# SecondDoor: 3 point Door Gap
- Site: seconddoor.io
- Scanned: 2026-09-03
- Scan type: Deep scan
- Business type: hybrid
- Report: https://www.seconddoor.io/r/seconddoor-p6te6j
- Scanner version: 9
SecondDoor publishes clean SaaS pricing and a frictionless two-field signup, but neither an agent nor a shopper has any documented way to actually pay.
## Scores
| Measure | Score |
| --- | --- |
| Humans | 83/100 |
| Agents | 80/100 |
| Composite | 82/100 |
| Door Gap | 3 points |
The human score is the mean of the four human dimensions, the agent score the mean of the six agent dimensions, and the Door Gap the difference between them.
## What the machine actually did
The agent got through 16 of 18 requests, but could not find out whether verified agents are recognised. It came up empty on 1 other check too.
- ok      reach the site at all
- ok      find out whether machines are welcome
- ok      ask whether the door opens for requests carrying the AI crawlers' names
- ok      read the site's own guide for language models
- ok      find out what pages exist
- ok      find a contact route for machines
- ok      find a published agent interface
- ok      find an agent plugin manifest
- missing find out whether verified agents are recognised
- ok      read the homepage as data rather than as a page
- ok      find a machine readable API spec
- ok      read the developer documentation
- ok      read the prices without running JavaScript
- missing read the product catalogue as data
- ok      read a product page as data
- ok      read the returns and shipping terms
- ok      find a comparison page worth citing
- ok      walk the way a visitor would, to a signup form or a product
## What a visitor meets
1. **Pricing page** (smooth). Four tiers shown without login: Free $0, Starter $29, Pro $99, Agency $249. A fifth "Dedicated Consulting" tier priced around $2,500 per the pricing data. All prices are readable without JavaScript, no quote-gating. This is a straightforward SaaS pricing table, no physical product catalog anywhere on the site.
2. **Dedicated Consulting tier** (friction). No published price, no self-serve path. Routes only to sales@seconddoor.io. This is the one part of the funnel where a visitor is diverted to a sales conversation instead of self-serve signup.
3. **Signup form** (smooth). Only two required fields: work email and password, plus Google SSO. A 3-step bar shows Account, Confirm, Scan. Fine print says reports you run are public, part of how the index works. No payment requested, consistent with the free tier.
## Files generated from this scan
- **Shipping and delivery page** at `/shipping`, 30 minutes, no developer needed. Verify: The next scan reads the shipping policy page as text without JavaScript and finds it linked from a product page.
- **Agent checkout: where you stand** at `notes`, 10 minutes, no developer needed. Verify: The next scan finds a UCP manifest, a storefront MCP endpoint or another discovery file answering, and the checkout check passes.
- **pricing.md** at `/pricing.md`, 20 minutes, no developer needed. Verify: The next scan fetches /pricing.md as text and records pricing as machine readable.
Each file is written from what this scan found on the site. The content is in the JSON once the evidence is opened: https://www.seconddoor.io/api/reports/seconddoor-p6te6j
## The agent door
- **machine_discoverability** 100/100. robots.txt names all 14 major AI crawlers and allows them, a real browser gets the page normally, a 59-URL sitemap and llms.txt are both published, and key pages render without JavaScript.
- **programmatic_onboarding** 50/100. A machine readable API spec is published.
- **pricing_legibility** 88/100. Six prices ($0, $29, $99, $249, $2,500) are readable in raw HTML on the pricing page with no JavaScript required, and FAQ schema is attached. Only the top consulting tier routes to sales, which is standard.
- **agent_aware_instrumentation** 100/100. An MCP manifest, an ai-plugin.json, and a full OpenAPI spec are all published and reachable, so an agent can generate a client rather than guess at the API.
- **machine_fetchable_trust** 85/100. security.txt is published with a contact route and the returns policy reads as plain text at /refunds, but the shipping policy was not found at any of the usual paths, leaving one trust document unaccounted for.
- **commercial_rails** 55/100. Pricing is published in raw HTML and signup needs no card, but the probe found no UCP manifest, no storefront MCP, no ACP manifest, and no payment processor anywhere on the homepage.
## The human door
- **steps_to_first_value** 80/100. The signup form sits two steps from the homepage via a single 'Sign up for free' CTA, with no intervening marketing gate or account-tier chooser.
- **required_fields** 93/100. The signup form asks for exactly two fields, work email and password, both required, plus a Google SSO option that skips the form entirely.
- **verification_walls** 80/100. No verification requirement is visible on the signup page itself, and the Google SSO path avoids one entirely, though the 'Confirm' step in the flow bar suggests an email check happens after submission.
- **error_recovery** 80/100. Both of the two signup inputs carry HTML validation constraints, giving the browser a way to catch bad input before submission, though no live error region was detected.
---
Scored by SecondDoor. Method: https://www.seconddoor.io/methodology
Scan another site: https://www.seconddoor.io
Rate an issue or this report: POST https://www.seconddoor.io/api/feedback, or the rate_fix tool on https://www.seconddoor.io/api/mcp