01What happens.
An estate accumulates through launches, campaigns, mergers and changes of technology, each decision sound at the time. Ownership moves, versions multiply and the material stays online.
AI reads the whole of it, and the digital team is the group that sees the sprawl first.
02Why it matters.
If you lead the organisation, your digital team already knows that the estate has sprawled. What they lack is the decision to map it and the mandate to remove what no longer earns its place.
AI has turned that housekeeping request into a source of wrong answers about your organisation, and into a cost line you are already paying. The university in this case, once it knew its landscape and cleared what no longer served, ran on one platform with one point of governance and one point of control. It spends less to stay online and answers with one voice, a position open to any organisation still carrying the estate it inherited.
The estate nobody holds
41% of an organisation’s digital footprint is unknown to its own digital teams.
P&C / Sitemorse risk profiling, 2017 to 2023, covering more than 119 million websites.
What digital leaders say
92% of digital leaders named the unmapped landscape and uncontrolled PDFs as a top-3 challenge.
Sitemorse surveys, 2021, 2023 and 2025.
03The case.
A local authority’s digital team had warned for years about the sprawl of the estate: old microsites, departmental sites, forgotten document stores and properties inherited from predecessor bodies. The warning was heard as maintenance. When the authority’s chatbots began serving wrong information, the cause was traced to a planning microsite the team had no record of, and the first step in correcting the answers was understanding the authority’s actual digital footprint. The team’s warning had been correct, and the map was the first evidence of it.
A university faced the same condition on a larger scale. Universities publish across faculties, campuses and decades, and this one had accumulated sites, subsites and documents across many platforms. The digital team had wanted to consolidate for three years and had not found a case the executive would listen to really and subsequently fund.
The misinformation AI was surfacing about courses, fees and requirements, drawn from the old estate, made the case the team had been unable to make. The consolidation was approved with the emphasis it had lacked. The university re-platformed onto a single platform with a single point of governance and a single point of control.
The old sites were cleared and removed rather than migrated, and the project took 9-months. The savings began with operating cost: hosting, licences, security and maintenance for sites that no longer existed. The larger return followed in the form of better information, more confidence in what the university said, less misinformation reaching applicants, better-informed new students arriving, and control of the message from one place.
The scale of the condition is on the public record. Essex County Council describes its estate as its website, intranet, microsites and PDFs across more than 60 sites. London City Hall describes dozens of sites, applications and services with repeated functionality, and neither estate is unusual.
Across risk profiling of more than 119 million websites, 41% were unknown to the organisation’s own digital teams (P&C / Sitemorse risk profiling, 2017 to 2023). In surveys run in 2021, 2023 and 2025, 92% of digital leaders named the unmapped landscape and uncontrolled PDFs as a top-3 challenge (Sitemorse).
04Exposure.
An unmanaged site or document costs on 4 lines: hosting, security, maintenance and misinformation. The first 3 are paid now, inside existing budgets, and the fourth is paid when a wrong answer reaches a resident, an applicant or an AI system. Retirement removes an asset from the 4 lines at once.
The unmanaged estate is also an attack surface. Software that is not maintained is software that is not patched, and forgotten subdomains, old microsites and legacy platforms sit outside monitoring and certificate renewal; the security industry documents them as entry points for phishing and takeover across government and large corporate estates. An organisation that can evidence it knows its landscape, has removed what no longer serves and monitors what remains carries that evidence into renewal and into any discussion of risk quality. No outcome is automatic.
05What AI Readiness changes.
What neither organisation could see from the inside was the extent of the estate, because the records stopped where the team’s knowledge did. AAAnow reads the landscape from the outside, as AI reads it, and evidences what is online, including properties absent from the organisation’s own records. With the landscape known, the organisation decides what to retain, remediate or retire. Route removal, the disciplined retirement of what no longer earns its place, follows the landscape stage, and AI discovery, which finds what nobody remembers, is available as an option.
Your team makes the changes; AAAnow provides the assessment, the evidence, the guidance and the review.
06Related use cases.
Planning decisions went wrong on a website the city had forgotten
An inherited planning microsite the city had no record of.
Forgotten assets, the cyber surface
The unmapped estate as an attacked surface.
Decades of documents outliving their context.
07References.
- 41% of websites unknown to the organisation’s own digital teams: P&C / Sitemorse risk profiling, 2017 to 2023, covering more than 119 million websites.
- 92% of digital leaders naming the unmapped landscape and uncontrolled PDFs a top-3 challenge: Sitemorse surveys, 2021, 2023 and 2025.
- Essex County Council, content strategy. www.essex.gov.uk/essex-county-councils-design-and-patterns-library/content-strategyessex.gov.ukWe do not enable external links - please copy and paste, you are then certain as to the link being opened
- London City Hall, digital technology estate rebuild, decision record. www.london.gov.uk/decisions/md2590-gla-digital-technology-estate-rebuildlondon.gov.ukWe do not enable external links - please copy and paste, you are then certain as to the link being opened
- ZeroFox, forgotten subdomains as attack entry points, 2025. www.zerofox.com/blog/forgotten-subdomains-easy-targetszerofox.comWe do not enable external links - please copy and paste, you are then certain as to the link being opened
Next step
Talk it through, in your terms.
The briefing sets this case in your organisation’s terms, and the discussion follows your questions.
Observed, anonymised, 2 instances. No organisation is identified.