Deep scanUnclassified/Scanned 3 Sept 2026, 21:37 UTC/2 walks, 14 requests, 2 moments recorded/Partial scan
patagonia.com
Automated visitors, including the AI agents that now do shopping, hit a 404 or a near-blank page at the front door, so nothing downstream can be evaluated.
Two issues, in priority order
Each one is drawn from evidence recorded during the walks.
3 pieces of evidence and the recommended fix are recorded for this issue.
What a visitor actually meets
2 moments, 2 blocking
We walked the funnel in a real browser and captured every step. Nothing was submitted and no account was created.
- 01
Landing page
https://www.patagonia.com/ returned HTTP 404 with body text 'Not found'. No headings, links, buttons or visible text were rendered. This is a rendering or routing failure on the site's end for an automated visitor, not a judgment on design.
blocked·www.patagonia.com
Patagonia homepage - 02
Attempted alternate entry points
Tried /home/ and /shop/new-arrivals as likely landing or category pages. Both returned HTTP 404 with no rendered content, same as the root domain. The failure is consistent across paths, suggesting the site is not serving content to this automated visitor at all.
blocked·/shop/new-arrivals
We sent a buying agent
14 requests, in order
The agent got through 4 of 14 requests, but could not find out whether machines are welcome. It came up empty on 9 other checks too. That is enough missing for a machine to give up before it reaches a purchase.
- 01reached
patagonia.com
reach the site at all
- 02not found
/robots.txt
find out whether machines are welcome
- 03reached
patagonia.com
ask whether the door opens for requests carrying the AI crawlers' names
- 04not found
/llms.txt
read the site's own guide for language models
- 05not found
patagonia.com
find out what pages exist
- 06not found
/.well-known/security.txt
find a contact route for machines
- 07not found
patagonia.com
find a published agent interface
- 08not found
/.well-known/ai-plugin.json
find an agent plugin manifest
- 09not found
patagonia.com
find out whether verified agents are recognised
- 10not found
patagonia.com
read the homepage as data rather than as a page
- 11not found
patagonia.com
find a machine readable API spec
- 12not found
patagonia.com
read the developer documentation
- 13reached
patagonia.com
read the prices without running JavaScript
- 14reached
patagonia.com
walk the way a visitor would, to a signup form or a product
Ten dimensions
Not measured is not zero.
The agent door
9 of 100What a machine can do on your site with nobody watching.
Machine discoverability
Whether a retrieval system can find and read you at all.
A real browser opened the homepage and got 97 characters of rendered content, no headings or links. No sitemap, no robots.txt, no schema.org markup anywhere checked.
4 observations recorded.
Programmatic onboarding
Whether an agent can get working access without a human.
No developer docs, OpenAPI spec, or MCP manifest at any of the 9 standard paths checked. No signup flow exists either, but that matches a site with no account system, not an API program.
4 observations recorded.
Pricing legibility
Whether total cost can be computed from published numbers.
Could not verify: this scan did not reach the pages that would show it.
1 observation recorded.
Agent-aware instrumentation
Whether you publish anything built for machine callers.
No MCP manifest at any of the 3 standard paths and no Web Bot Auth signals. There is no visible mechanism for an agent to identify itself or act with authority on this site.
4 observations recorded.
Machine-fetchable trust
Whether terms, security and status are readable as text.
No security.txt, no sitemap, no robots.txt. A machine has no signed or declared way to verify what this domain is or trust its intent.
2 observations recorded.
Commercial rails
Whether a purchase can complete without a sales call.
.
3 observations recorded.
The human door
94 of 100What a first time visitor meets between landing and first value.
Steps to first value
How far a new visitor travels before something useful happens.
The entry_path probe found no signup and no sign-in anywhere on the homepage. A visitor who can actually load the site needs zero steps to reach whatever it offers.
1 observation recorded.
Required fields
How much you ask for before you give anything back.
There is no form anywhere on the homepage, so nothing is asked of a visitor. Zero fields is the best possible outcome for this dimension.
1 observation recorded.
Verification walls
How many gates stand between intent and access.
No account system exists, so there is no email, phone, or identity check standing between a visitor and the content.
1 observation recorded.
Error recovery
What happens when someone gets it wrong.
With no form present there is nothing to submit incorrectly, so no error states were observed to test. The absence of forms caps how much can go wrong here.
1 observation recorded.
Show the score
The badge always shows the latest scores for this domain and links back to the report. Put it in a README or a footer.
This number moves every time you deploy
SecondDoor rescans on a schedule and tells you the day a release closes a door. Watch the trend on the dashboard, or scan another site now.