Some cookies are necessary for SecondDoor to work. Others are optional, and tell us how the site and the product are used. Accept all, or decline all optional ones. Without a selection, nothing optional is set. More in our cookie policy.
Basic scanSoftware business · Marketing site/Scanned 8 Sept 2026, 14:12 UTC/1 browser pass
Secureframe publishes pricing and API specs but routes all buyers through sales conversations, blocking self-serve access.
Older scan
This report was produced by an earlier version of the scanner. Some findings may not match how the site is measured now.
Inverted. Machines get further through your funnel than people do.
Ordered by what the evidence says is costing most. Written for whoever owns the site, not whoever builds it.
2 pieces of evidence and the recommended fix are recorded for this issue, with notes written from your own pages.
This is a basic scan, so it raises the three issues the deterministic evidence supports. A deep scan sends two agents over the site and raises up to ten, each with cited evidence and the screens to prove it.
A deep scan walks the site with two agents, records cited evidence and screenshots, and keeps a mission timeline. It comes with the paid plans. Making an account costs nothing and gives you one basic scan a month.
The score and the audit trail stay public. The evidence and the files open with an account.
The audit trail behind every number above. Not measured is not zero.
Machine discoverability
Robots.txt explicitly names and allows 3 AI crawlers (oai-searchbot, claude-searchbot, perplexitybot), a real browser is served normally, key pages render without JavaScript, sitemap lists 1666 URLs, homepage includes Organization and.
4 observations recorded.
Programmatic onboarding
An OpenAPI spec is published at developer.secureframe.com/openapi.json, enabling client generation. However, the only entry point is a sales form requiring a human conversation.
3 observations recorded.
Pricing legibility
One price, $7,000, is readable in the homepage HTML without JavaScript. The pricing page publishes this figure without gating it behind a demo request or JavaScript execution. No tier is routed to sales.
1 observation recorded.
Agent-aware instrumentation
Robots.txt names 3 AI crawlers and allows them, pricing.md publishes prices in machine-readable form, and an OpenAPI spec is published. No MCP manifest exists at the 3 standard paths checked.
4 observations recorded.
Machine-fetchable trust
The homepage answers automated requests normally. No security.txt is published at /.well-known/security.txt. An agent can verify the site is reachable but cannot fetch security contact information, incident reporting procedures, or.
2 observations recorded.
Commercial rails
Prices are published in raw HTML ($7,000), pricing.md is machine-readable, and an OpenAPI spec exists. The only route to purchase or trial is a sales conversation initiated from a form.
2 observations recorded.
Steps to first value
The primary call to action is 'Request a demo', a sales form 2 steps from the homepage. No trial signup, no free tier, and no self-serve product access exist.
1 observation recorded.
Required fields
The entry point is a sales form. The form was not walked to completion, so the full field count is unobserved. The sales-only route means no self-serve signup path exists to measure.
1 observation recorded.
Verification walls
No verification requirement appears on the sales form entry point. Email confirmation, phone verification, or identity checks are not visible at the initial contact stage.
1 observation recorded.
Error recovery
No typed input fields with validation constraints were found on the entry point. The sales form was not walked to completion, so validation behavior and error messages are unobserved.
1 observation recorded.
It got through 10 of 15.
The agent got through 10 of 15 requests, but could not find a contact route for machines. It came up empty on 4 other checks too.