Some cookies are necessary for SecondDoor to work. Others are optional, and tell us how the site and the product are used. Accept all, or decline all optional ones. Without a selection, nothing optional is set. More in our cookie policy.
Basic scanSoftware business · Marketing site/Scanned 8 Sept 2026, 16:16 UTC/1 browser pass
Scrunch publishes prices and welcomes AI crawlers, but offers no API access or programmatic onboarding path for agents to evaluate and integrate the product.
Ordered by what the evidence says is costing most. Written for whoever owns the site, not whoever builds it.
3 pieces of evidence and the recommended fix are recorded for this issue, with /.well-known/security.txt written from your own pages.
This is a basic scan, so it raises the three issues the deterministic evidence supports. A deep scan sends two agents over the site and raises up to ten, each with cited evidence and the screens to prove it.
A deep scan walks the site with two agents, records cited evidence and screenshots, and keeps a mission timeline. It comes with the paid plans. Making an account costs nothing and gives you one basic scan a month.
The score and the audit trail stay public. The evidence and the files open with an account.
The audit trail. Not measured is not zero.
Machine discoverability
No AI crawler is blocked by robots.txt or user agent rules. The site serves a real browser normally, publishes llms.txt with 139 lines, declares a sitemap of 281 URLs in robots.txt, and hosts 79 comparison pages readable without.
4 observations recorded.
Programmatic onboarding
No developer documentation is linked from the homepage in raw HTML or rendered page. No OpenAPI spec exists at any of the 6 standard paths checked.
3 observations recorded.
Pricing legibility
Two prices are readable without JavaScript on the pricing page: $250 and an Enterprise tier routed to sales. The Core plan is published at $250 per month in raw HTML. No pricing is gated behind a demo or signup wall.
1 observation recorded.
Agent-aware instrumentation
No MCP manifest is published at any of the 3 standard paths checked. The site does not declare Model Context Protocol support or any other agent-aware instrumentation beyond llms.txt.
4 observations recorded.
Machine-fetchable trust
No security.txt file is published at /.well-known/security.txt. The homepage answers automated requests with HTTP 200 and serves content normally to honest clients.
2 observations recorded.
Commercial rails
Prices are published in raw HTML.
2 observations recorded.
Steps to first value
Could not verify: this scan did not reach the pages that would show it.
1 observation recorded.
Required fields
Could not verify: this scan did not reach the pages that would show it.
1 observation recorded.
Verification walls
Could not verify: this scan did not reach the pages that would show it.
1 observation recorded.
Error recovery
Could not verify: this scan did not reach the pages that would show it.
1 observation recorded.
It got through 8 of 15.
The agent got through 8 of 15 requests, but could not find a contact route for machines. It came up empty on 6 other checks too. That is enough missing for a machine to give up before it reaches a purchase.