Basic scanUnclassified/Scanned 8 Sept 2026, 14:11 UTC/1 browser pass

drata.com

Drata blocks automated clients at the door while serving real browsers, forcing assistants to drive a browser instead of reading the site directly.

Older scan

This report was produced by an earlier version of the scanner. Some findings may not match how the site is measured now.

Human door

What a first time visitor meets between landing and first value.

Agent door

What a machine can do on the site with nobody watching.

Door Gap

Composite

Both doors weigh equally.

Scan your own siteHow the score is computed

Wide. Agents are dropping out well before humans do.

The three issues worth fixing first

Ordered by what the evidence says is costing most. Written for whoever owns the site, not whoever builds it.

1 piece of evidence and the recommended fix are recorded for this issue, with notes written from your own pages.

Did this report tell you something you did not know?

This is a basic scan, so it raises the three issues the deterministic evidence supports. A deep scan sends two agents over the site and raises up to ten, each with cited evidence and the screens to prove it.

Deep scans need an account. Accounts are free.

A deep scan walks the site with two agents, records cited evidence and screenshots, and keeps a mission timeline. It comes with the paid plans. Making an account costs nothing and gives you one basic scan a month.

Create an account

Get full access

The score and the audit trail stay public. The evidence and the files open with an account.

Free$0

For finding out where you stand.

1 basic scan a month
3 prioritised fixes, with evidence
No watched domains
Your latest report

Create a free account

Starter$29 a month

For one site you care about.

A deep scan every week, another when your site changes, and 3 on demand
Every fix the scan finds, not three
Fixes reopen when a release undoes them
1 watched domain, checked every day
Competitor comparison, 2 per domain

What the agents checked

The audit trail behind every number above. Not measured is not zero.

Agent door26 of 100

Machine discoverability

Robots.txt names 10 AI crawlers and allows them, a real browser is served the page normally, no sitemap, no schema.org markup, llms.txt is published, a declared intent for assistants, a key page turns the honest client away while serving a.

4 observations recorded.

43Weak

Programmatic onboarding

No API documentation is linked from the homepage in raw HTML or rendered page. No OpenAPI spec exists at any of the 5 standard paths checked. The signup form itself is reachable by browser but offers no programmatic alternative for.

3 observations recorded.

10Blocking

Pricing legibility

Could not verify: this scan did not reach the pages that would show it.

Human door56 of 100

Steps to first value

The primary call to action 'Get Started' leads to a signup form in 2 steps from the homepage. The form is rendered and functional in a real browser.

1 observation recorded.

80Strong

Required fields

The signup form contains 18 total fields, of which 10 are marked required: First Name, Last Name, Company Name, Work Email, and Number of Employees appear twice in the field list.

1 observation recorded.

25Weak

Verification walls

No verification requirement appears on the signup page itself. The form collects email and name but does not show email confirmation, phone verification, or identity checks as blocking steps.

1 observation recorded.

65Passable

Error recovery

10 of 24 form inputs carry validation rules, meaning 42 percent of fields have constraints. No inline error containers or live regions were detected on the form, so error feedback mechanism could not be verified.

1 observation recorded.

54Passable

We sent a buying agent. 14 requests, in order

It got through 4 of 14.

The site refused automated access at drata.com, so the agent could not reach the site at all.

01drata.comreach the site at allrefused

02/robots.txtfind out whether machines are welcomereached

03drata.comask whether the door opens for requests carrying the AI crawlers' namesreached

04/llms.txtread the site's own guide for language modelsreached

05drata.comfind out what pages existrefused

06/.well-known/security.txtfind a contact route for machinesnot found

07drata.comfind a published agent interfacenot found

08/.well-known/ai-plugin.jsonfind an agent plugin manifestnot found

09drata.comfind out whether verified agents are recognisednot found

10drata.comread the homepage as data rather than as a pagenot found

11drata.comfind a machine readable API specnot found

12drata.comread the developer documentationnot found

13/pricingread the prices without running JavaScriptrefused

14/demowalk the way a visitor would, to a signup form or a productreached

The three issues worth fixing first

Deep scans need an account. Accounts are free.

Get full access

For finding out where you stand.

For one site you care about.

This report is permanent. The site it describes is not.

Put the number where your team will see it

What the agents checked

For a portfolio and a release cadence.

We sent a buying agent. 14 requests, in order