# Tally Forms: 19 point Door Gap
- Site: tally.so
- Scanned: 2026-09-09
- Scan type: Basic scan
- Business type: b2b_saas
- Report: https://www.seconddoor.io/r/tally-ucdfmd
- Scanner version: 25
2 human and 6 agent dimensions measured from the pages checked; remaining dimensions are not scored.
## Scores
| Measure | Score |
| --- | --- |
| Humans | 89/100 (2/4 dimensions) |
| Agents | 70/100 (6/6 dimensions) |
| Composite | 80/100 |
| Door Gap | 19 points |
The human score is the mean of the measured human dimensions, the agent score the mean of the measured agent dimensions, and the Door Gap the difference between them.
## What the machine actually did
The scanner recorded successful observations for 12 of 15 checks, but could not find a contact route for machines. It came up empty on 2 other checks too.
- ok      reach the site at all
- ok      find out whether machines are welcome
- ok      ask whether the door opens for requests carrying the AI crawlers' names
- ok      read the site's own guide for language models
- ok      find out what pages exist
- missing find a contact route for machines
- ok      find a published agent interface
- missing find an agent plugin manifest
- missing find out whether verified agents are recognised
- ok      read the homepage as data rather than as a page
- ok      find a machine readable API spec
- ok      read the developer documentation
- ok      read the prices without running JavaScript
- ok      find a comparison page worth citing
- ok      walk the way a visitor would, to a signup form or a product
## Top issues
1. **No valid security.txt was identified at /.well-known/security.txt.** (machine_fetchable_trust)
The evidence and the recommended fix for each are on the report page: https://www.seconddoor.io/r/tally-ucdfmd
## Files generated from this scan
- **Pricing as Offer structured data** at `pricing page`, 20 minutes, developer. Verify: The next scan reads Offer structured data with a price and currency on the pricing page, and the pricing check credits it.
- **robots.txt rules for AI crawlers** at `/robots.txt`, 10 minutes, no developer needed. Verify: The next scan reads robots.txt and finds every search and agent crawler allowed, none of them kept off product or pricing paths.
- **pricing.md** at `/pricing.md`, 20 minutes, no developer needed. Verify: The next scan fetches /pricing.md as text and records pricing as machine readable.
- **security.txt** at `/.well-known/security.txt`, 10 minutes, no developer needed. Verify: The next scan fetches /.well-known/security.txt as text and the security.txt check passes.
- **Machine interfaces: where you stand** at `notes`, 10 minutes, no developer needed. Verify: The next scan finds the interface you published answering at its well-known path, and that check passes.
Each file is written from what this scan found on the site. The content is in the JSON once the evidence is opened: https://www.seconddoor.io/api/reports/tally-ucdfmd
## The agent door
- **machine_discoverability** 100/100. No restriction on the tested crawler names was found in robots.txt. on its first visit, our browser read the homepage. no user agent rule refused the tested retrieval crawler names.
- **programmatic_onboarding** 50/100. A machine readable API spec is published.
- **pricing_legibility** 85/100. 2 prices are readable without JavaScript, with no tier sent to sales.
- **agent_aware_instrumentation** 78/100. An MCP manifest is published. a machine readable API spec is published.
- **machine_fetchable_trust** 40/100. No security.txt was identified at the checked path. the homepage answers automated requests.
- **commercial_rails** 65/100. Prices are published in raw HTML. a self serve signup form is reachable from the homepage.
## The human door
- **steps_to_first_value** 80/100. A signup form was reached in 2 steps from the homepage.
- **required_fields** 98/100. 0 of 1 fields on the observed form are marked required. 2 sign-in providers are displayed.
- **verification_walls** not measured. Not measured: this scan did not reach the page or action needed to verify it.
- **error_recovery** not measured. Not measured: this scan did not reach the page or action needed to verify it.
---
Scored by SecondDoor. Method: https://www.seconddoor.io/methodology
Scan another site: https://www.seconddoor.io
Rate an issue or this report: POST https://www.seconddoor.io/api/feedback, or the rate_fix tool on https://www.seconddoor.io/api/mcp