Some cookies are necessary for SecondDoor to work. Others are optional, and tell us how the site and the product are used. Accept all, or decline all optional ones. Without a selection, nothing optional is set. More in our cookie policy.
Basic scanSoftware business · Marketing site/Scanned 8 Sept 2026, 14:06 UTC/1 browser pass
A team email platform with published pricing but no API credentials, endpoints or code samples in its developer documentation.
Older scan
This report was produced by an earlier version of the scanner. Some findings may not match how the site is measured now.
Present. Agents lose ground at specific gates, not everywhere.
Ordered by what the evidence says is costing most. Written for whoever owns the site, not whoever builds it.
1 piece of evidence and the recommended fix are recorded for this issue.
This is a basic scan, so it raises the three issues the deterministic evidence supports. A deep scan sends two agents over the site and raises up to ten, each with cited evidence and the screens to prove it.
A deep scan walks the site with two agents, records cited evidence and screenshots, and keeps a mission timeline. It comes with the paid plans. Making an account costs nothing and gives you one basic scan a month.
The score and the audit trail stay public. The evidence and the files open with an account.
The audit trail behind every number above. Not measured is not zero.
Machine discoverability
No AI crawler is blocked by robots.txt, a real browser is served the page normally, and key pages including pricing and docs are readable without JavaScript.
4 observations recorded.
Programmatic onboarding
The documentation at /docs and /docs/developers contains 86051 characters of text but shows no API credentials, endpoints, code samples, authentication documentation, or self-serve key issuance.
3 observations recorded.
Pricing legibility
Three prices are readable without JavaScript on the pricing page: $14, $24, and $36 per seat per month. An enterprise tier routes to sales, which is standard practice. Currency and billing model are clear.
1 observation recorded.
Agent-aware instrumentation
No MCP manifest is published at any of the three standard paths checked. No ai-plugin.json or llms.txt is present. The site does not signal machine-readable integration points.
4 observations recorded.
Machine-fetchable trust
security.txt is published at /.well-known/security.txt with a contact route for machines. The homepage responds to automated requests with HTTP 200 and serves content normally to a browser carrying an AI crawler user agent.
2 observations recorded.
Commercial rails
Prices are published in raw HTML, a self serve signup form is reachable from the homepage.
2 observations recorded.
Steps to first value
The primary call to action, 'Try for Free', is 2 steps from the homepage and leads to a signup form. The form itself is 2 steps from the homepage. No account system is required to view pricing or documentation.
1 observation recorded.
Required fields
The signup form contains 3 fields, 0 of which are required. Two sign-in options are offered: Google and Apple. A visitor can proceed without entering any data.
1 observation recorded.
Verification walls
No verification requirement appears on the signup page. Single sign-on via Google or Apple avoids email verification entirely. The form does not ask for phone, address, or payment details.
1 observation recorded.
Error recovery
The page has 4 inline error containers, but 0 of the 3 inputs carry validation rules or descriptions. A visitor will not know what format is expected before submission.
1 observation recorded.
It got through 8 of 15.
The agent got through 8 of 15 requests, but could not read the site's own guide for language models. It came up empty on 6 other checks too.