Basic scanRetail storefront · Storefront property/Scanned 1 Sept 2026, 14:23 UTC/1 browser pass
burton.com
A shopper can reach a product and price in two steps, but agents cannot discover how to complete a purchase without reading the UCP manifest directly.
Three issues, in priority order
Each one is drawn from evidence recorded during the walks.
3 pieces of evidence and the recommended fix are recorded for this issue.
We sent a buying agent
14 requests, in order
The agent got through 7 of 14 requests, but could not find a contact route for machines. It came up empty on 6 other checks too. That is enough missing for a machine to give up before it reaches a purchase.
- 01reached
www.burton.com
reach the site at all
- 02reached
/robots.txt
find out whether machines are welcome
- 03reached
www.burton.com
ask whether the door opens for requests carrying the AI crawlers' names
- 04reached
/llms.txt
read the site's own guide for language models
- 05reached
/sitemap.xml
find out what pages exist
- 06not found
/.well-known/security.txt
find a contact route for machines
- 07not found
www.burton.com
find a published agent interface
- 08not found
/.well-known/ai-plugin.json
find an agent plugin manifest
- 09not found
www.burton.com
find out whether verified agents are recognised
- 10not found
www.burton.com
read the homepage as data rather than as a page
- 11not found
www.burton.com
find a machine readable API spec
- 12not found
www.burton.com
read the developer documentation
- 13reached
www.burton.com
read the prices without running JavaScript
- 14reached
www.burton.com
walk the way a visitor would, to a signup form or a product
Deep scans need an account. Accounts are free.
A deep scan walks the site with two agents, records cited evidence and screenshots, and keeps a mission timeline. It comes with the paid plans. Making an account costs nothing and gives you one basic scan a month.
Ten dimensions
Not measured is not zero.
The agent door
49 of 100What a machine can do on your site with nobody watching.
Machine discoverability
Whether a retrieval system can find and read you at all.
No AI crawler is blocked by robots.txt or user agent rules. The site serves a real browser normally, publishes llms.txt, and lists 392 product URLs in its sitemap. Assistants can find and read product pages without JavaScript barriers.
4 observations recorded.
Programmatic onboarding
Whether an agent can get working access without a human.
No API documentation is linked from the homepage or published at standard paths. The UCP manifest exists but is not discoverable through conventional developer documentation channels, leaving agents to reverse-engineer the transaction.
3 observations recorded.
Pricing legibility
Whether total cost can be computed from published numbers.
Prices appear in raw HTML on product pages (2 checked, both carried prices), but no Product schema.org markup accompanies them. An agent must parse the page text to extract price and currency rather than reading structured data.
1 observation recorded.
Agent-aware instrumentation
Whether you publish anything built for machine callers.
No MCP manifest is published at standard paths. A Universal Commerce Protocol manifest at version 2026-08-25 is present and declares 8 capabilities including checkout and payment, but its existence is not signalled through conventional.
4 observations recorded.
Machine-fetchable trust
Whether terms, security and status are readable as text.
No security.txt file is published. The homepage responds to automated requests with HTTP 200, but no trust signals, contact information for security issues, or vulnerability disclosure policy are machine-readable.
2 observations recorded.
Commercial rails
Whether a purchase can complete without a sales call.
A UCP manifest declares 8 shopping capabilities including checkout, cart, fulfillment and order management, with 3 payment handlers. Shop Pay and PayPal are accepted. The protocol is published but requires agents to know to look for it.
2 observations recorded.
The human door
72 of 100What a first time visitor meets between landing and first value.
Steps to first value
How far a new visitor travels before something useful happens.
A product page with price ($100) and an add-to-basket control is reachable in 2 steps from the homepage. Both human shoppers and agents can reach a buyable item immediately.
1 observation recorded.
Required fields
How much you ask for before you give anything back.
The product page carries no account requirement. 11 inputs are present on the path walked, but 2 express wallet options (Shop Pay, PayPal) bypass form entry entirely, allowing purchase without registration.
1 observation recorded.
Verification walls
How many gates stand between intent and access.
No sign-in requirement blocks access to the product page or checkout initiation. The page is readable and actionable without account creation, though the walk could not verify what happens after form submission.
1 observation recorded.
Error recovery
What happens when someone gets it wrong.
Only 1 of 11 inputs on the product page carries validation rules or constraint attributes. Most fields lack inline error containers or live regions to guide correction, leaving users to guess what went wrong.
1 observation recorded.
Show the score
The badge always shows the latest scores for this domain and links back to the report. Put it in a README or a footer.
This number moves every time you deploy
SecondDoor rescans on a schedule and tells you the day a release closes a door. Watch the trend on the dashboard, or scan another site now.