{"slug":"hims-h2nzrd","companyName":"Hims","domain":"hims.com","url":"https://hims.com","headline":"Hims blocks all automated access at the HTTP layer, preventing both AI agents and programmatic integrations from reading the site.","compositeScore":47,"humanScore":80,"agentScore":14,"doorGap":66,"humanMeasured":1,"agentMeasured":4,"percentile":null,"humanPercentile":null,"agentPercentile":null,"isPartial":false,"depth":"free","siteClass":"unknown","scannerVersion":16,"scannedAt":"2026-09-08T20:03:55.591Z","unlocked":false,"mission":{"steps":[{"url":"https://hims.com","outcome":"blocked","purpose":"reach the site at all"},{"url":"https://hims.com/robots.txt","outcome":"ok","purpose":"find out whether machines are welcome"},{"url":"https://hims.com","outcome":"ok","purpose":"ask whether the door opens for requests carrying the AI crawlers' names"},{"url":"https://hims.com/llms.txt","outcome":"blocked","purpose":"read the site's own guide for language models"},{"url":"https://hims.com","outcome":"blocked","purpose":"find out what pages exist"},{"url":"https://hims.com/.well-known/security.txt","outcome":"blocked","purpose":"find a contact route for machines"},{"url":"https://hims.com","outcome":"blocked","purpose":"find a published agent interface"},{"url":"https://hims.com/.well-known/ai-plugin.json","outcome":"blocked","purpose":"find an agent plugin manifest"},{"url":"https://hims.com","outcome":"blocked","purpose":"find out whether verified agents are recognised"},{"url":"https://hims.com","outcome":"missing","purpose":"read the homepage as data rather than as a page"},{"url":"https://hims.com","outcome":"blocked","purpose":"find a machine readable API spec"},{"url":"https://hims.com","outcome":"missing","purpose":"read the developer documentation"},{"url":"https://hims.com/pricing","outcome":"blocked","purpose":"read the prices without running JavaScript"},{"url":"https://hims.com","outcome":"ok","purpose":"walk the way a visitor would, to a signup form or a product"}],"verdict":"The site refused automated access at hims.com, so the agent could not reach the site at all."},"observations":null,"dimensions":[{"key":"machine_discoverability","audience":"agent","score":13,"summary":"No JSON-LD schema or microdata on the homepage. The sitemap is blocked from automated access, so its contents cannot be verified. A real browser's own request to the homepage is refused with an automated traffic challenge, which closes the.","evidence":{"locked":true,"count":4}},{"key":"programmatic_onboarding","audience":"agent","score":10,"summary":"No API documentation is linked from the homepage. Automated access to all six standard OpenAPI paths was refused. The site offers no programmatic entry point that an agent or integration could discover or use.","evidence":{"locked":true,"count":3}},{"key":"pricing_legibility","audience":"agent","score":null,"summary":"Could not verify: this scan did not reach the pages that would show it.","evidence":{"locked":true,"count":1}},{"key":"agent_aware_instrumentation","audience":"agent","score":8,"summary":"No MCP manifest.","evidence":{"locked":true,"count":4}},{"key":"machine_fetchable_trust","audience":"agent","score":25,"summary":"The security.txt file at /.well-known/security.txt could not be checked because automated access was refused with HTTP 403. The homepage itself refuses all automated clients outright, blocking the ability to verify trust signals.","evidence":{"locked":true,"count":2}},{"key":"commercial_rails","audience":"agent","score":null,"summary":"Could not verify: this scan did not reach the pages that would show it.","evidence":{"locked":true,"count":2}},{"key":"steps_to_first_value","audience":"human","score":80,"summary":"The signup page is 2 steps from the homepage, which is a short distance. However, a real browser's request to the signup page was refused with an automated traffic challenge, so the form itself could not be read.","evidence":{"locked":true,"count":1}},{"key":"required_fields","audience":"human","score":null,"summary":"Could not verify: this scan did not reach the pages that would show it.","evidence":{"locked":true,"count":1}},{"key":"verification_walls","audience":"human","score":null,"summary":"Could not verify: this scan did not reach the pages that would show it.","evidence":{"locked":true,"count":1}},{"key":"error_recovery","audience":"human","score":null,"summary":"Could not verify: this scan did not reach the pages that would show it.","evidence":{"locked":true,"count":1}}],"issues":[{"rank":1,"title":"/, /pricing turn a real browser's own request away, so the wall sits below HTTP and no crawler reaches the page.","dimensionKey":"machine_discoverability","evidence":{"locked":true,"count":1},"fix":null},{"rank":2,"title":"No developer documentation is linked from the homepage, in raw HTML or the rendered page, so integration starts with a search engine.","dimensionKey":"programmatic_onboarding","evidence":{"locked":true,"count":1},"fix":null},{"rank":3,"title":"All automated access is blocked at the HTTP layer, preventing agents from reading pricing, discovering the API, or completing any programmatic task.","dimensionKey":"machine_discoverability","evidence":{"locked":true,"count":3},"fix":null}],"fixArtifacts":{"locked":true,"count":4,"summaries":[{"id":"bot_wall_guidance:notes","kind":"bot_wall_guidance","title":"Let verified assistants through","path":"notes","effort":{"minutes":60,"role":"developer"},"outcome":{"dimension":"machine_discoverability","external":["Assistant shopping and search crawlers reach the product, pricing and policy pages a buyer asks about."]}},{"id":"robots_search_bots:robots-txt","kind":"robots_search_bots","title":"robots.txt rules for AI crawlers","path":"/robots.txt","effort":{"minutes":10,"role":"owner"},"outcome":{"dimension":"machine_discoverability","external":["The assistants' search crawlers read and cite the site to buyers; training stays the owner's decision."]}},{"id":"organization_jsonld:homepage","kind":"organization_jsonld","title":"Organization structured data","path":"homepage","effort":{"minutes":15,"role":"developer"},"outcome":{"dimension":"machine_discoverability","external":["Search and assistant crawlers read the company entity from the homepage rather than inferring it."]}},{"id":"interfaces_note:notes","kind":"interfaces_note","title":"Machine interfaces: where you stand","path":"notes","effort":{"minutes":10,"role":"owner"},"outcome":{"dimension":"agent_aware_instrumentation","external":["The developer surface is built in an order where every published pointer answers."]}}]},"feedback":{"endpoint":"/api/feedback","mcpTool":"rate_fix","targets":[{"type":"report","key":"report"},{"type":"dimension","dimensionKey":"machine_discoverability","key":"dimension:machine_discoverability"},{"type":"dimension","dimensionKey":"programmatic_onboarding","key":"dimension:programmatic_onboarding"},{"type":"dimension","dimensionKey":"pricing_legibility","key":"dimension:pricing_legibility"},{"type":"dimension","dimensionKey":"agent_aware_instrumentation","key":"dimension:agent_aware_instrumentation"},{"type":"dimension","dimensionKey":"machine_fetchable_trust","key":"dimension:machine_fetchable_trust"},{"type":"dimension","dimensionKey":"commercial_rails","key":"dimension:commercial_rails"},{"type":"dimension","dimensionKey":"steps_to_first_value","key":"dimension:steps_to_first_value"},{"type":"dimension","dimensionKey":"required_fields","key":"dimension:required_fields"},{"type":"dimension","dimensionKey":"verification_walls","key":"dimension:verification_walls"},{"type":"dimension","dimensionKey":"error_recovery","key":"dimension:error_recovery"},{"type":"issue","dimensionKey":"machine_discoverability","checkId":"bot_walls","key":"issue:machine_discoverability:bot_walls"},{"type":"issue","dimensionKey":"programmatic_onboarding","checkId":"api_surface","key":"issue:programmatic_onboarding:api_surface"},{"type":"issue","dimensionKey":"machine_discoverability","checkId":null,"key":"issue:machine_discoverability:-"}]}}