Some cookies are necessary for SecondDoor to work. Others are optional, and tell us how the site and the product are used. Accept all, or decline all optional ones. Without a selection, nothing optional is set. More in our cookie policy.
Basic scanSoftware business · Marketing site/Scanned 8 Sept 2026, 14:08 UTC/1 browser pass
Avoma publishes pricing and allows agent access, but offers no API documentation or programmatic onboarding path.
Older scan
This report was produced by an earlier version of the scanner. Some findings may not match how the site is measured now.
Present. Agents lose ground at specific gates, not everywhere.
Ordered by what the evidence says is costing most. Written for whoever owns the site, not whoever builds it.
3 pieces of evidence and the recommended fix are recorded for this issue, with /.well-known/security.txt written from your own pages.
This is a basic scan, so it raises the three issues the deterministic evidence supports. A deep scan sends two agents over the site and raises up to ten, each with cited evidence and the screens to prove it.
A deep scan walks the site with two agents, records cited evidence and screenshots, and keeps a mission timeline. It comes with the paid plans. Making an account costs nothing and gives you one basic scan a month.
The score and the audit trail stay public. The evidence and the files open with an account.
The audit trail behind every number above. Not measured is not zero.
Machine discoverability
Robots.txt explicitly names and allows gptbot, a real browser is served normally, key pages render without JavaScript, and a sitemap lists 662 URLs. The homepage carries 6 schema.org types including SoftwareApplication with pricing.
4 observations recorded.
Programmatic onboarding
No API surface was found in the documentation that was linked and fetched.
3 observations recorded.
Pricing legibility
79 prices are readable without JavaScript on the pricing page. All tiers are published with no sales gate. Prices are structured as Offer schema with UnitPriceSpecification. Per-seat pricing is clear.
1 observation recorded.
Agent-aware instrumentation
Robots.txt names 1 AI crawler (gptbot) and allows it, showing awareness. No MCP manifest exists at the 3 standard paths. No ai-plugin.json or Web Bot Auth signals are present.
4 observations recorded.
Machine-fetchable trust
No security.txt is published at /.well-known/security.txt. The homepage answers automated requests normally. An agent can fetch the site but cannot verify the organization's security contact or incident response policy.
2 observations recorded.
Commercial rails
Prices are published in raw HTML on the pricing page with no demo gate. A self-serve signup form is 2 steps from the homepage and asks only for email with Google SSO. Offer schema is present.
2 observations recorded.
Steps to first value
The primary CTA 'Try Avoma for Free' is 2 steps from the homepage and leads to a signup form. The form itself is 2 steps away. No payment is required to start.
1 observation recorded.
Required fields
The signup form has 1 field and 0 are required. Google SSO is offered as an alternative. No payment information is requested. A visitor can begin without providing a name, company, or phone number.
1 observation recorded.
Verification walls
No verification requirement appears on the signup page. Google SSO avoids email verification entirely. The page has inline error containers but no CAPTCHA, SMS, or email confirmation copy is visible.
1 observation recorded.
Error recovery
The signup form has 1 input and 0 carry validation rules or descriptions. An inline error container is present on the page. If validation fails, the user will see an error, but the form provides no guidance on what input is expected or why.
1 observation recorded.
It got through 9 of 15.
The agent got through 9 of 15 requests, but could not find a contact route for machines. It came up empty on 5 other checks too.