Some cookies are necessary for SecondDoor to work. Others are optional, and tell us how the site and the product are used. Accept all, or decline all optional ones. Without a selection, nothing optional is set. More in our cookie policy.
Basic scanSoftware business · Storefront property/Scanned 8 Sept 2026, 14:15 UTC/1 browser pass
A network edge blocks five AI crawlers that robots.txt welcomes, and the API surface is undocumented, leaving agents unable to evaluate or integrate.
Older scan
This report was produced by an earlier version of the scanner. Some findings may not match how the site is measured now.
Present. Agents lose ground at specific gates, not everywhere.
Ordered by what the evidence says is costing most. Written for whoever owns the site, not whoever builds it.
1 piece of evidence and the recommended fix are recorded for this issue.
This is a basic scan, so it raises the three issues the deterministic evidence supports. A deep scan sends two agents over the site and raises up to ten, each with cited evidence and the screens to prove it.
A deep scan walks the site with two agents, records cited evidence and screenshots, and keeps a mission timeline. It comes with the paid plans. Making an account costs nothing and gives you one basic scan a month.
The score and the audit trail stay public. The evidence and the files open with an account.
The audit trail behind every number above. Not measured is not zero.
Machine discoverability
Rippling publishes a sitemap with 610 URLs, structured data on the homepage (Product, AggregateRating, Organization), and llms.txt. A real browser is served normally.
4 observations recorded.
Programmatic onboarding
The developer documentation at developer.rippling.com contains only 33 characters of text and shows no API credentials, endpoints, code samples, authentication documentation, or GraphQL support.
3 observations recorded.
Pricing legibility
Four prices are readable without JavaScript on the pricing page, all listed at $250. No tier is gated behind a sales contact or demo requirement. The pricing is legible and published, though the page does not specify what each tier.
1 observation recorded.
Agent-aware instrumentation
No MCP manifest is published at the three standard paths checked (/.well-known/mcp.json, /.well-known/mcp, /mcp.json). An agent cannot discover or invoke Rippling capabilities through the Model Context Protocol, the emerging standard for.
4 observations recorded.
Machine-fetchable trust
No security.txt is published at /.well-known/security.txt. The homepage responds to automated requests, but the absence of a security contact or vulnerability disclosure policy means an agent cannot verify the company's security posture or.
2 observations recorded.
Commercial rails
Prices are published in raw HTML on the pricing page without JavaScript. A self serve signup form is reachable from the homepage in 2 steps, with 3 required fields and no payment collection at signup.
2 observations recorded.
Steps to first value
The primary call to action on the homepage leads to a signup form in 2 steps. The form collects email address and company details. No account system is required to view pricing or product information, so a visitor can evaluate the product.
1 observation recorded.
Required fields
The signup form contains 3 fields, all 3 required. Each field carries a validation rule (email format, text input constraints). The form does not ask for payment, phone number, or company verification at signup, keeping the barrier to.
1 observation recorded.
Verification walls
The signup page does not display any email verification, phone verification, or identity verification requirement. The form accepts input and carries validation rules, but no evidence of a verification step appears before access is.
1 observation recorded.
Error recovery
All 3 input fields carry validation constraints and descriptions. The form includes 1 live region for error messaging. No inline error containers were observed, but the validation rules are present and should catch common mistakes before.
1 observation recorded.
It got through 7 of 15.
The agent got through 7 of 15 requests, but could not ask whether the door opens for requests carrying the AI crawlers' names. It came up empty on 7 other checks too.