Some cookies are necessary for SecondDoor to work. Others are optional, and tell us how the site and the product are used. Accept all, or decline all optional ones. Without a selection, nothing optional is set. More in our cookie policy.
Basic scanSoftware business · Marketing site/Scanned 8 Sept 2026, 14:48 UTC/1 browser pass
API credentials are documented but not self-serve, forcing agents to contact sales before they can integrate.
Older scan
This report was produced by an earlier version of the scanner. Some findings may not match how the site is measured now.
Present. Agents lose ground at specific gates, not everywhere.
Ordered by what the evidence says is costing most. Written for whoever owns the site, not whoever builds it.
1 piece of evidence and the recommended fix are recorded for this issue, with /compare/linear-vs-competitor written from your own pages.
This is a basic scan, so it raises the three issues the deterministic evidence supports. A deep scan sends two agents over the site and raises up to ten, each with cited evidence and the screens to prove it.
A deep scan walks the site with two agents, records cited evidence and screenshots, and keeps a mission timeline. It comes with the paid plans. Making an account costs nothing and gives you one basic scan a month.
The score and the audit trail stay public. The evidence and the files open with an account.
The audit trail behind every number above. Not measured is not zero.
Machine discoverability
No AI crawler is blocked by robots.txt or user agent rules. A real browser is served the page normally. The sitemap lists 1021 URLs, llms.txt is published, and key pages render without JavaScript.
4 observations recorded.
Programmatic onboarding
API credentials are documented, authentication is documented, code samples are provided.
3 observations recorded.
Pricing legibility
Seven prices are readable without JavaScript on the pricing page: Free at $0, Basic at $10, Business at $16, and an Enterprise tier that routes to sales. This is standard practice and does not lower the score.
1 observation recorded.
Agent-aware instrumentation
No MCP manifest, developer documentation describes an API, but only in prose.
4 observations recorded.
Machine-fetchable trust
security.txt is published at /.well-known/security.txt with a contact route for machines. The homepage responds to automated requests with HTTP 200 and serves content normally.
2 observations recorded.
Commercial rails
Prices are published in raw HTML on the pricing page without JavaScript gates. A self serve signup form is reachable from the homepage in 2 steps. Sign in is provider-only (Google or SSO), with no payment card required at signup.
2 observations recorded.
Steps to first value
The signup form is 2 steps from the homepage via the Sign up CTA. No typed fields are present on the form itself, so a visitor completes signup by selecting a provider.
1 observation recorded.
Required fields
Zero of zero fields are required on the signup form. Two sign in providers are offered: Google and SSO. A visitor can complete signup without typing anything, which is the strongest possible affordance for reducing friction.
1 observation recorded.
Verification walls
No verification requirement appears on the signup page. Single sign on via Google or SSO avoids email verification entirely. The walk could not observe post-submission steps, so whether verification is required after signup remains.
1 observation recorded.
Error recovery
No typed inputs were found on the signup form, so there was nothing to validate or recover from. The form offers only provider selection. Without text input fields, error handling and recovery cannot be observed.
1 observation recorded.
It got through 9 of 15.
The agent got through 9 of 15 requests, but could not find a published agent interface. It came up empty on 5 other checks too.