Some cookies are necessary for SecondDoor to work. Others are optional, and tell us how the site and the product are used. Accept all, or decline all optional ones. Without a selection, nothing optional is set. More in our cookie policy.
Basic scanSoftware business · Marketing site/Scanned 8 Sept 2026, 14:07 UTC/1 browser pass
Ashby publishes pricing and welcomes AI crawlers, but offers no API key without a sales conversation and no machine-readable specification for integration.
Older scan
This report was produced by an earlier version of the scanner. Some findings may not match how the site is measured now.
Present. Agents lose ground at specific gates, not everywhere.
Ordered by what the evidence says is costing most. Written for whoever owns the site, not whoever builds it.
2 pieces of evidence and the recommended fix are recorded for this issue, with notes written from your own pages.
This is a basic scan, so it raises the three issues the deterministic evidence supports. A deep scan sends two agents over the site and raises up to ten, each with cited evidence and the screens to prove it.
A deep scan walks the site with two agents, records cited evidence and screenshots, and keeps a mission timeline. It comes with the paid plans. Making an account costs nothing and gives you one basic scan a month.
The score and the audit trail stay public. The evidence and the files open with an account.
The audit trail behind every number above. Not measured is not zero.
Machine discoverability
No AI crawler is blocked by robots.txt or user agent rules. A real browser is served the page normally. The homepage carries 4 schema.org types, a sitemap lists 475 URLs, llms.txt is published, and comparison pages render without.
4 observations recorded.
Programmatic onboarding
Authentication is documented at developers.ashbyhq.com, but no OpenAPI spec exists at any of the 6 standard paths checked. No self-serve API key issuance is published.
3 observations recorded.
Pricing legibility
5 prices are readable without JavaScript on the pricing page, ranging from $90 to $400 per month. No tier is gated behind a demo or contact-sales requirement. Currency is USD and pricing is per-seat.
1 observation recorded.
Agent-aware instrumentation
No MCP manifest is published at any of the 3 standard paths checked. No ai-plugin.json or Web Bot Auth signals are present. The site does not declare machine-readable integration points for agents.
4 observations recorded.
Machine-fetchable trust
No security.txt is published at /.well-known/security.txt. The homepage responds to automated requests with HTTP 200 and serves structured data. Trust signals are minimal.
2 observations recorded.
Commercial rails
Prices are published in raw HTML on the pricing page with no sales gate. A self-serve signup form is reachable from the homepage in 2 steps and asks for 4 fields with none required. Payment is not requested on signup.
2 observations recorded.
Steps to first value
The primary call to action on the homepage leads to a signup form in 2 steps. The form itself is presented immediately without intermediate pages.
1 observation recorded.
Required fields
The signup form on the entry path contains 4 fields, and 0 of them are marked required. No validation rules are enforced on any input. The form imposes minimal friction.
1 observation recorded.
Verification walls
No verification requirement is visible on the signup page itself. Email confirmation, phone verification, or identity checks may occur after submission, but the form does not declare them. The initial barrier is low.
1 observation recorded.
Error recovery
0 of 4 inputs on the signup form carry validation rules or constraint descriptions. No inline error containers or live regions are present to guide correction. A visitor who enters invalid data receives no help recovering.
1 observation recorded.
It got through 10 of 15.
The agent got through 10 of 15 requests, but could not find a contact route for machines. It came up empty on 4 other checks too.