SecondDoor

Basic scanRetail storefront · Storefront property/Scanned 3 Sept 2026, 19:31 UTC/1 browser pass

burton.com

A Shopify storefront with strong machine discoverability but no API surface for programmatic integration.

Human door74
Agent door62
Door Gap12

Composite

68

Three issues, in priority order

Each one is drawn from evidence recorded during the walks.

3 pieces of evidence and the recommended fix are recorded for this issue.

A work email. We send the report and nothing else unless you ask.

Did this report tell you something you did not know?

We sent a buying agent

17 requests, in order

The agent got through 10 of 17 requests, but could not find a contact route for machines. It came up empty on 6 other checks too.

  1. 01

    www.burton.com

    reach the site at all

    reached
  2. 02

    /robots.txt

    find out whether machines are welcome

    reached
  3. 03

    www.burton.com

    ask whether the door opens for requests carrying the AI crawlers' names

    reached
  4. 04

    /llms.txt

    read the site's own guide for language models

    reached
  5. 05

    /sitemap.xml

    find out what pages exist

    reached
  6. 06

    /.well-known/security.txt

    find a contact route for machines

    not found
  7. 07

    www.burton.com

    find a published agent interface

    not found
  8. 08

    /.well-known/ai-plugin.json

    find an agent plugin manifest

    not found
  9. 09

    www.burton.com

    find out whether verified agents are recognised

    not found
  10. 10

    www.burton.com

    read the homepage as data rather than as a page

    not found
  11. 11

    www.burton.com

    find a machine readable API spec

    not found
  12. 12

    www.burton.com

    read the developer documentation

    not found
  13. 13

    www.burton.com

    read the prices without running JavaScript

    reached
  14. 14

    www.burton.com

    read the product catalogue as data

    reached
  15. 15

    www.burton.com

    read a product page as data

    reached
  16. 16

    www.burton.com

    read the returns and shipping terms

    reached
  17. 17

    www.burton.com

    walk the way a visitor would, to a signup form or a product

    reached

Deep scans need an account. Accounts are free.

A deep scan walks the site with two agents, records cited evidence and screenshots, and keeps a mission timeline. It comes with the paid plans. Making an account costs nothing and gives you one basic scan a month.

Create an account

Ten dimensions

Not measured is not zero.

The agent door

62 of 100

What a machine can do on your site with nobody watching.

Machine discoverability

Whether a retrieval system can find and read you at all.

100Strong

No AI crawler is blocked by robots.txt or user agent rules. The site publishes llms.txt, a sitemap with 477 URLs including product pages, and serves all key pages to automated clients without JavaScript requirements.

4 observations recorded.

Programmatic onboarding

Whether an agent can get working access without a human.

10Blocking

No API documentation is linked from the homepage or discoverable in the site structure. The site publishes a UCP manifest for checkout but offers no developer surface for catalog queries, product lookups, or order management beyond what a.

3 observations recorded.

Pricing legibility

Whether total cost can be computed from published numbers.

73Strong

Prices appear in raw HTML on all 3 product pages checked and in Product structured data with currency. An agent can parse cost without scraping. However, the visible price ($100) differs from the structured price ($9.95) on one product.

2 observations recorded.

Agent-aware instrumentation

Whether you publish anything built for machine callers.

42Weak

A UCP manifest at version 2026-08-25 declares 8 capabilities and 3 payment handlers, allowing agents to discover checkout flows. The catalogue answers as data at /products.json with brand on each product.

4 observations recorded.

Machine-fetchable trust

Whether terms, security and status are readable as text.

65Passable

No security.txt file is published. Returns and shipping policies read as plain text on dedicated pages linked from product pages, though neither policy appears in structured data on the products themselves.

3 observations recorded.

Commercial rails

Whether a purchase can complete without a sales call.

81Strong

Product markup carries price, currency, GTIN and brand. The catalogue at /products.json is open and includes vendor data. A UCP manifest publishes transaction capabilities. Returns and shipping policies are readable as text.

4 observations recorded.

The human door

74 of 100

What a first time visitor meets between landing and first value.

Steps to first value

How far a new visitor travels before something useful happens.

95Strong

A product with visible price ($100) and an add-to-cart control is reachable in 2 steps from the homepage. No variant selection is required on the product checked. A shopper or agent can proceed to payment immediately.

1 observation recorded.

Required fields

How much you ask for before you give anything back.

80Strong

The product page does not demand an account before purchase. Two express wallets (Shop Pay and PayPal) are available, allowing checkout without filling any form.

1 observation recorded.

Verification walls

How many gates stand between intent and access.

75Strong

No sign-in requirement blocks access to the product page or the add-to-cart flow. Express payment options skip form entry entirely. Email or account verification does not appear as a gate before purchase can begin.

1 observation recorded.

Error recovery

What happens when someone gets it wrong.

44Weak

Only 1 of 5 inputs on the product page carries validation rules or constraints. The page includes 3 inline error containers and 2 live regions, suggesting some error handling exists, but most form fields lack validation attributes to guide.

1 observation recorded.

Show the score

SecondDoor Door Gap badge for burton.com

The badge always shows the latest scores for this domain and links back to the report. Put it in a README or a footer.

This number moves every time you deploy

SecondDoor rescans on a schedule and tells you the day a release closes a door. Watch the trend on the dashboard, or scan another site now.

Some cookies are necessary for SecondDoor to work. Others are optional, and tell us how the site and the product are used. Accept all, or decline all optional ones. Without a selection, nothing optional is set. More in our cookie policy.