Basic scanSoftware and storefront · Storefront property/Scanned 7 Sept 2026, 14:10 UTC/1 browser pass
seconddoor.io
A software and storefront hybrid with strong machine discoverability but no agent checkout path for either funnel.
Narrow. Both audiences hit roughly the same walls.
The one issue worth fixing
Ordered by what the evidence says is costing most. Written for whoever owns the site, not whoever builds it.
3 pieces of evidence and the recommended fix are recorded for this issue, with /shipping written from your own pages.
This is a basic scan, so it raises the three issues the deterministic evidence supports. A deep scan sends two agents over the site and raises up to ten, each with cited evidence and the screens to prove it.
Deep scans need an account. Accounts are free.
A deep scan walks the site with two agents, records cited evidence and screenshots, and keeps a mission timeline. It comes with the paid plans. Making an account costs nothing and gives you one basic scan a month.
Get full access
The score and the audit trail stay public. The evidence and the files open with an account.
For finding out where you stand.
- 1 basic scan a month
- 3 prioritised fixes, with evidence
- No watched domains
- Your latest report
For one site you care about.
- A deep scan every week, another when your site changes, and 3 on demand
- Every fix the scan finds, not three
- Fixes reopen when a release undoes them
- 1 watched domain, checked every day
- Competitor comparison, 2 per domain
- 12 months of history
For a portfolio and a release cadence.
- A deep scan every week, another when your site changes, and 10 on demand
- Every fix the scan finds, not three
- Fixes reopen when a release undoes them
- 5 watched domains, checked every day
- Competitor comparison, 5 per domain
- All history
Keep this report
This report is permanent. The site it describes is not.
The address never changes, so a link sent today still opens next year. Rescan and the score updates the same hour, and every rescan is kept so you can show the before and the after.
Share the result
Put the number where your team will see it
The badge always shows the latest scores for this domain and links back to the report. Put it in a README or a footer.
What the agents checked
The audit trail behind every number above. Not measured is not zero.
Machine discoverability
Robots.txt names 14 AI crawlers and allows them all. A real browser is served the page normally. No user agent rule refuses declared crawler names.
4 observations recorded.
Programmatic onboarding
A machine readable API spec is published.
3 observations recorded.
Pricing legibility
6 prices are readable without JavaScript on the pricing page: $0, $29, $99, $249, $2,500, and one more. No tier is gated behind a sales contact. The page carries FAQ schema markup.
2 observations recorded.
Agent-aware instrumentation
An MCP manifest is published at /.well-known/mcp.json. An ai-plugin.json is published. Robots.txt names 14 AI crawlers and allows them. An OpenAPI spec is published. The site declares its intent for assistants across multiple standards.
4 observations recorded.
Machine-fetchable trust
Security.txt is published at /.well-known/security.txt with a contact route for machines. The returns policy reads as text at /refunds. The homepage answers automated requests. A shipping policy was not found at standard paths.
3 observations recorded.
Commercial rails
Prices are published in raw HTML on the pricing page. A self serve signup form is reachable from the homepage in 2 steps. However, no UCP manifest, commerce platform, or payment processor was detected.
4 observations recorded.
Steps to first value
The primary call to action, 'Sign up for free', is 2 steps from the homepage and leads to a signup form. The form itself is 2 steps from the homepage. No account system is required to view pricing or product pages.
1 observation recorded.
Required fields
The signup form has 2 fields, both required: Work email and Password. 1 sign in option is offered: Google. Both inputs carry validation rules. The form is minimal and does not ask for unnecessary information.
1 observation recorded.
Verification walls
No verification requirement appears on the signup page itself. Google sign in avoids email verification entirely. The form does not mention email confirmation, SMS, or other verification steps.
1 observation recorded.
Error recovery
Both of the 2 inputs on the signup form carry validation rules and constraints. The form provides validation feedback. No inline error containers or live regions were detected, so error messaging clarity could not be fully measured.
1 observation recorded.
We sent a buying agent. 18 requests, in order
It got through 16 of 18.
The agent got through 16 of 18 requests, but could not find out whether verified agents are recognised. It came up empty on 1 other check too.