Some cookies are necessary for SecondDoor to work. Others are optional, and tell us how the site and the product are used. Accept all, or decline all optional ones. Without a selection, nothing optional is set. More in our cookie policy.
Basic scanSoftware business · Marketing site/Scanned 8 Sept 2026, 19:57 UTC/1 browser pass
A product tour platform with published pricing but no self-serve API access path for agents or humans.
Ordered by what the evidence says is costing most. Written for whoever owns the site, not whoever builds it.
3 pieces of evidence and the recommended fix are recorded for this issue, with /.well-known/security.txt written from your own pages.
This is a basic scan, so it raises the three issues the deterministic evidence supports. A deep scan sends two agents over the site and raises up to ten, each with cited evidence and the screens to prove it.
A deep scan walks the site with two agents, records cited evidence and screenshots, and keeps a mission timeline. It comes with the paid plans. Making an account costs nothing and gives you one basic scan a month.
The score and the audit trail stay public. The evidence and the files open with an account.
The audit trail. Not measured is not zero.
Machine discoverability
Robots.txt allows all major AI crawlers including GPT, Claude, Gemini and Perplexity. A real browser is served the page normally. Sitemap lists 967 URLs. SoftwareApplication structured data is present.
4 observations recorded.
Programmatic onboarding
Could not verify: this scan did not reach the pages that would show it.
Pricing legibility
Could not verify: this scan did not reach the pages that would show it.
Agent-aware instrumentation
No MCP manifest at any of the 3 standard paths checked. No AI plugin specification. The site does not publish machine-readable instructions for agents to understand what actions are available or how to integrate with the product.
4 observations recorded.
Machine-fetchable trust
No security.txt file published at the standard path. The homepage responds to automated requests with HTTP 200 and renders normally in a browser, but no trust signals such as security contact information or vulnerability disclosure policy.
2 observations recorded.
Commercial rails
No self-serve API key issuance path is documented or discoverable. Pricing is published but obtaining working access requires a human sales interaction or signup form submission.
Steps to first value
Could not verify: this scan did not reach the pages that would show it.
Required fields
Could not verify: this scan did not reach the pages that would show it.
Verification walls
Could not verify: this scan did not reach the pages that would show it.
Error recovery
Could not verify: this scan did not reach the pages that would show it.
It got through 5 of 10.
The agent got through 5 of 10 requests, but could not read the site's own guide for language models. It came up empty on 4 other checks too. That is enough missing for a machine to give up before it reaches a purchase.