SecuritylabAugust 28, 2026🇷🇺Translated from Russian

ChatGPT Knows Your Company but Google Doesn't: Step-by-Step Guide to Diagnosing AI Visibility Issues

The complaint “we are not in the neural networks” is not a single diagnosis but a symptom of at least six different failures, each fixed by contradictory actions. A model may simply never have learned the brand. A search crawler may be receiving an immediate refusal. A single line in a page template may be blocking the text from being used in a generative answer. A page may be indexed yet consistently lose to competitors during source selection. A system may mention the company without a link. Traffic may arrive yet disappear into “direct” visits.

Verification is required to turn the complaint into concrete diagnoses. The recommended workflow measures what needs to be measured, in what order, with which tool, and how to avoid mistaking noise for signal. A complete first pass takes one working day and requires no paid services.

Three separate layers produce the same-looking answer

Model knowledge is tested by asking questions with search disabled. The fact that ChatGPT knows a company does not prove the site itself was in the training set; the information may have arrived from third-party publications.

Search layer crawlers such as OAI-SearchBot, Claude-SearchBot and PerplexityBot fetch pages in advance and can cite them with links. Their activity is visible only in server logs and in “search-enabled” mode.

Agent layer bots such as ChatGPT-User, Claude-User and Perplexity-User open specific URLs on user request. Only server logs can confirm their visits; robots.txt rules may not apply.

Mixing the layers in one table is pointless. Blocking a search bot will not fix stale model knowledge, and an analytics report will not update outdated training data.

Step-by-step verification

Step 1. Disable search, open a fresh dialogue without memory, and ask about the company, products, people, prices and specifications. Record concrete factual errors and the competitors named instead of you.

Step 2. Examine 30 days of server logs. Separate requests by purpose (training, indexing, user-directed agents, maintenance). Persistent 403 responses for named AI crawlers indicate access problems; repeated 429 responses indicate rate limiting.

Step 3. Audit four locations that commonly suppress AI usage: page-level meta tags (nosnippet, data-nosnippet, max-snippet:0), robots.txt entries for each distinct agent name, Cloudflare AI-bot toggles (Search / Agent / Training), and the new generative-functions switch in Google Search Console.

Step 4. Disable JavaScript and confirm that title, main text, date, author and internal links remain visible. If core content loads only after rendering, some AI systems will see an empty page.

Step 5. Run at least 20 user-style questions, each three times, separately with and without search. Track six metrics independently: mention rate, linked citations, source ranking, factual accuracy, freshness and competitive share.

Step 6. Pull the new “Visibility in Alice AI” report from Yandex Webmaster and the generative-functions report from Google Search Console.

Step 7. Verify that utm_source=chatgpt.com tags and the new AI Assistant channel in Google Analytics are correctly attributed; roughly 70 % of AI referrals currently arrive as direct traffic.

Step 8. Review content and auto-generated files for hidden instructions aimed at agents. Malicious prompt-style directives have been observed in HTTP headers, comments, structured data and metadata.

After completing the checklist, the generic complaint “we are invisible to AI” is replaced by specific, actionable diagnoses with different timelines and costs.

Related articles

AntiMalwareOther

Russia Hands Down First Conviction Under New Criminal Article for Online Drug Propaganda

A resident of Orenburg became the first person in Russia to receive a criminal sentence under Article 230.3 of the Criminal Code, which criminalizes online drug propaganda following repeated administrative violations. The man was fined 100,000 rubles and had his mobile phone confiscated after he printed and posted leaflets containing a QR code that directed users to job advertisements linked to drug distribution. The scheme began when he was recruited via messenger to place the leaflets for 10 rubles each, without realizing the content involved narcotics-related vacancies. Prior to this case, the individual had already been sanctioned twice within the same year for illegal drug advertising, allowing prosecutors to escalate the matter to the new criminal provision that took effect on 1 March. The court considered his prior record as a recidivism aggravating factor yet imposed the minimum fine after he admitted guilt, expressed remorse, and cooperated with investigators. The ruling has already entered into force, marking the initial application of the statute that permits penalties up to two years of imprisonment or fines between 100,000 and 300,000 rubles.

SecuritylabOther

Where to Find Scientific Articles and Full Texts in 2026: Russian and International Databases Guide

Finding complete scientific papers often requires navigating multiple platforms because search engines show only titles and abstracts while publishers may demand payment for PDFs. The guide explains the differences between bibliographic databases that help locate publications and full-text repositories that provide actual documents. It covers Russian resources such as CyberLeninka, eLIBRARY.RU with RINC, Math-Net.Ru, and the national platform of scientific journals, along with international tools including Google Scholar, PubMed, arXiv, ACM Digital Library, IEEE Xplore, Scopus, and Web of Science. Additional sections address book catalogs, archives, AI-powered search tools like Consensus, and scientific social networks such as ResearchGate. The material emphasizes that presence in any database does not guarantee quality or validity, urging readers to verify methods, results, and publication status independently. Practical advice is given on locating open-access versions, using library subscriptions, and contacting authors directly.

HabrOther

WAF Connected — What Next? How to Configure Web Application Firewalls for Real Protection Without Disruption

After successful pilot testing, organizations often struggle when scaling WAF protection across dozens or hundreds of applications. Each app brings unique technology stacks, traffic patterns, and legitimate anomalies that can break existing rules. The article stresses starting in monitoring mode rather than blocking to avoid false positives that frustrate users and damage business operations. A structured Risk Score and Priority Score system helps teams prioritize applications based on exposure, business impact, control weaknesses, technical risks, and data sensitivity. Regular tuning, log analysis, and quarterly re-evaluation of the application registry are required because applications evolve constantly. Well-configured WAF solutions must deliver low false-positive rates, rapid exception handling, and resilience under peak loads without creating new operational burdens for security teams.

AntiMalwareOther

Avanpost SmartPAM Adds 60 MITRE ATT&CK Signatures for Privileged Session Threat Detection

Avanpost has released an update to its SmartPAM 1.4 solution that incorporates a library of 60 signatures mapped to the MITRE ATT&CK framework. The new capability allows the Privileged Access Management system to monitor and analyze actions performed by administrators inside privileged sessions rather than simply controlling initial access. The signatures cover common attack techniques including credential access, persistence, lateral movement, and defense evasion such as disabling audit logs, antivirus, or firewalls and clearing system events. A built-in signature analysis engine normalizes session data, matches observed behavior against known attack patterns, and triggers automated responses including command blocking, session termination, or SIEM alerts. Customers can combine the vendor-supplied rules with custom policies and will receive regular subscription-based updates at no cost until the end of 2026. Avanpost claims SmartPAM is the first PAM product to offer a MITRE ATT&CK-structured signature library, shifting the tool from a basic access gatekeeper to an active behavioral observer capable of identifying malicious activity even when valid credentials are used.