{"slug":"hims-fb7kyt","companyName":"Hims","domain":"hims.com","url":"https://hims.com","headline":"Automated clients are blocked at the HTTP layer, preventing both AI agents and programmatic access to pricing, signup, and documentation.","compositeScore":47,"humanScore":80,"agentScore":14,"doorGap":66,"humanMeasured":1,"agentMeasured":4,"percentile":null,"humanPercentile":null,"agentPercentile":null,"isPartial":false,"depth":"free","siteClass":"unknown","scannerVersion":13,"scannedAt":"2026-09-08T16:08:45.501Z","unlocked":false,"mission":{"steps":[{"url":"https://hims.com","outcome":"blocked","purpose":"reach the site at all"},{"url":"https://hims.com/robots.txt","outcome":"ok","purpose":"find out whether machines are welcome"},{"url":"https://hims.com","outcome":"ok","purpose":"ask whether the door opens for requests carrying the AI crawlers' names"},{"url":"https://hims.com/llms.txt","outcome":"blocked","purpose":"read the site's own guide for language models"},{"url":"https://hims.com","outcome":"blocked","purpose":"find out what pages exist"},{"url":"https://hims.com/.well-known/security.txt","outcome":"blocked","purpose":"find a contact route for machines"},{"url":"https://hims.com","outcome":"blocked","purpose":"find a published agent interface"},{"url":"https://hims.com/.well-known/ai-plugin.json","outcome":"blocked","purpose":"find an agent plugin manifest"},{"url":"https://hims.com","outcome":"blocked","purpose":"find out whether verified agents are recognised"},{"url":"https://hims.com","outcome":"missing","purpose":"read the homepage as data rather than as a page"},{"url":"https://hims.com","outcome":"blocked","purpose":"find a machine readable API spec"},{"url":"https://hims.com","outcome":"missing","purpose":"read the developer documentation"},{"url":"https://hims.com/pricing","outcome":"blocked","purpose":"read the prices without running JavaScript"},{"url":"https://hims.com","outcome":"ok","purpose":"walk the way a visitor would, to a signup form or a product"}],"verdict":"The site refused automated access at hims.com, so the agent could not reach the site at all."},"observations":null,"dimensions":[{"key":"machine_discoverability","audience":"agent","score":13,"summary":"No AI crawler is blocked, a real browser is refused or served a stripped page, which is how assistant shopping arrives, no sitemap, no schema.org markup, the homepage turns a real browser's own request away, so the wall sits below HTTP.","evidence":{"locked":true,"count":4}},{"key":"programmatic_onboarding","audience":"agent","score":10,"summary":"No API documentation is linked from the homepage. Automated access to all six standard OpenAPI paths was refused with HTTP 403. The signup page is reachable by a human following the Get Started link 2 steps from the homepage, but a real.","evidence":{"locked":true,"count":3}},{"key":"pricing_legibility","audience":"agent","score":null,"summary":"Could not verify: this scan did not reach the pages that would show it.","evidence":{"locked":true,"count":1}},{"key":"agent_aware_instrumentation","audience":"agent","score":8,"summary":"No MCP manifest.","evidence":{"locked":true,"count":4}},{"key":"machine_fetchable_trust","audience":"agent","score":25,"summary":"The security.txt file at /.well-known/security.txt could not be checked because automated access was refused with HTTP 403. The homepage itself refuses automated clients outright, which prevents verification of trust signals.","evidence":{"locked":true,"count":2}},{"key":"commercial_rails","audience":"agent","score":null,"summary":"Could not verify: this scan did not reach the pages that would show it.","evidence":{"locked":true,"count":2}},{"key":"steps_to_first_value","audience":"human","score":80,"summary":"The Get Started call to action is 2 steps from the homepage. A real browser following that link to the signup page encounters an automated traffic challenge, so the form fields and submission path could not be read.","evidence":{"locked":true,"count":1}},{"key":"required_fields","audience":"human","score":null,"summary":"Could not verify: this scan did not reach the pages that would show it.","evidence":{"locked":true,"count":1}},{"key":"verification_walls","audience":"human","score":null,"summary":"Could not verify: this scan did not reach the pages that would show it.","evidence":{"locked":true,"count":1}},{"key":"error_recovery","audience":"human","score":null,"summary":"Could not verify: this scan did not reach the pages that would show it.","evidence":{"locked":true,"count":1}}],"issues":[{"rank":1,"title":"/, /pricing turn a real browser's own request away, so the wall sits below HTTP and no crawler reaches the page.","dimensionKey":"machine_discoverability","evidence":{"locked":true,"count":1},"fix":null},{"rank":2,"title":"No developer documentation is linked from the homepage, in raw HTML or the rendered page, so integration starts with a search engine.","dimensionKey":"programmatic_onboarding","evidence":{"locked":true,"count":1},"fix":null},{"rank":3,"title":"Automated clients are blocked at the HTTP layer, preventing AI agents and programmatic systems from reading the homepage, pricing page, or any documentation.","dimensionKey":"machine_discoverability","evidence":{"locked":true,"count":3},"fix":null}],"fixArtifacts":{"locked":true,"count":4,"summaries":[{"id":"bot_wall_guidance:notes","kind":"bot_wall_guidance","title":"Let verified assistants through","path":"notes","effort":{"minutes":60,"role":"developer"},"outcome":{"dimension":"machine_discoverability","external":["Assistant shopping and search crawlers reach the product, pricing and policy pages a buyer asks about."]}},{"id":"robots_search_bots:robots-txt","kind":"robots_search_bots","title":"robots.txt rules for AI crawlers","path":"/robots.txt","effort":{"minutes":10,"role":"owner"},"outcome":{"dimension":"machine_discoverability","external":["The assistants' search crawlers read and cite the site to buyers; training stays the owner's decision."]}},{"id":"organization_jsonld:homepage","kind":"organization_jsonld","title":"Organization structured data","path":"homepage","effort":{"minutes":15,"role":"developer"},"outcome":{"dimension":"machine_discoverability","external":["Search and assistant crawlers read the company entity from the homepage rather than inferring it."]}},{"id":"interfaces_note:notes","kind":"interfaces_note","title":"Machine interfaces: where you stand","path":"notes","effort":{"minutes":10,"role":"owner"},"outcome":{"dimension":"agent_aware_instrumentation","external":["The developer surface is built in an order where every published pointer answers."]}}]},"feedback":{"endpoint":"/api/feedback","mcpTool":"rate_fix","targets":[{"type":"report","key":"report"},{"type":"dimension","dimensionKey":"machine_discoverability","key":"dimension:machine_discoverability"},{"type":"dimension","dimensionKey":"programmatic_onboarding","key":"dimension:programmatic_onboarding"},{"type":"dimension","dimensionKey":"pricing_legibility","key":"dimension:pricing_legibility"},{"type":"dimension","dimensionKey":"agent_aware_instrumentation","key":"dimension:agent_aware_instrumentation"},{"type":"dimension","dimensionKey":"machine_fetchable_trust","key":"dimension:machine_fetchable_trust"},{"type":"dimension","dimensionKey":"commercial_rails","key":"dimension:commercial_rails"},{"type":"dimension","dimensionKey":"steps_to_first_value","key":"dimension:steps_to_first_value"},{"type":"dimension","dimensionKey":"required_fields","key":"dimension:required_fields"},{"type":"dimension","dimensionKey":"verification_walls","key":"dimension:verification_walls"},{"type":"dimension","dimensionKey":"error_recovery","key":"dimension:error_recovery"},{"type":"issue","dimensionKey":"machine_discoverability","checkId":"bot_walls","key":"issue:machine_discoverability:bot_walls"},{"type":"issue","dimensionKey":"programmatic_onboarding","checkId":"api_surface","key":"issue:programmatic_onboarding:api_surface"},{"type":"issue","dimensionKey":"machine_discoverability","checkId":null,"key":"issue:machine_discoverability:-"}]}}