Some cookies are necessary for SecondDoor to work. Others are optional, and tell us how the site and the product are used. Accept all, or decline all optional ones. Without a selection, nothing optional is set. More in our cookie policy.
Basic scanSoftware business · Marketing site/Scanned 8 Sept 2026, 14:04 UTC/1 browser pass
Close publishes prices and API specs but gates signup behind bot detection, blocking agents from obtaining credentials without human intervention.
Older scan
This report was produced by an earlier version of the scanner. Some findings may not match how the site is measured now.
Present. Agents lose ground at specific gates, not everywhere.
Ordered by what the evidence says is costing most. Written for whoever owns the site, not whoever builds it.
3 pieces of evidence and the recommended fix are recorded for this issue, with /.well-known/security.txt written from your own pages.
This is a basic scan, so it raises the three issues the deterministic evidence supports. A deep scan sends two agents over the site and raises up to ten, each with cited evidence and the screens to prove it.
A deep scan walks the site with two agents, records cited evidence and screenshots, and keeps a mission timeline. It comes with the paid plans. Making an account costs nothing and gives you one basic scan a month.
The score and the audit trail stay public. The evidence and the files open with an account.
The audit trail behind every number above. Not measured is not zero.
Machine discoverability
No AI crawler is blocked by robots.txt, a real browser is served the page normally, key pages render without JavaScript, a sitemap lists 1382 URLs, 6 schema.org types appear on the homepage, comparison pages are listed and readable without.
4 observations recorded.
Programmatic onboarding
A machine readable OpenAPI spec is published at developer.close.com/openapi.json, but the signup page is protected by automated traffic detection that blocks browser automation, preventing agents from obtaining API credentials without.
3 observations recorded.
Pricing legibility
33 prices are readable without JavaScript on the pricing page, with plans named Solo/Essentials, Growth, and Scale at $9, $35, $99, and $139 per seat. An enterprise tier routes to sales, which is standard practice.
1 observation recorded.
Agent-aware instrumentation
A machine readable API spec is published, but no MCP manifest exists at the 3 standard paths checked, and no ai-plugin.json is published. OAuth authorization metadata and pricing.md are also absent, limiting machine-driven integration.
4 observations recorded.
Machine-fetchable trust
No security.txt is published at /.well-known/security.txt, and the homepage answers automated requests without a trust signal. The site does allow declared AI crawlers by user agent, but provides no machine readable security or contact.
2 observations recorded.
Commercial rails
Prices are published in raw HTML, the plans are published as Offer structured data.
2 observations recorded.
Steps to first value
The signup page is 2 steps from the homepage via the Try for free call to action. The site answered the automated browser with a traffic challenge, so the form itself could not be read.
1 observation recorded.
Required fields
Could not verify: this scan did not reach the pages that would show it.
1 observation recorded.
Verification walls
Could not verify: this scan did not reach the pages that would show it.
1 observation recorded.
Error recovery
Could not verify: this scan did not reach the pages that would show it.
1 observation recorded.
It got through 11 of 15.
The agent got through 11 of 15 requests, but could not find a contact route for machines. It came up empty on 3 other checks too.