Deep scanUnclassified/Scanned 4 Sept 2026, 01:48 UTC/2 walks, 18 requests, 1 moments recorded/Partial scan
on.com
On.com has a well-indexed storefront for search engines but no readable price data, no checkout route and no working policy pages for either agents or careful shoppers to act on.
Incomplete scan
The human side of this site could not be measured, so there is no Door Gap to report. The scores below cover only what the scan actually reached.
Three issues, in priority order
Each one is drawn from evidence recorded during the walks.
3 pieces of evidence and the recommended fix are recorded for this issue.
What a visitor actually meets
1 moment, 1 blocking
We walked the funnel in a real browser and captured every step. Nothing was submitted and no account was created.
- 01
Landing page load
Root URL redirects immediately to /en-us/shop/apparel. Rendered page is blank white. DOM text extracted shows only a newsletter email capture overlay (Email field, Subscribe button) and a footer copyright, no heading, no nav, no product content for an automated visitor.
blocked·/en-us/shop/shoes
Landing page redirect to apparel shop
We sent a buying agent
18 requests, in order
The agent got through 11 of 18 requests, but could not find a contact route for machines. It came up empty on 6 other checks too. That is enough missing for a machine to give up before it reaches a purchase.
- 01reached
on.com
reach the site at all
- 02reached
/robots.txt
find out whether machines are welcome
- 03reached
on.com
ask whether the door opens for requests carrying the AI crawlers' names
- 04reached
/llms.txt
read the site's own guide for language models
- 05reached
/sitemap.xml
find out what pages exist
- 06not found
/.well-known/security.txt
find a contact route for machines
- 07reached
/.well-known/mcp.json
find a published agent interface
- 08not found
/.well-known/ai-plugin.json
find an agent plugin manifest
- 09not found
on.com
find out whether verified agents are recognised
- 10reached
on.com
read the homepage as data rather than as a page
- 11not found
on.com
find a machine readable API spec
- 12not found
on.com
read the developer documentation
- 13reached
/pricing
read the prices without running JavaScript
- 14reached
on.com
read the product catalogue as data
- 15not found
on.com
read a product page as data
- 16not found
on.com
read the returns and shipping terms
- 17reached
on.com
walk the way a visitor would, to a signup form or a product
- 18reached
/.well-known/mcp.json
check if MCP manifest offers real API key onboarding
Ten dimensions
Not measured is not zero.
The agent door
44 of 100What a machine can do on your site with nobody watching.
Machine discoverability
Whether a retrieval system can find and read you at all.
No AI crawler is blocked in robots.txt, a real browser gets the page normally, and a sitemap lists 75 URLs including product pages. llms.txt and 4 schema.org types are also published on the homepage.
4 observations recorded.
Programmatic onboarding
Whether an agent can get working access without a human.
The only machine interface found is an MCP manifest exposing a single brand info tool, with no auth or key issuance. No OpenAPI spec and no linked developer docs exist, so an agent has no path to integrate.
3 observations recorded.
Pricing legibility
Whether total cost can be computed from published numbers.
Could not verify: this scan did not reach the pages that would show it.
2 observations recorded.
Agent-aware instrumentation
Whether you publish anything built for machine callers.
An MCP manifest is published at /.well-known/mcp.json giving agents a discoverable interface, but it exposes only brand information, not commerce or account actions.
4 observations recorded.
Machine-fetchable trust
Whether terms, security and status are readable as text.
No security.txt file exists at the standard path, it returns an HTML page instead. The homepage itself answers automated requests fine, but that is the only trust signal confirmed.
3 observations recorded.
Commercial rails
Whether a purchase can complete without a sales call.
No Product schema on the 3 pages checked, no working catalog feed, and no readable UCP or commerce manifest despite a file existing at that path. Returns and shipping pages return 200 but with only 33 characters of text, so there are no.
4 observations recorded.
The human door
0 of 100What a first time visitor meets between landing and first value.
Steps to first value
How far a new visitor travels before something useful happens.
Could not verify: this scan did not reach the pages that would show it.
1 observation recorded.
Required fields
How much you ask for before you give anything back.
Could not verify: this scan did not reach the pages that would show it.
1 observation recorded.
Verification walls
How many gates stand between intent and access.
Could not verify: this scan did not reach the pages that would show it.
1 observation recorded.
Error recovery
What happens when someone gets it wrong.
Could not verify: this scan did not reach the pages that would show it.
1 observation recorded.
Show the score
The badge always shows the latest scores for this domain and links back to the report. Put it in a README or a footer.
This number moves every time you deploy
SecondDoor rescans on a schedule and tells you the day a release closes a door. Watch the trend on the dashboard, or scan another site now.