{"slug":"hims-9s53aa","companyName":"Hims","domain":"hims.com","url":"https://hims.com","headline":"Automated clients are blocked at the HTTP layer, preventing both AI agents and programmatic access to pricing, signup, and documentation.","compositeScore":47,"humanScore":80,"agentScore":14,"doorGap":66,"humanMeasured":1,"agentMeasured":4,"percentile":null,"humanPercentile":null,"agentPercentile":null,"isPartial":false,"depth":"free","siteClass":"unknown","scannerVersion":15,"scannedAt":"2026-09-08T19:29:55.914Z","unlocked":false,"mission":{"steps":[{"url":"https://hims.com","outcome":"blocked","purpose":"reach the site at all"},{"url":"https://hims.com/robots.txt","outcome":"ok","purpose":"find out whether machines are welcome"},{"url":"https://hims.com","outcome":"ok","purpose":"ask whether the door opens for requests carrying the AI crawlers' names"},{"url":"https://hims.com/llms.txt","outcome":"blocked","purpose":"read the site's own guide for language models"},{"url":"https://hims.com","outcome":"blocked","purpose":"find out what pages exist"},{"url":"https://hims.com/.well-known/security.txt","outcome":"blocked","purpose":"find a contact route for machines"},{"url":"https://hims.com","outcome":"blocked","purpose":"find a published agent interface"},{"url":"https://hims.com/.well-known/ai-plugin.json","outcome":"blocked","purpose":"find an agent plugin manifest"},{"url":"https://hims.com","outcome":"blocked","purpose":"find out whether verified agents are recognised"},{"url":"https://hims.com","outcome":"missing","purpose":"read the homepage as data rather than as a page"},{"url":"https://hims.com","outcome":"blocked","purpose":"find a machine readable API spec"},{"url":"https://hims.com","outcome":"missing","purpose":"read the developer documentation"},{"url":"https://hims.com/pricing","outcome":"blocked","purpose":"read the prices without running JavaScript"},{"url":"https://hims.com","outcome":"ok","purpose":"walk the way a visitor would, to a signup form or a product"}],"verdict":"The site refused automated access at hims.com, so the agent could not reach the site at all."},"observations":null,"dimensions":[{"key":"machine_discoverability","audience":"agent","score":13,"summary":"No AI crawler is blocked, a real browser is refused or served a stripped page, which is how assistant shopping arrives, no sitemap, no schema.org markup, the homepage turns a real browser's own request away, so the wall sits below HTTP.","evidence":{"locked":true,"count":4}},{"key":"programmatic_onboarding","audience":"agent","score":10,"summary":"No API documentation is linked from the homepage. Automated access to all six standard OpenAPI paths was refused with HTTP 403. The site offers no programmatic entry point that an agent or integration can discover or use.","evidence":{"locked":true,"count":3}},{"key":"pricing_legibility","audience":"agent","score":null,"summary":"Could not verify: this scan did not reach the pages that would show it.","evidence":{"locked":true,"count":1}},{"key":"agent_aware_instrumentation","audience":"agent","score":8,"summary":"No MCP manifest.","evidence":{"locked":true,"count":4}},{"key":"machine_fetchable_trust","audience":"agent","score":25,"summary":"The security.txt file could not be checked because automated access was refused with HTTP 403. The homepage refuses automated clients outright at the HTTP layer. No trust signals are machine-readable.","evidence":{"locked":true,"count":2}},{"key":"commercial_rails","audience":"agent","score":null,"summary":"Could not verify: this scan did not reach the pages that would show it.","evidence":{"locked":true,"count":2}},{"key":"steps_to_first_value","audience":"human","score":80,"summary":"The signup page is 2 steps from the homepage via a 'Get started' call to action. However, a real browser was refused with an automated traffic challenge when attempting to reach it, so the form itself could not be read.","evidence":{"locked":true,"count":1}},{"key":"required_fields","audience":"human","score":null,"summary":"Could not verify: this scan did not reach the pages that would show it.","evidence":{"locked":true,"count":1}},{"key":"verification_walls","audience":"human","score":null,"summary":"Could not verify: this scan did not reach the pages that would show it.","evidence":{"locked":true,"count":1}},{"key":"error_recovery","audience":"human","score":null,"summary":"Could not verify: this scan did not reach the pages that would show it.","evidence":{"locked":true,"count":1}}],"issues":[{"rank":1,"title":"/, /pricing turn a real browser's own request away, so the wall sits below HTTP and no crawler reaches the page.","dimensionKey":"machine_discoverability","evidence":{"locked":true,"count":1},"fix":null},{"rank":2,"title":"Automated clients are blocked at the HTTP layer, preventing machines from reading pricing, documentation, and signup pages.","dimensionKey":"machine_discoverability","evidence":{"locked":true,"count":3},"fix":null},{"rank":3,"title":"No API documentation or programmatic onboarding path is published or discoverable.","dimensionKey":"programmatic_onboarding","evidence":{"locked":true,"count":3},"fix":null}],"fixArtifacts":{"locked":true,"count":4,"summaries":[{"id":"bot_wall_guidance:notes","kind":"bot_wall_guidance","title":"Let verified assistants through","path":"notes","effort":{"minutes":60,"role":"developer"},"outcome":{"dimension":"machine_discoverability","external":["Assistant shopping and search crawlers reach the product, pricing and policy pages a buyer asks about."]}},{"id":"robots_search_bots:robots-txt","kind":"robots_search_bots","title":"robots.txt rules for AI crawlers","path":"/robots.txt","effort":{"minutes":10,"role":"owner"},"outcome":{"dimension":"machine_discoverability","external":["The assistants' search crawlers read and cite the site to buyers; training stays the owner's decision."]}},{"id":"organization_jsonld:homepage","kind":"organization_jsonld","title":"Organization structured data","path":"homepage","effort":{"minutes":15,"role":"developer"},"outcome":{"dimension":"machine_discoverability","external":["Search and assistant crawlers read the company entity from the homepage rather than inferring it."]}},{"id":"interfaces_note:notes","kind":"interfaces_note","title":"Machine interfaces: where you stand","path":"notes","effort":{"minutes":10,"role":"owner"},"outcome":{"dimension":"agent_aware_instrumentation","external":["The developer surface is built in an order where every published pointer answers."]}}]},"feedback":{"endpoint":"/api/feedback","mcpTool":"rate_fix","targets":[{"type":"report","key":"report"},{"type":"dimension","dimensionKey":"machine_discoverability","key":"dimension:machine_discoverability"},{"type":"dimension","dimensionKey":"programmatic_onboarding","key":"dimension:programmatic_onboarding"},{"type":"dimension","dimensionKey":"pricing_legibility","key":"dimension:pricing_legibility"},{"type":"dimension","dimensionKey":"agent_aware_instrumentation","key":"dimension:agent_aware_instrumentation"},{"type":"dimension","dimensionKey":"machine_fetchable_trust","key":"dimension:machine_fetchable_trust"},{"type":"dimension","dimensionKey":"commercial_rails","key":"dimension:commercial_rails"},{"type":"dimension","dimensionKey":"steps_to_first_value","key":"dimension:steps_to_first_value"},{"type":"dimension","dimensionKey":"required_fields","key":"dimension:required_fields"},{"type":"dimension","dimensionKey":"verification_walls","key":"dimension:verification_walls"},{"type":"dimension","dimensionKey":"error_recovery","key":"dimension:error_recovery"},{"type":"issue","dimensionKey":"machine_discoverability","checkId":"bot_walls","key":"issue:machine_discoverability:bot_walls"},{"type":"issue","dimensionKey":"machine_discoverability","checkId":null,"key":"issue:machine_discoverability:-"},{"type":"issue","dimensionKey":"programmatic_onboarding","checkId":null,"key":"issue:programmatic_onboarding:-"}]}}