CMS
Squarespace audit: templates, thin HTML, and a proxy for headers
· Configuration notes, not a newsroom.
Squarespace fingerprints from sqs-block and their CDN. SiteRune will not invent a header UI Squarespace does not have. Cloudflare in front is the usual path.
The admin is not nginx
Missing HSTS and CSP on Squarespace are not a plugin miss. They are a platform limit. The headerFix in SiteRune says: put a CDN in front and set the headers there. We will not tell you to paste an .htaccess file into Squarespace.
Template SEO is still SEO
Collection pages with empty titles, noindex leftovers on blog pagination, and a homepage that is only a video poster will fail the same findings as WordPress. llms.txt and Organization schema are files and JSON-LD you can still add. Robots that ban GPTBot are a setting, not destiny.
Run it on a live URL
The brief will name your CMS and attach the files. Three guest scans, no card.