Basic scanRetail storefront · Storefront property/Scanned 3 Sept 2026, 19:31 UTC/1 browser pass
burton.com
A Shopify storefront with strong machine discoverability but no API surface for programmatic integration.
Three issues, in priority order
Each one is drawn from evidence recorded during the walks.
3 pieces of evidence and the recommended fix are recorded for this issue.
We sent a buying agent
17 requests, in order
The agent got through 10 of 17 requests, but could not find a contact route for machines. It came up empty on 6 other checks too.
- 01reached
www.burton.com
reach the site at all
- 02reached
/robots.txt
find out whether machines are welcome
- 03reached
www.burton.com
ask whether the door opens for requests carrying the AI crawlers' names
- 04reached
/llms.txt
read the site's own guide for language models
- 05reached
/sitemap.xml
find out what pages exist
- 06not found
/.well-known/security.txt
find a contact route for machines
- 07not found
www.burton.com
find a published agent interface
- 08not found
/.well-known/ai-plugin.json
find an agent plugin manifest
- 09not found
www.burton.com
find out whether verified agents are recognised
- 10not found
www.burton.com
read the homepage as data rather than as a page
- 11not found
www.burton.com
find a machine readable API spec
- 12not found
www.burton.com
read the developer documentation
- 13reached
www.burton.com
read the prices without running JavaScript
- 14reached
www.burton.com
read the product catalogue as data
- 15reached
www.burton.com
read a product page as data
- 16reached
www.burton.com
read the returns and shipping terms
- 17reached
www.burton.com
walk the way a visitor would, to a signup form or a product
Deep scans need an account. Accounts are free.
A deep scan walks the site with two agents, records cited evidence and screenshots, and keeps a mission timeline. It comes with the paid plans. Making an account costs nothing and gives you one basic scan a month.
Ten dimensions
Not measured is not zero.
The agent door
62 of 100What a machine can do on your site with nobody watching.
Machine discoverability
Whether a retrieval system can find and read you at all.
No AI crawler is blocked by robots.txt or user agent rules. The site publishes llms.txt, a sitemap with 477 URLs including product pages, and serves all key pages to automated clients without JavaScript requirements.
4 observations recorded.
Programmatic onboarding
Whether an agent can get working access without a human.
No API documentation is linked from the homepage or discoverable in the site structure. The site publishes a UCP manifest for checkout but offers no developer surface for catalog queries, product lookups, or order management beyond what a.
3 observations recorded.
Pricing legibility
Whether total cost can be computed from published numbers.
Prices appear in raw HTML on all 3 product pages checked and in Product structured data with currency. An agent can parse cost without scraping. However, the visible price ($100) differs from the structured price ($9.95) on one product.
2 observations recorded.
Agent-aware instrumentation
Whether you publish anything built for machine callers.
A UCP manifest at version 2026-08-25 declares 8 capabilities and 3 payment handlers, allowing agents to discover checkout flows. The catalogue answers as data at /products.json with brand on each product.
4 observations recorded.
Machine-fetchable trust
Whether terms, security and status are readable as text.
No security.txt file is published. Returns and shipping policies read as plain text on dedicated pages linked from product pages, though neither policy appears in structured data on the products themselves.
3 observations recorded.
Commercial rails
Whether a purchase can complete without a sales call.
Product markup carries price, currency, GTIN and brand. The catalogue at /products.json is open and includes vendor data. A UCP manifest publishes transaction capabilities. Returns and shipping policies are readable as text.
4 observations recorded.
The human door
74 of 100What a first time visitor meets between landing and first value.
Steps to first value
How far a new visitor travels before something useful happens.
A product with visible price ($100) and an add-to-cart control is reachable in 2 steps from the homepage. No variant selection is required on the product checked. A shopper or agent can proceed to payment immediately.
1 observation recorded.
Required fields
How much you ask for before you give anything back.
The product page does not demand an account before purchase. Two express wallets (Shop Pay and PayPal) are available, allowing checkout without filling any form.
1 observation recorded.
Verification walls
How many gates stand between intent and access.
No sign-in requirement blocks access to the product page or the add-to-cart flow. Express payment options skip form entry entirely. Email or account verification does not appear as a gate before purchase can begin.
1 observation recorded.
Error recovery
What happens when someone gets it wrong.
Only 1 of 5 inputs on the product page carries validation rules or constraints. The page includes 3 inline error containers and 2 live regions, suggesting some error handling exists, but most form fields lack validation attributes to guide.
1 observation recorded.
Show the score
The badge always shows the latest scores for this domain and links back to the report. Put it in a README or a footer.
This number moves every time you deploy
SecondDoor rescans on a schedule and tells you the day a release closes a door. Watch the trend on the dashboard, or scan another site now.