Hub365 AI audits published surfaces for a living, and the pattern is consistent: most service businesses have more pages, forms, carts and profiles live in their name than they actively manage. None of it switches off by itself and none of it reports a failure, so nothing ever triggers a review. The fix is not technical. It is one question asked of four places, and three of the four fixes take under a minute.
None of this is a story about hackers, and nothing in it requires anyone to have attacked you. The most expensive item in this blog is a text field somebody never edited. If what you want is the layer underneath - email authentication, SSL, DNS - that is a separate inventory and it lives in our domain compliance guide. This piece stays above ground, on the surfaces a stranger can see.
It is also not a story about being careless. Every page, form, cart and profile below was made on purpose by somebody who thought it mattered, because at the time it did. Then the project ended, the supplier left, the campaign stopped, and the surface stayed exactly where it was. Nothing turns itself off, and nothing files a report when it starts speaking for you badly.
1. A page can be live, indexed, and not yours
In August we went through a site's published pages one at a time. Not a sample, not a crawler summary - the actual list. Of 33 published pages, 21 were injected spam URLs. They loaded, they were reachable, and several were ranking above the real ones.
That is the ugly part, and it is the part everyone expects. Here is the part that changed how we run these audits: two of those pages had been reported weeks earlier and were still there, exactly as reported. Somebody had already looked. Nothing moved.
Finding it was never the hard part
Our industry sells detection: scanners, monitors, alerts, a dashboard with a red number on it. Detection had already done its job here. What failed was the ten minutes after it, when a human being has to decide that taking a page down is their work for today rather than somebody else's work for later.
When you reach that decision, Google publishes how a page you want gone should be handled, and it is worth reading before you improvise - because the order of operations is not the one most people guess: Remove a page hosted on your site from Google.
2. The store nobody could reach was still open for business
This month, a different audit. A live checkout page: working layout, a cart summary, and the phrase "100% Secure and Safe Payments" under the total. Its products were indexed in Google, so a stranger could land there straight from a search.
There was not one link to that store from anywhere on the site. Not the menu, not the footer, not a single page. No shipping policy, no return policy, no warranty. And the page was indexed under a different company's name, inherited from a template field nobody had changed.
3. Nobody opens your footer until the one moment they do
Same month, a third set of findings, all small. A footer social icon pointing at a page dead since 2019. The privacy link and the terms link both landing on the contact page. And a legacy listing on a third-party site, still indexed, quoting a product at 28 USD that the business now sells at 165.
Getting a listing you do not control corrected is a separate job with its own method, and it lives in our guide to getting listed.
4. The same instrument, pointed the other way
Two weeks ago we published the moving test: one question, asked of four parts of your operation. If this disappears tomorrow, what stops?
This is that instrument turned around. That question measures what you would lose. This one measures what is leaking out. Most owners have thought about the first question at least once, usually at three in the morning. The second one does not keep anybody awake, which is exactly why nothing has ever been done about it.
What happens to a stranger who lands here today?
Not "is this page any good". Not "does this need updating". Not "is this on brand". What happens to the person. A stranger has no context and no patience, which makes their experience the most honest measurement available to you for free.
5. Seeing it changed nothing until somebody's name was on it
Earlier this week we re-measured our own audit. Twenty-one tasks, written by us, about us. Fourteen days after that list existed: 1 task partly closed, 20 untouched, and two of the items had degraded while nobody was looking.
The diagnosis was not wrong. We read it again and agreed with all of it. It had no owner and no date. Twenty-one tasks with nobody's name beside them is not a plan. It is a problem, described accurately, and filed.
The one thing to do this week
To close
Nothing in this blog is difficult, and that is the uncomfortable part. No skill gap, no platform to migrate, no vendor to fire. There is a list of things live in your name, a question you can ask of four of them before your coffee goes cold, and the clerical act of writing a name and a date next to whatever comes back.
The reason it does not happen is not laziness. None of it belongs to anybody, so it runs on leftover attention, and leftover attention does not exist in a business that is busy. Giving it an owner takes about as long as reading this sentence, and it is the whole intervention. If you do only one of the three steps, do the footer: it is where a business most often contradicts itself in public without ever finding out.
If you would rather we walked through it with you and said out loud what we would close first, that conversation is free and takes half an hour.
Keep reading
- The moving test - the same question pointed the other way: what stops if a tool disappears
- SEO, GEO and AEO, and which one you are actually asking about
- What AI assistants are allowed to see about your business
- Getting listed: third-party listings and how to get one corrected
- Domain compliance guide: the layer underneath everything above
- External: Remove a page hosted on your site from Google, Google Search Central
Sources
- Google Search Central, "Remove a page hosted on your site from Google", last updated 10 December 2025. https://developers.google.com/search/docs/crawling-indexing/remove-information
