Some cookies are necessary for SecondDoor to work. Others are optional, and tell us how the site and the product are used. Accept all, or decline all optional ones. Without a selection, nothing optional is set. More in our cookie policy.
Basic scanSoftware business · Marketing site/Scanned 8 Sept 2026, 14:03 UTC/1 browser pass
Folk publishes prices and welcomes agents, but offers no API surface for programmatic access or integration.
Older scan
This report was produced by an earlier version of the scanner. Some findings may not match how the site is measured now.
Present. Agents lose ground at specific gates, not everywhere.
Ordered by what the evidence says is costing most. Written for whoever owns the site, not whoever builds it.
3 pieces of evidence and the recommended fix are recorded for this issue, with /.well-known/security.txt written from your own pages.
This is a basic scan, so it raises the three issues the deterministic evidence supports. A deep scan sends two agents over the site and raises up to ten, each with cited evidence and the screens to prove it.
A deep scan walks the site with two agents, records cited evidence and screenshots, and keeps a mission timeline. It comes with the paid plans. Making an account costs nothing and gives you one basic scan a month.
The score and the audit trail stay public. The evidence and the files open with an account.
The audit trail behind every number above. Not measured is not zero.
Machine discoverability
Robots.txt names 6 AI crawlers and allows them all. A real browser is served the page normally. Key pages read without JavaScript. Sitemap lists 1274 URLs. Homepage carries 9 schema.org types including SoftwareApplication and Offer.
4 observations recorded.
Programmatic onboarding
Developer documentation at developer.folk.app/ contains 687 characters of text but shows no API credentials, endpoints, code samples, authentication documentation or self-serve key issuance.
3 observations recorded.
Pricing legibility
24 prices are readable without JavaScript on the pricing page. Three plans are published: Standard at $24/month, Premium at $48/month, and Enterprise routed to sales. Plans are structured as Offer schema. FAQ markup is present.
1 observation recorded.
Agent-aware instrumentation
MCP manifest is published at https://developer.folk.app/.well-known/mcp.json. Robots.txt names 6 AI crawlers (gptbot, chatgpt-user, claudebot, anthropic-ai, perplexitybot, ccbot) and allows them.
4 observations recorded.
Machine-fetchable trust
Homepage answers automated requests with HTTP 200. No security.txt is published at /.well-known/security.txt. No Web Bot Auth signals are present. No ai-plugin.json is published.
2 observations recorded.
Commercial rails
Prices are published in raw HTML on the pricing page without JavaScript requirement. Self-serve signup form is 2 steps from the homepage. Plans are published as Offer structured data. Google single sign-on is the only entry method offered.
2 observations recorded.
Steps to first value
Primary call to action is 'Try for free' at https://app.folk.app/login, 2 steps from the homepage. No typed fields are required. Single sign-on with Google is the only option. No payment is requested at signup.
1 observation recorded.
Required fields
The signup form contains 0 required fields. Entry is via Google single sign-on only. No email, name, company or other typed input is collected before access is granted.
1 observation recorded.
Verification walls
No verification requirement appears on the signup page. Single sign-on with Google avoids email verification entirely. No CAPTCHA, phone verification or other confirmation step stands between the visitor and the product.
1 observation recorded.
Error recovery
No typed inputs were found on the signup form, so validation and error recovery cannot be observed. Single sign-on delegates error handling to Google's authentication flow.
1 observation recorded.
It got through 10 of 15.
The agent got through 10 of 15 requests, but could not find a contact route for machines. It came up empty on 4 other checks too.