contrast targets, labels, skip links, and validation handling. It does not identify WCAG 2.1 or 2.2, an A/AA level, the date and scope of an independent audit, known limitations, assistive technologies tested, or a dedicated accessibility contact.
Replace general assurances with an accountable statement:
“Intelligence724 targets WCAG 2.2 Level AA. The site was last evaluated on [date] using automated testing, keyboard-only navigation, NVDA with Chrome, VoiceOver with Safari, 200% zoom, and mobile reflow. Known limitations: [list]. Report barriers to [email or form].”
Automated Lighthouse and axe testing should be paired with manual keyboard, screen-reader, zoom, reflow, focus-order, error-message, accordion, navigation-menu, and form-label testing. W3C validation should be used to catch structural markup defects but not treated as a complete accessibility audit.
TLS and security headers remain unverified. The site is served over HTTPS on the apex domain, and SSL Labs recognized the host, but the accessible test had not completed and did not provide a grade. There is therefore no evidence in this audit of the exact TLS versions, certificate-chain quality, HSTS configuration, cipher support, or vulnerability status.
Complete and archive a new SSL Labs scan and verify, at minimum:
Strict-Transport-Security
Content-Security-Policy
X-Content-Type-Options: nosniff
Referrer-Policy
Permissions-Policy
frame-ancestors in CSP
A Content Security Policy should be deployed in report-only mode first, observed for violations, and then enforced. HSTS should be enabled only after both apex and www HTTPS behavior is correct.
The privacy posture is promising but the policy is not legally production-ready. The privacy page says there are no external analytics, advertising pixels, social widgets, remote fonts, or third-party form processors. It also says WordPress, hosting, email, and security tools may process technical data and that inquiries are stored as private WordPress records. These are helpful disclosures.
However, the policy’s own caveat says authorized leadership and counsel still need to review it against the live legal entity, hosting, email routing, retention, jurisdictions, and actual practices. It should identify the controller or business, the effective date, categories and purposes of processing, legal bases where applicable, specific processors or processor categories, retention periods, cross-border transfers, security approach, user rights, complaint routes, and the contact for privacy requests.
The absence of a cookie banner is not automatically a defect. If the site genuinely uses no nonessential cookies or comparable client-side storage, a banner may be unnecessary and could be worse than a truthful no-tracking design. The site nevertheless acknowledges that WordPress, hosting, and security systems may process technical data. A formal cookie and storage inventory should verify whether session, anti-abuse, security, preference, or authentication cookies are set.
The rule should be: do not add a cosmetic banner by default. Add consent controls only if nonessential storage or tracking is actually introduced, and make the policy match observed behavior.
Form-security claims are not independently verified. The contact and privacy pages refer to human review, no third-party form processor, anti-abuse controls, input handling, and WordPress storage. These representations are positive, but a public statement cannot establish that sanitization, escaping, CSRF protection, rate limiting, file handling, email routing, access control, backups, logging, and deletion operate correctly.
The form should undergo authenticated and unauthenticated security testing, with particular attention to CSRF, stored and reflected cross-site scripting, header injection, spam bypass, enumeration, excessive submission, log exposure, WordPress privilege boundaries, and retention deletion.
No visible vulnerability-disclosure mechanism was identified. A consultancy offering AI governance, security-informed architecture, and controlled automation would benefit from a security.txt file and a simple vulnerability-disclosure page. This is not a substitute for security controls, but it signals operational maturity and provides researchers with a safe reporting channel.
WHOIS has largely transitioned to RDAP for authoritative registration-data access. Current domain-registration verification should use ICANN-supported RDAP rather than depending on legacy WHOIS output. An Intelligence724-specific RDAP record was not available through the accessible audit results, so registrar, creation date, status codes, and registrant disclosure are left unspecified rather than guessed.
Consolidated issue register
Priority definitions are: P0 immediate release-blocking or trust-critical remediation; P1 next remediation cycle, preferably within 30 days; P2 subsequent optimization, preferably within the next quarter.
| Ref. | Dimension and concise issue | Severity | Suggested fix and example | Effort | Priority |
|---|---|---|---|---|---|
| A | Public pages expose theme instructions and unapproved-policy caveats | High | Remove references to theme settings, site-owner configuration, and pending counsel review. Publish approved entity-specific copy with effective dates. | Low–Medium | P0 |
| B | Insight articles contain repeated generic paragraphs under unrelated headings | High | Unpublish or noindex incomplete articles; rewrite each around topic-specific analysis, examples, sources, diagrams, counterarguments, and a named reviewer. | High | P0 |
| C | No verified Intelligence724 case studies or outcome proof | High | Publish two or three approved case studies. Until then, provide clearly labeled illustrative deliverables and demonstration evaluations. | High | P0 |
| D | No visible named team, leadership, qualifications, or delivery accountability | High | Add names, roles, biographies, credentials, relevant experience, external profiles, and employee/subcontractor delivery disclosures. | Medium | P0 |
| E | Legal and organizational relationship with Info724 is unspecified | High | Name the contracting and data-controlling entity and explain whether Intelligence724 is a company, division, DBA, or service line. | Medium | P0 |
| F | www hostname returns 502 | High | Configure DNS, certificate, and a 301 redirect from all www variants to the canonical apex hostname. | Low | P0 |
| G | Claimed WordPress XML sitemap returns 404 | High | Restore the sitemap, reference it in robots.txt, submit it to search engines, and monitor it for availability. | Low | P0 |
| H | Industry scores such as 88/100 lack a visible methodology | High | Remove numeric scores or publish criteria, weights, source data, assessment date, uncertainty, and limitations. Prefer High/Medium/Low fit labels. | Low–Medium | P0 |
| I | Evidence-led positioning exceeds available company-specific evidence | High | Create a proof center separating client outcomes, demonstration proof, method sources, historical heritage, and unresolved evidence gaps. | High | P1 |
| J | Hero message is differentiated but jargon-heavy and audience-light | Medium | Lead with target buyer, workflow problem, deliverable, and decision. Example: “Improve one high-value workflow before committing to AI.” | Medium | P1 |
| K | Eight services and many industries make the practice appear overly broad | Medium | Lead with two or three flagship offers and two or three best-fit sectors; place the full catalog behind secondary navigation. | Medium | P1 |
| L | Info724 email address weakens Intelligence724 brand continuity | Medium | Use an Intelligence724-domain address or explicitly label the Info724 entity relationship beside the address. | Low | P1 |
| M | Navigation and homepage hierarchy impose high cognitive load | Medium | Reduce primary navigation to Services, Industries, How We Work, Proof, About, and Contact. Use task-based landing routes. | Medium | P1 |
| N | Governance metadata interrupts marketing flow | Medium | Move evidence status, review date, and claim boundary into a compact expandable panel; retain only essential limitations inline. | Medium | P1 |
| O | CTA labels vary across pages and compete with one another | Medium | Standardize one primary action—“Request a workflow diagnostic”—and one secondary proof action. | Low | P1 |
| P | Contact form requires extensive detail on first interaction | Medium | Use progressive disclosure, reduce first-step fields, add a secure-intake option, and state a two-business-day response expectation. | Medium | P1 |
| Q | No scheduling path for qualified prospects | Low–Medium | Offer a calendar only after basic qualification, or include “Request available times” in the confirmation flow. | Low | P1 |
| R | High pricing is not paired with enough sample deliverable detail | Medium | Add example timelines, acceptance criteria, client responsibilities, and a representative output beside each pricing tier. | Medium | P1 |
| S | Sources are often appended generically rather than mapped to claims | Medium | Add inline citations or numbered footnotes to specific claims; disclose whether a passage is source fact, consultant synthesis, or recommendation. | Medium | P1 |
| T | Parameterized WordPress URLs reduce polish and may create canonical risk | Medium | Adopt clean permalink paths and 301-redirect parameter versions; align canonicals, sitemaps, social metadata, and internal links. | Medium | P1 |
| U | Structured data, canonical tags, meta descriptions, and social cards are not independently verified | Medium | Run source-level SEO QA and Google Rich Results testing; implement Organization, Person, Service, Article, and Breadcrumb schema where valid. | Medium | P1 |
| V | Accessibility claims lack a WCAG target and independent test record | Medium | Target WCAG 2.2 AA, publish audit scope/date/known limitations, and perform manual keyboard, screen-reader, zoom, and reflow tests. | Medium | P1 |
| W | No publishable PageSpeed or Core Web Vitals baseline | Medium | Test representative templates in PSI/Lighthouse, record metrics, create performance budgets, and add regression monitoring. | Medium | P1 |
| X | Final SSL Labs grade and HTTP security headers are unverified | Medium | Complete TLS and header scans; correct www; deploy HSTS, CSP, nosniff, Referrer-Policy, Permissions-Policy, and frame restrictions. | Low–Medium | P1 |
| Y | Privacy and terms do not appear finalized for the live entity | High | Obtain legal and operational approval; state entity, purposes, retention, processors, rights, jurisdiction, effective date, and request channels. | Medium | P0 |
| Z | Analytics and conversion measurement are unspecified | Low–Medium | Implement documented, privacy-preserving first-party events for CTA use, form start/completion, and artifact downloads. | Medium | P2 |
| AA | Cookie and browser-storage behavior is not documented through an inventory | Low | Audit actual cookies and storage. Use consent only for nonessential processing and keep policy language synchronized with behavior. | Low | P2 |
| AB | No visible vulnerability-disclosure route or security.txt | Low | Add a security contact, scope, safe-harbor language, response expectations, and standards-compliant security.txt. | Low | P2 |
| AC | Visual communication lacks enough real method and proof artifacts | Medium | Replace abstract/decorative imagery with workflow maps, scorecards, architecture boundaries, evidence registers, and scale-gate examples. | Medium–High | P1 |
| AD | Article dates, reading times, FAQs, sources, and templates appear overly uniform | Medium | Review publication history, calculate reading time from final copy, vary structure by topic, and publish progressively after substantive review. | Medium | P1 |
Prioritized remediation roadmap
Immediate stabilization should begin with publication integrity. Remove every public-facing theme instruction and pending-review disclaimer; suspend or noindex the duplicated Insight pages; identify the legal entity; approve privacy and terms; clarify the Info724 relationship; and correct the Industry score presentation. These changes are more important than adding new content because the existing defects directly contradict the brand’s claims of evidence discipline and accountable governance.
Technical stabilization should occur in the same release. Repair the www hostname, restore the XML sitemap, choose a canonical hostname and clean permalink structure, redirect parameter URLs, verify robots.txt, and rerun SSL Labs, PageSpeed Insights, Lighthouse, W3C validation, schema testing, and security-header testing. Archive the outputs so future deployments can be compared against an accepted baseline.
The next release should establish human and delivery credibility. Publish named leadership and practitioner profiles, disclose the delivery and subcontractor model, create a proof center, and add three to five representative artifacts. A complete illustrative diagnostic is likely to be more persuasive than another ten abstract Insights.
The sales journey should then be simplified. Narrow the homepage around one buyer, one workflow, one diagnostic, and one decision. Reduce navigation breadth, consolidate CTA labels, shorten the first contact step, state response expectations, and link pricing to concrete deliverables. The most commercially effective path would be:
Problem or industry page → flagship diagnostic → sample deliverable → pricing and fit → short qualification form → human review.
Only after those corrections should the site scale its Insight library. Each new article should pass a publication gate requiring topic-specific substance, claim-level sourcing, an original example or artifact, named authorship, independent review, and a clear reason the article deserves its own URL. The editorial standard already contains much of the right philosophy; the central task is to make the published content conform to that standard.