GEO Is Not a Black Box — Here's the Part You Actually Control

„GEO (Generative Engine Optimization) is such a black box" — we read this weekly, usually right after someone paid for a $295/month visibility tool and still can't tell what changed. The honest breakdown:

✅ Controllable (technical, days)

  • Crawler access per bot (robots.txt policies)
  • Machine-readable facts about your business (/llms.txt)
  • Page discoverability (sitemap.xml)
  • Payment readiness for agents (.well-known/x402)
  • Agent-friendliness declaration (agents.txt)

→ This is where every audit-worthy failure lives.

❌ Not directly controllable (market, months)

  • Whether the model quotes you over a competitor
  • Training-data inclusion timing
  • Third-party list placements you don't own
  • Sentiment others express about you

→ Influenced indirectly by publishing specific, factual, citable content.

The trap: paying before the basics exist

Tracking tools measure an input signal. If your robots.txt blocks GPTBot or your site has no llms.txt, the tool will faithfully report „zero visibility" every month — and no tool fixes that. The controllable layer comes first; measurement second.

The honest sequence

1. Fix all six agent surfaces (free audit tells you which fail) → 2. publish specific factual pages worth citing → 3. only then pay for tracking, to watch the curve respond to your changes.

Step 1 costs nothing to check

Free audit — instant grade on all surfaces

Weekly re-checks with fix lists: AI Visibility Report €19/mo