Some cookies are necessary for SecondDoor to work. Others are optional, and tell us how the site and the product are used. Accept all, or decline all optional ones. Without a selection, nothing optional is set. More in our cookie policy.
Basic scanSoftware business · Marketing site/Scanned 8 Sept 2026, 14:04 UTC/1 browser pass
Copper publishes prices and welcomes agents to browse, but offers no API key without a sales conversation and no machine readable specification to build against.
Older scan
This report was produced by an earlier version of the scanner. Some findings may not match how the site is measured now.
Present. Agents lose ground at specific gates, not everywhere.
Ordered by what the evidence says is costing most. Written for whoever owns the site, not whoever builds it.
1 piece of evidence and the recommended fix are recorded for this issue, with /.well-known/security.txt written from your own pages.
This is a basic scan, so it raises the three issues the deterministic evidence supports. A deep scan sends two agents over the site and raises up to ten, each with cited evidence and the screens to prove it.
A deep scan walks the site with two agents, records cited evidence and screenshots, and keeps a mission timeline. It comes with the paid plans. Making an account costs nothing and gives you one basic scan a month.
The score and the audit trail stay public. The evidence and the files open with an account.
The audit trail behind every number above. Not measured is not zero.
Machine discoverability
No AI crawler is blocked by user agent rule, a real browser is served the page normally, and the site publishes a sitemap with 946 URLs, llms.txt, and 5 schema.org types on the homepage.
4 observations recorded.
Programmatic onboarding
Authentication is documented and code samples are provided on developer.copper.com, but no OpenAPI spec is published at any of the 6 standard paths checked. A client must be written by hand from prose documentation.
3 observations recorded.
Pricing legibility
9 prices are readable without JavaScript on the pricing page, with no tier routed to sales. Plans are published as Offer structured data. The pricing ladder is Basic at $23, Professional at $29, and Business at $59 per seat per month, with.
1 observation recorded.
Agent-aware instrumentation
No MCP manifest is published at any of the 3 standard paths checked. No ai-plugin.json or Web Bot Auth signals are present. The site does not advertise machine readable integration points for agents.
4 observations recorded.
Machine-fetchable trust
No security.txt is published at /.well-known/security.txt. The homepage answers automated requests and is served normally, but no security contact or vulnerability disclosure policy is machine readable.
2 observations recorded.
Commercial rails
Prices are published in raw HTML and as Offer structured data. A self serve signup form is reachable from the homepage in 2 steps with no typed fields required.
2 observations recorded.
Steps to first value
The primary call to action, 'Try Copper free', is 2 steps from the homepage and leads to a signup form with no required fields. A visitor can reach a working trial without typing anything.
1 observation recorded.
Required fields
The signup form has 0 required fields. Entry is by Google single sign on only, with no email, name, company or other typed input. Nothing stands between a visitor and account creation.
1 observation recorded.
Verification walls
No verification requirement appears on the signup page. Single sign on with Google avoids email verification entirely. A visitor can proceed to the product without confirming an address or phone number.
1 observation recorded.
Error recovery
No typed inputs were found on the signup form, so validation and error recovery cannot be observed. The form accepts Google authentication only, which either succeeds or fails at the provider level.
1 observation recorded.
It got through 10 of 15.
The agent got through 10 of 15 requests, but could not find a contact route for machines. It came up empty on 4 other checks too.