Some cookies are necessary for SecondDoor to work. Others are optional, and tell us how the site and the product are used. Accept all, or decline all optional ones. Without a selection, nothing optional is set. More in our cookie policy.
Basic scanUnclassified/Scanned 8 Sept 2026, 16:02 UTC/1 browser pass
A product guidance platform with published pricing but no API surface for agents to access or configure it.
Ordered by what the evidence says is costing most. Written for whoever owns the site, not whoever builds it.
3 pieces of evidence and the recommended fix are recorded for this issue, with /.well-known/security.txt written from your own pages.
This is a basic scan, so it raises the three issues the deterministic evidence supports. A deep scan sends two agents over the site and raises up to ten, each with cited evidence and the screens to prove it.
A deep scan walks the site with two agents, records cited evidence and screenshots, and keeps a mission timeline. It comes with the paid plans. Making an account costs nothing and gives you one basic scan a month.
The score and the audit trail stay public. The evidence and the files open with an account.
The audit trail. Not measured is not zero.
Machine discoverability
No AI crawler is blocked by robots.txt, a real browser is served the page normally, and 967 URLs are listed in the sitemap. The homepage contains SoftwareApplication structured data. Machines can find and read the site without obstruction.
4 observations recorded.
Programmatic onboarding
No API documentation is linked from the homepage or discoverable in raw HTML. No OpenAPI spec exists at any of the 5 standard paths checked. An agent cannot programmatically access or configure the product.
2 observations recorded.
Pricing legibility
15 prices are readable without JavaScript on the pricing page at /plans, with no tier gated behind a sales contact. Prices are published as Offer structured data. USD pricing is clear and complete for all published tiers.
1 observation recorded.
Agent-aware instrumentation
No MCP manifest exists at any of the 3 standard paths checked. The site does not publish machine control protocol support, so agents cannot use standard tooling to interact with it.
4 observations recorded.
Machine-fetchable trust
No security.txt file is published at /.well-known/security.txt. The homepage responds to automated requests with HTTP 200, but no trust signals are available for machines to verify the site's security practices or contact information.
2 observations recorded.
Commercial rails
Prices are published in raw HTML on the pricing page and structured as Offer data. The site publishes 15 prices across multiple tiers without gating any behind a sales contact, enabling machines to read commercial terms directly.
1 observation recorded.
Steps to first value
Could not verify: this scan did not reach the pages that would show it.
Required fields
Could not verify: this scan did not reach the pages that would show it.
Verification walls
Could not verify: this scan did not reach the pages that would show it.
Error recovery
Could not verify: this scan did not reach the pages that would show it.
It got through 7 of 13.
The agent got through 7 of 13 requests, but could not find a contact route for machines. It came up empty on 5 other checks too. That is enough missing for a machine to give up before it reaches a purchase.