Some cookies are necessary for SecondDoor to work. Others are optional, and tell us how the site and the product are used. Accept all, or decline all optional ones. Without a selection, nothing optional is set. More in our cookie policy.
Basic scanRetail storefront · Storefront property/Scanned 11 Sept 2026, 01:08 UTC/1 browser pass
1 human and 6 agent dimensions measured from the pages checked; remaining dimensions are not scored.
Older scan
This report was produced by an earlier version of the scanner. Some findings may not match how the site is measured now.
Present. The measured human score is 10 to 24 points above the measured agent score.
Ordered by what the evidence says is costing most. Written for whoever owns the site, not whoever builds it.
Publish /.well-known/security.txt with a contact route.
1 across both doors. The first is open to everyone; the rest open with a work email or a free account.
What the scan saw
Researchers and automated scanners find a disclosure address instead of guessing one.
The fix
Publish /.well-known/security.txt with a contact route.
Fixed something? Rescan and the score updates the same hour, and every rescan is kept so you can show the before and the after. The full audit of what the agents checked is at the . go deeper.
This is a basic scan, so it raises the three issues the deterministic evidence supports. A deep scan sends two agents over the site and raises up to ten, each with cited evidence and the screens to prove it.
A deep scan walks the site with two agents, records cited evidence and screenshots, and keeps a mission timeline. It comes with the paid plans. Making an account costs nothing and gives you one basic scan a month.
The score, the audit trail and the first issue stay public. The rest opens with a work email or an account.
The audit trail. Ten dimensions, 3 not measured. Not measured is not zero.
Machine discoverability
No restriction on the tested crawler names was found in robots.txt. On its first visit, our browser read the homepage. No user agent rule refused the tested retrieval crawler names.
7 observations recorded.
Programmatic onboarding
No general API documentation or OpenAPI specification was identified through the paths checked. A storefront MCP endpoint answered the tested tools/list discovery request; authentication and use were not tested.
4 observations recorded.
Pricing legibility
Product-associated price evidence was identified in the HTTP responses from the 3 product pages checked. Product structured data publishes price and currency, so an agent can parse cost without scraping. Availability is published too.
3 observations recorded.
Agent-aware instrumentation
No MCP manifest was identified at the discovery paths checked. A Universal Commerce Protocol manifest is published. A storefront MCP endpoint answered the tested tools/list request. The catalogue answers as data at /products.json.
6 observations recorded.
Machine-fetchable trust
No security.txt was identified at the checked path. The returns policy reads as text. The shipping policy reads as text. The homepage answers automated requests.
3 observations recorded.
Commercial rails
Product markup carries price and currency. Products carry a GTIN. The catalogue answers as data, which a feed can be built from. A Shopify storefront with GTIN and brand fields observed in the sampled products.
6 observations recorded.
Steps to first value
A product priced at $6 was reached in 2 steps; a purchase control was visible.
1 observation recorded.
Required fields
Not measured: this scan did not reach the page or action needed to verify it.
Verification walls
Not measured: this read-only scan did not submit the form or perform the action needed to test this behavior.
Error recovery
Not measured: this read-only scan did not submit the form or perform the action needed to test this behavior.
It got through 12 of 18.
The scanner recorded successful observations for 12 of 18 checks, but could not find a contact route for machines. It came up empty on 5 other checks too.