Check for erroneous rules that block specific user agents or IP ranges. Ensure that the /sustainability directory is set to public (755 permissions on Linux servers) and not private (700).

From an SEO perspective, if Google's bots receive a persistent status code (HTTP 403 Forbidden) for https://www.xxxxcomau/sustainability , Google will eventually remove that link from its index. This means the company loses all organic traffic from stakeholders searching for "xxxx com au sustainability report."

Corporate websites often use Web Application Firewalls (WAFs) like Cloudflare, Imperva, or AWS WAF. If your IP address has been flagged for suspicious activity (e.g., scraping, multiple failed logins, or being on a blacklist), you may be denied access—even to public resources like /sustainability .

If you paste the (with xxxx replaced by the real name), I can give more specific advice.

This is a solid, professional resource that demonstrates a genuine commitment to sustainable practices. While there is room for more interactive data visualization, the transparency and ease of access to information make it a valuable page for investors, customers, and partners.