feat: seo optimization p1

2026-03-19 15:31:15 -04:00
parent 5726d2d210
commit 0ee456ad58
12 changed files with 341 additions and 23 deletions
--- a/app/globals.css
+++ b/app/globals.css
@@ -49,8 +49,8 @@
 }

@theme inline {
-  --font-sans: 'Inter', ui-sans-serif, system-ui, sans-serif;
-  --font-serif: 'Source Serif 4', 'Source Serif Pro', Georgia, serif;
+  --font-sans: var(--font-inter), 'Inter', ui-sans-serif, system-ui, sans-serif;
+  --font-serif: var(--font-source-serif), 'Source Serif 4', 'Source Serif Pro', Georgia, serif;
  --font-mono: ui-monospace, SFMono-Regular, Menlo, Monaco, Consolas, monospace;

  --color-background: rgb(var(--background));
--- a/app/greyscan/layout.tsx
+++ b/app/greyscan/layout.tsx
@@ -3,8 +3,35 @@ import type { Metadata } from 'next'
 export const metadata: Metadata = {
  title: 'Greyscan | Greywall',
  description: 'Scan your repo and see what an unrestricted AI agent would attempt. Powered by Greywall.',
+  alternates: {
+    canonical: 'https://greywall.io/greyscan',
+  },
+  openGraph: {
+    title: 'Greyscan | Greywall',
+    description: 'Scan your repo and see what an unrestricted AI agent would attempt. Powered by Greywall.',
+    url: 'https://greywall.io/greyscan',
+    siteName: 'Greywall',
+    type: 'website',
+  },
+}
+
+const breadcrumbJsonLd = {
+  '@context': 'https://schema.org',
+  '@type': 'BreadcrumbList',
+  itemListElement: [
+    { '@type': 'ListItem', position: 1, name: 'Greywall', item: 'https://greywall.io' },
+    { '@type': 'ListItem', position: 2, name: 'Greyscan', item: 'https://greywall.io/greyscan' },
+  ],
 }

 export default function ExposureLayout({ children }: { children: React.ReactNode }) {
-  return children
+  return (
+    <>
+      <script
+        type="application/ld+json"
+        dangerouslySetInnerHTML={{ __html: JSON.stringify(breadcrumbJsonLd) }}
+      />
+      {children}
+    </>
+  )
 }
--- a/app/layout.tsx
+++ b/app/layout.tsx
@@ -1,10 +1,26 @@
 import type { Metadata } from 'next'
+import { Inter, Source_Serif_4 } from 'next/font/google'
 import './globals.css'

+const inter = Inter({
+  subsets: ['latin'],
+  display: 'swap',
+  variable: '--font-inter',
+})
+
+const sourceSerif = Source_Serif_4({
+  subsets: ['latin'],
+  display: 'swap',
+  variable: '--font-source-serif',
+  style: ['normal', 'italic'],
+  axes: ['opsz'],
+})
+
 export const metadata: Metadata = {
+  metadataBase: new URL('https://greywall.io'),
  title: 'Greywall: Sandbox for AI Agents',
  description:
-    'Container-free, default-deny sandboxing with observability for AI agents. Five layers of defense in one command.',
+    'Container-free, default-deny sandboxing with real-time observability for AI agents on Linux and macOS. Five kernel-enforced security layers in one command. Open source.',
  icons: {
    icon: [
      { url: '/icon.svg', type: 'image/svg+xml' },
@@ -13,6 +29,74 @@ export const metadata: Metadata = {
    ],
    apple: '/apple-icon.png',
  },
+  openGraph: {
+    title: 'Greywall: Sandbox for AI Agents',
+    description: 'Container-free, default-deny sandboxing with real-time observability for AI agents. Five kernel-enforced security layers in one command.',
+    url: 'https://greywall.io',
+    siteName: 'Greywall',
+    type: 'website',
+  },
+  twitter: {
+    card: 'summary',
+    title: 'Greywall: Sandbox for AI Agents',
+    description: 'Container-free, default-deny sandboxing with real-time observability for AI agents. Five kernel-enforced security layers in one command.',
+  },
+  alternates: {
+    canonical: 'https://greywall.io',
+  },
+}
+
+const jsonLd = {
+  '@context': 'https://schema.org',
+  '@graph': [
+    {
+      '@type': 'Organization',
+      '@id': 'https://greyhaven.co/#organization',
+      name: 'Greyhaven',
+      url: 'https://greyhaven.co',
+      logo: { '@type': 'ImageObject', url: 'https://greywall.io/icon.svg' },
+      sameAs: ['https://github.com/GreyhavenHQ'],
+    },
+    {
+      '@type': 'WebSite',
+      '@id': 'https://greywall.io/#website',
+      name: 'Greywall',
+      url: 'https://greywall.io',
+      publisher: { '@id': 'https://greyhaven.co/#organization' },
+    },
+    {
+      '@type': 'SoftwareApplication',
+      '@id': 'https://greywall.io/#software',
+      name: 'Greywall',
+      description:
+        'Container-free, default-deny sandboxing with real-time observability and dynamic controls for AI agents on Linux and macOS.',
+      applicationCategory: 'SecurityApplication',
+      operatingSystem: 'Linux, macOS',
+      url: 'https://greywall.io',
+      downloadUrl: 'https://github.com/GreyhavenHQ/greywall',
+      license: 'https://opensource.org/licenses/Apache-2.0',
+      offers: { '@type': 'Offer', price: '0', priceCurrency: 'USD' },
+      author: { '@id': 'https://greyhaven.co/#organization' },
+      featureList: [
+        'Filesystem isolation',
+        'Network isolation',
+        'Command blocking',
+        'Real-time violation monitoring',
+        'Learning mode',
+        'Syscall filtering',
+        'Dynamic allow/deny controls',
+      ],
+      isAccessibleForFree: true,
+    },
+    {
+      '@type': 'SoftwareSourceCode',
+      name: 'Greywall',
+      codeRepository: 'https://github.com/GreyhavenHQ/greywall',
+      programmingLanguage: 'Go',
+      license: 'https://opensource.org/licenses/Apache-2.0',
+      targetProduct: { '@id': 'https://greywall.io/#software' },
+    },
+  ],
 }

 export default function RootLayout({
@@ -21,13 +105,11 @@ export default function RootLayout({
  children: React.ReactNode
 }>) {
  return (
-    <html lang="en" className="dark">
+    <html lang="en" className={`dark ${inter.variable} ${sourceSerif.variable}`}>
      <head>
-        <link rel="preconnect" href="https://fonts.googleapis.com" />
-        <link rel="preconnect" href="https://fonts.gstatic.com" crossOrigin="anonymous" />
-        <link
-          href="https://fonts.googleapis.com/css2?family=Inter:wght@400;500;600;700&family=Source+Serif+4:ital,opsz,wght@0,8..60,400;0,8..60,500;0,8..60,600;0,8..60,700;1,8..60,400;1,8..60,600;1,8..60,700&display=swap"
-          rel="stylesheet"
+        <script
+          type="application/ld+json"
+          dangerouslySetInnerHTML={{ __html: JSON.stringify(jsonLd) }}
        />
      </head>
      <body className="font-sans antialiased bg-background text-foreground">
--- a/app/privacy/page.tsx
+++ b/app/privacy/page.tsx
@@ -0,0 +1,118 @@
+import type { Metadata } from 'next'
+
+export const metadata: Metadata = {
+  title: 'Privacy Policy | Greywall',
+  description: 'How Greywall handles your data.',
+  alternates: {
+    canonical: 'https://greywall.io/privacy',
+  },
+}
+
+export default function PrivacyPage() {
+  return (
+    <main className="min-h-screen pt-24 pb-16 px-4 sm:px-6">
+      <article className="mx-auto max-w-2xl">
+        <h1 className="font-serif text-3xl sm:text-4xl font-semibold tracking-tight mb-2">
+          Privacy Policy
+        </h1>
+        <p className="text-sm text-muted-foreground font-sans mb-12">
+          Last updated: March 19, 2026
+        </p>
+
+        <div className="space-y-10 text-muted-foreground font-serif text-base leading-relaxed">
+          <section>
+            <h2 className="font-serif text-xl font-semibold text-foreground mb-3">Greywall (the CLI tool)</h2>
+            <p>
+              Greywall runs entirely on your machine. It does not phone home, collect telemetry,
+              or transmit any data. No analytics, no crash reports, no usage tracking. The source
+              code is open and auditable
+              at <a href="https://github.com/GreyhavenHQ/greywall" target="_blank" rel="noopener noreferrer" className="text-primary hover:text-primary/80 transition-colors">github.com/GreyhavenHQ/greywall</a>.
+            </p>
+          </section>
+
+          <section>
+            <h2 className="font-serif text-xl font-semibold text-foreground mb-3">This website (greywall.io)</h2>
+            <p className="mb-4">
+              The Greywall landing page is a static site hosted on Vercel. We do not use cookies,
+              analytics scripts, or tracking pixels. Vercel may collect minimal server logs
+              (IP address, user agent, timestamp) as part of standard web hosting.
+              See <a href="https://vercel.com/legal/privacy-policy" target="_blank" rel="noopener noreferrer" className="text-primary hover:text-primary/80 transition-colors">Vercel&apos;s privacy policy</a> for
+              details.
+            </p>
+          </section>
+
+          <section>
+            <h2 className="font-serif text-xl font-semibold text-foreground mb-3">Greyscan</h2>
+            <p className="mb-4">
+              When you use Greyscan at <a href="/greyscan" className="text-primary hover:text-primary/80 transition-colors">/greyscan</a>,
+              the following happens:
+            </p>
+            <ul className="list-disc pl-6 space-y-2">
+              <li>
+                Your browser fetches the public file tree, dependency list, and README from GitHub&apos;s
+                API directly. This data never passes through our servers during collection.
+              </li>
+              <li>
+                To generate the threat report, a summary of the repo structure (file names,
+                detected stack, dependency names, and up to 8,000 characters of the README) is
+                sent to our server and forwarded to a third-party LLM provider for analysis.
+              </li>
+              <li>
+                Results are cached in server memory for up to 24 hours to avoid redundant
+                LLM calls for the same repository, then discarded. We do not persist scan
+                results to disk or a database.
+              </li>
+              <li>
+                No repository source code is read or transmitted. Only file paths, dependency
+                names, and the public README are included.
+              </li>
+            </ul>
+          </section>
+
+          <section>
+            <h2 className="font-serif text-xl font-semibold text-foreground mb-3">Third-party services</h2>
+            <ul className="list-disc pl-6 space-y-2">
+              <li>
+                <span className="text-foreground font-medium">GitHub API</span> &mdash; Greyscan
+                calls the GitHub REST API from your browser to fetch public repository metadata.
+                Subject to <a href="https://docs.github.com/en/site-policy/privacy-policies/github-general-privacy-statement" target="_blank" rel="noopener noreferrer" className="text-primary hover:text-primary/80 transition-colors">GitHub&apos;s privacy statement</a>.
+              </li>
+              <li>
+                <span className="text-foreground font-medium">LLM provider</span> &mdash; Repo
+                summaries sent through Greyscan are processed by a third-party LLM to generate
+                threat reports. The provider may retain data per their own policies.
+              </li>
+              <li>
+                <span className="text-foreground font-medium">Vercel</span> &mdash; Hosting
+                infrastructure. See <a href="https://vercel.com/legal/privacy-policy" target="_blank" rel="noopener noreferrer" className="text-primary hover:text-primary/80 transition-colors">Vercel&apos;s privacy policy</a>.
+              </li>
+            </ul>
+          </section>
+
+          <section>
+            <h2 className="font-serif text-xl font-semibold text-foreground mb-3">Security</h2>
+            <p>
+              If you discover a security issue in Greywall or this website, please report it
+              via <a href="https://github.com/GreyhavenHQ/greywall/security" target="_blank" rel="noopener noreferrer" className="text-primary hover:text-primary/80 transition-colors">GitHub Security Advisories</a>.
+              We will respond promptly.
+            </p>
+          </section>
+
+          <section>
+            <h2 className="font-serif text-xl font-semibold text-foreground mb-3">Contact</h2>
+            <p>
+              For questions about this policy,
+              reach us at <a href="https://greyhaven.co/contact" target="_blank" rel="noopener noreferrer" className="text-primary hover:text-primary/80 transition-colors">greyhaven.co/contact</a>.
+            </p>
+          </section>
+        </div>
+
+        <div className="mt-16 pt-8 border-t border-border/30">
+          <a href="/" className="text-sm text-muted-foreground hover:text-foreground transition-colors font-sans">
+            &larr; Back to Greywall
+          </a>
+        </div>
+      </article>
+    </main>
+  )
+}
--- a/app/sitemap.ts
+++ b/app/sitemap.ts
@@ -0,0 +1,9 @@
+import type { MetadataRoute } from 'next'
+
+export default function sitemap(): MetadataRoute.Sitemap {
+  return [
+    { url: 'https://greywall.io', lastModified: new Date(), changeFrequency: 'weekly', priority: 1 },
+    { url: 'https://greywall.io/greyscan', lastModified: new Date(), changeFrequency: 'monthly', priority: 0.8 },
+    { url: 'https://greywall.io/privacy', lastModified: new Date(), changeFrequency: 'yearly', priority: 0.3 },
+  ]
+}