Does My Website Need HTTPS for AI Search Visibility?

Yes, HTTPS is effectively a baseline requirement for AI search visibility in 2026. AI crawlers from platforms like Perplexity, OpenAI, and Google prioritise secure content, and an HTTP-only site is likely to be deprioritised or skipped entirely. Switching to HTTPS will not guarantee citations, but running without it is a clear and avoidable disadvantage.

Why HTTPS matters for AI crawlers

AI search platforms do not crawl the web independently in the way a human researcher would. They use automated bots that follow rules similar to those used by traditional search engine crawlers. These bots are configured to treat security signals seriously.

A site without HTTPS sends several negative signals. The connection is unencrypted, the content cannot be verified as authentic, and many crawler configurations will refuse to index HTTP pages by default. If a crawler cannot reliably access and verify your content, it will not include it in the knowledge sources used to generate AI answers.

Google has required HTTPS as a ranking factor since 2014. By 2026, all major AI platforms have followed a similar logic. HTTPS is not a differentiator. It is a threshold requirement.

How AI platforms assess trustworthiness

AI search engines like Perplexity and ChatGPT with browsing enabled do not just retrieve raw text. They assess whether a source is credible before surfacing it in a response. HTTPS is one of the earliest signals they check.

Other trustworthiness signals include:

• A valid SSL certificate from a recognised certificate authority
• No mixed content warnings (where some page assets still load over HTTP)
• Consistent canonical URLs using HTTPS throughout the site
• A clear and crawlable robots.txt file that does not block AI bots

If your SSL certificate has expired or is self-signed, AI crawlers may treat your site the same as an HTTP site. The certificate needs to be current and issued by a trusted authority such as Let's Encrypt, DigiCert, or a similar provider.

You can check which AI crawlers are attempting to access your site using our AI crawler directory, which lists the known user agents and IP ranges for major platforms.

What about mixed content issues?

Many UK business websites switched to HTTPS years ago but still have mixed content problems. This happens when the main page loads over HTTPS, but images, scripts, or stylesheets still reference HTTP URLs.

Browsers flag these pages with security warnings. AI crawlers may interpret the same warnings as a sign that the page is not fully secure. The practical fix is to audit your site for HTTP asset references and update them to HTTPS. Most content management systems have plugins or built-in tools to handle this automatically.

Does HTTPS directly improve AI citation rates?

HTTPS alone will not cause AI platforms to start citing your content. It removes a barrier rather than creating a positive advantage. Think of it as clearing a basic eligibility check.

Once your site is secure and accessible, the factors that actually drive AI citations are different. These include content quality, topical authority, structured data, and the way your pages answer specific questions. Our guide on schema markup and AI search covers how structured data can help AI platforms understand and surface your content.

If you want a broader view of what drives AI visibility, the AI search optimisation explainer sets out the full picture for businesses new to this area.

Practical steps to check your HTTPS status

Step 1: Check your certificate

Visit your site and click the padlock icon in your browser's address bar. You should see a valid certificate with an expiry date in the future. If you see a warning or no padlock, your certificate needs attention.

Step 2: Check for HTTP redirects

Type your domain with HTTP into a browser and confirm it redirects automatically to HTTPS. If it loads an HTTP version without redirecting, that is a problem. Any page accessible over HTTP could be crawled as an insecure source.

Step 3: Scan for mixed content

Use a free tool such as Why No Padlock or the browser developer console to identify any assets loading over HTTP. Fix these at the source in your CMS or codebase.

Step 4: Update your robots.txt and sitemap

Make sure your sitemap references HTTPS URLs only, and that your robots.txt file is served from your HTTPS domain. Some sites have conflicting robots.txt files at both HTTP and HTTPS addresses, which can confuse crawlers. Our robots.txt guide explains how to configure this correctly for AI search platforms.

Does HTTPS affect Google AI Overviews specifically?

Google AI Overviews pulls from the same index as standard Google Search. If your site is not ranking in Google Search due to HTTPS issues or security warnings, it will not appear in AI Overviews either. Google's crawler, Googlebot, has deprioritised HTTP pages for years, so the connection is direct.

For Perplexity and ChatGPT browsing, the relationship is slightly different because these platforms sometimes crawl content independently rather than relying on Google's index. However, their crawlers apply the same security checks.

Is HTTPS enough on its own for a small UK business?

No. HTTPS is the starting point, not the strategy. A secure site that does not answer questions clearly, lacks structured data, or blocks AI crawlers will still be invisible in AI search responses.

For small UK businesses trying to understand whether their overall AI search presence is working, a good starting point is a structured review of your technical setup, content, and how AI platforms currently represent you. You can get a baseline assessment through our free AI visibility audit.

Frequently asked questions

Will getting HTTPS make my business appear in ChatGPT answers?

Not on its own. HTTPS removes a technical barrier that could prevent AI crawlers from accessing your site, but citation depends on content quality, topical authority, and how well your pages answer specific questions. HTTPS is a necessary condition, not a sufficient one.

My site has HTTPS but my certificate expired last month. Does this affect AI visibility?

Yes, almost certainly. An expired certificate produces browser warnings identical to those on an HTTP site. AI crawlers are likely to treat an expired certificate as a trust failure and skip the content. Renewing your certificate should be treated as urgent.

Do all AI search platforms check for HTTPS?

All major platforms, including Perplexity, OpenAI's web crawler, Google, and Microsoft Bing (which feeds Copilot), apply security checks as part of their crawl process. There is no major AI search platform that actively treats HTTP and HTTPS content equally.

I use a website builder like Wix or Squarespace. Is HTTPS automatic?

Yes, most hosted website builders enable HTTPS automatically and renew certificates without any action required from you. If you are on a hosted platform and see HTTPS in your browser address bar, your basic security setup is likely fine. The more common issue for these sites is mixed content from embedded third-party widgets or older media files.