Scan report

https://minimaxh5.com/

Scanned 9/19/2026, 9:57:22 AM

93

/ 100

Overall readiness

Strong agentic-web readiness

Grade A

1 critical issue and 1 recommended fix found.

Agent Readiness

100/100

SEO

100/100

Performance & Accessibility

96/100

Security

83/100

  • HTTPS — Pass, scored 100 of 100

    Evidence: Page served over HTTPS

    Spec: RFC 9110: HTTP Semantics

  • HSTS header — Pass, scored 100 of 100

    Evidence: Strict-Transport-Security: max-age=31536000; includeSubDomains; preload

    Spec: RFC 6797: HTTP Strict Transport Security

  • Content-Security-Policy — Fail, scored 0 of 100

    Evidence: No Content-Security-Policy header

    Fix: Add a Content-Security-Policy to mitigate XSS and data-injection attacks.

    Content-Security-Policy: default-src 'self'; img-src 'self' data:; script-src 'self'

    Spec: Content Security Policy Level 3 (W3C)

  • X-Content-Type-Options — Pass, scored 100 of 100

    Evidence: X-Content-Type-Options: nosniff

    Spec: Fetch Standard: X-Content-Type-Options

  • Referrer-Policy — Pass, scored 100 of 100

    Evidence: Referrer-Policy: strict-origin-when-cross-origin

    Spec: Referrer Policy (W3C)

  • No mixed content — Pass, scored 100 of 100

    Evidence: No insecure http:// resource references found

    Spec: Mixed Content (W3C)

  • Cookie security flags — Pass, scored 100 of 100

    Evidence: No Set-Cookie headers

    Spec: RFC 6265: HTTP State Management Mechanism

Agent Commerce

Not applicable

Not a store: no products, store platform or cart were found.

Agent commerce

Which assistants can read this site

5 of 5 assistants can read this site.

This site is not a store — no products, store platform or cart were found — so only reading is judged, and the commerce checks do not count toward the score.

“Can read” means nothing we can see blocks it: a firewall rule that blocks assistants by their verified identity, such as Cloudflare’s AI-bot blocking, cannot be seen from outside.

  • ChatGPTlocked
  • Google AI Mode / Geminilocked
  • Copilotlocked
  • Perplexitylocked
  • Claudelocked
  • Custom agentslocked

For each assistant: Read · Understood · Fed · Acted on — with the reason and the fix for every answer.

We email you this report. We contact you about it only if you tick the box.

What an agent sees

This page without JavaScript

Title
MiniMax H5 | Multi-Beat AI Video & Reference Guidance
Headings
  • H1MiniMax H5AI Video Studio for Event Teasers and Brand Concept Films
  • H2Illustrative scene studies and teaser clips
  • H2Shape scene concepts with reference assets
  • H2Turn reference assets into short scene studies
  • H2What is MiniMax H5?
  • H2Why plan your video concepts in MiniMax H5?
  • H3Paced beats inside a single clip
  • H3Reference-led visual exploration
  • H3Integrated audio and motion
  • H3Clear pricing and flexible plans
  • H3Fast prompt iteration
  • H3Dedicated creative concept studio
Products
No products with machine-readable data on this page
Text
30 : 00 : 00 Annual Plan Savings Trial credits when enabled · Save 20% on Annual plans View Annual Plan MiniMax H5 MiniMax H5 Product Features Showcase Pricing 20% OFF EN English Start free Product Features Showcase Pricing 20% OFF Language EN English 中 中文 JA 日本語 DE Deutsch FR Français IT Italiano ES Español BR Português (Brasil) MiniMax H5 AI Video Studio for Event Teasers and Brand Concept Films MiniMax H5 · Reference Exploration · Teaser Scene Studies Reference-guided visuals Teaser and reveal beats Ready-to-edit clip downloads AI Video AI Image Text-to-Video Image-to-Video Reference-to-Vid

See the agent-ready version of this page

The preview's before-and-after scores cover this page's agent readiness, not the overall score above.

Open the preview →

Critical issues

Fix these first

  • Content-Security-Policy

    security

    No Content-Security-Policy header

Recommended fixes

Ranked by impact

  • Content-Security-PolicysecurityHigh impactMed effort

    Why: No Content-Security-Policy header

    Fix: Add a Content-Security-Policy to mitigate XSS and data-injection attacks.

    Content-Security-Policy: default-src 'self'; img-src 'self' data:; script-src 'self'