Partial scanUnclassified/Scanned 11 Sept 2026, 01:26 UTC/1 browser pass, 1 pages reached
dropcatch.com
0 human and 2 agent dimensions measured from the pages checked; remaining dimensions are not scored.
Partial scanThe walk did not reach everything it looks for. 8 dimensions are recorded as not measured: Machine discoverability, Programmatic onboarding, Pricing legibility, Commercial rails, Steps to first value, Required fields, Verification walls and Error recovery. They are not scored as zero, and the composite is computed from the doors that were measured.
Older scan
This report was produced by an earlier version of the scanner. Some findings may not match how the site is measured now.
Human door
Not measured
What a first time visitor meets between landing and first value. 0 of 4 measured.
Agent door
24
What a machine can do on the site with nobody watching. 2 of 6 measured.
Door Gap
Not measured
One door was not measured on this scan, so there is no Door Gap to report.
Composite
24
Agent door only. The human door could not be measured on this scan.
The one issue worth fixing
Ordered by what the evidence says is costing most. Written for whoever owns the site, not whoever builds it.
1Machine-fetchable trust
No valid security.txt was identified at /.well-known/security.txt.
Publish /.well-known/security.txt with a contact route.
OwnerSite ownerEffort10 minutesDimension40Weak
See the fix and the evidenceDid this report tell you something you did not know?
Full issue list
1 across both doors. The first is open to everyone; the rest open with a work email or a free account.
What the scan saw
/.well-known/security.txt: the response did not validate as a security.txt.
Checked URL: https://www.dropcatch.com/.well-known/security.txt
Researchers and automated scanners find a disclosure address instead of guessing one.
The fix
Publish /.well-known/security.txt with a contact route.
This is a basic scan, so it raises the three issues the deterministic evidence supports. A deep scan sends two agents over the site and raises up to ten, each with cited evidence and the screens to prove it.
Deep scans need an account. Accounts are free.
A deep scan walks the site with two agents, records cited evidence and screenshots, and keeps a mission timeline. It comes with the paid plans. Making an account costs nothing and gives you one basic scan a month.
Get full access
The score, the audit trail and the first issue stay public. The rest opens with a work email or an account.
Free$0
For finding out where you stand.
- 1 basic scan a month
- 3 prioritised fixes, with evidence
- No watched domains
- Your latest report
Starter$29 a month
For one site you care about.
- A deep scan every week, another when your site changes, and 3 on demand
- Every fix the scan finds, not three
- Fixes reopen when a release undoes them
- 1 watched domain, checked every day
Free account
Keep this report and see the number move
This report is permanent. The site it describes is not. The address never changes, so a link sent today still opens next year, and a free account keeps it on a dashboard and rescans it once a month.
Share the result
Put the number where your team will see it
The badge always shows the latest scores for this domain and links back to the report. Put it in a README or a footer.
What the agents checked
The audit trail. Ten dimensions, 8 not measured. Not measured is not zero.
Agent door24 of 100
Machine discoverability
Not measured: an access refusal or challenge prevented our scanner from reading the required page.
Not measured
Programmatic onboarding
Not measured: our scanner could not identify the required evidence on the pages checked.
Not measured
Pricing legibility
Not measured: our scanner could not identify the required evidence on the pages checked.
Not measured
Agent-aware instrumentation
No MCP manifest was identified at the discovery paths checked.
4 observations recorded.
The walk
Two agents, the same journey, side by side. Each entry describes what this scan actually reached.
Human doorchrome, javascript on
01Entry observationThe linked entry destination presented our browser with an access challenge; its contents were not measured./hiw/contact
1 moment recorded. Nothing was submitted and no account was created.
Agent doorhttp fetch, no javascript
reached01www.dropcatch.comWent to reach the site at all.
not found02/robots.txtCould not find out whether machines are welcome.