Some cookies are necessary for SecondDoor to work. Others are optional, and tell us how the site and the product are used. Accept all, or decline all optional ones. Without a selection, nothing optional is set. More in our cookie policy.
Basic scanSoftware business · Storefront property/Scanned 8 Sept 2026, 13:48 UTC/1 browser pass
Prices render only in JavaScript, the signup form is blocked to agents by robots.txt, and API clients must be written by hand from prose documentation.
Older scan
This report was produced by an earlier version of the scanner. Some findings may not match how the site is measured now.
Wide. Agents are dropping out well before humans do.
Ordered by what the evidence says is costing most. Written for whoever owns the site, not whoever builds it.
1 piece of evidence and the recommended fix are recorded for this issue, with pricing page written from your own pages.
This is a basic scan, so it raises the three issues the deterministic evidence supports. A deep scan sends two agents over the site and raises up to ten, each with cited evidence and the screens to prove it.
A deep scan walks the site with two agents, records cited evidence and screenshots, and keeps a mission timeline. It comes with the paid plans. Making an account costs nothing and gives you one basic scan a month.
The score and the audit trail stay public. The evidence and the files open with an account.
The audit trail behind every number above. Not measured is not zero.
Machine discoverability
No AI crawler is blocked by robots.txt, a real browser is served the page normally, and 1052 URLs are listed in the sitemap. The homepage publishes 9 schema.org types including Product and Organization.
4 observations recorded.
Programmatic onboarding
Endpoint examples are shown in the developer documentation at developers.hubspot.com, but no OpenAPI spec is published at any of the 6 standard paths checked. No self-serve API key issuance is documented.
3 observations recorded.
Pricing legibility
16 prices appear only after JavaScript runs, a client that does not render pages sees no price at all.
1 observation recorded.
Agent-aware instrumentation
No MCP manifest is published at any of the 3 standard paths checked. No ai-plugin.json is published. The site publishes llms.txt with 293 lines, but no machine-readable protocol for agents to invoke the product or retrieve data.
4 observations recorded.
Machine-fetchable trust
security.txt is published at /.well-known/security.txt with a contact route for machines. The homepage responds to automated requests with HTTP 200 and renders 2000 characters.
2 observations recorded.
Commercial rails
The pricing page at /pricing/marketing renders 16 prices after JavaScript runs, but routes to a sales contact form without publishing any prices in the raw HTML or in machine-readable form.
2 observations recorded.
Steps to first value
The signup page is 2 steps from the homepage. However, robots.txt at app.hubspot.com contains 'Disallow: /' which closes the signup form to automated visitors that honour the standard.
1 observation recorded.
Required fields
Could not verify: this scan did not reach the pages that would show it.
1 observation recorded.
Verification walls
Could not verify: this scan did not reach the pages that would show it.
1 observation recorded.
Error recovery
Could not verify: this scan did not reach the pages that would show it.
1 observation recorded.
It got through 9 of 15.
The agent got through 9 of 15 requests, but could not find a published agent interface. It came up empty on 5 other checks too. That is enough missing for a machine to give up before it reaches a purchase.