Some cookies are necessary for SecondDoor to work. Others are optional, and tell us how the site and the product are used. Accept all, or decline all optional ones. Without a selection, nothing optional is set. More in our cookie policy.
Basic scanSoftware business · Marketing site/Scanned 8 Sept 2026, 13:57 UTC/1 browser pass
Pricing and signup are transparent, but API documentation is not linked from the site, blocking programmatic access.
Older scan
This report was produced by an earlier version of the scanner. Some findings may not match how the site is measured now.
Narrow. Both audiences hit roughly the same walls.
Ordered by what the evidence says is costing most. Written for whoever owns the site, not whoever builds it.
1 piece of evidence and the recommended fix are recorded for this issue.
This is a basic scan, so it raises the three issues the deterministic evidence supports. A deep scan sends two agents over the site and raises up to ten, each with cited evidence and the screens to prove it.
A deep scan walks the site with two agents, records cited evidence and screenshots, and keeps a mission timeline. It comes with the paid plans. Making an account costs nothing and gives you one basic scan a month.
The score and the audit trail stay public. The evidence and the files open with an account.
The audit trail behind every number above. Not measured is not zero.
Machine discoverability
No AI crawler is blocked by robots.txt or user agent rules. The homepage and pricing page are served to automated clients without JavaScript requirements. A sitemap lists 1278 URLs.
4 observations recorded.
Programmatic onboarding
OAuth authorization metadata is published at the standard path, enabling remote MCP discovery. No API documentation is linked from the homepage or accessible in the rendered page. No OpenAPI spec exists at standard paths.
3 observations recorded.
Pricing legibility
26 prices are readable without JavaScript on the pricing page. Prices range from $36 to $98 per unit. An enterprise tier routes to sales contact, which is standard practice. Currency is USD.
1 observation recorded.
Agent-aware instrumentation
OAuth authorization metadata is published, which is how a remote MCP server locates credentials. No MCP manifest exists at the standard path. No llms.txt or ai-plugin.json is published.
4 observations recorded.
Machine-fetchable trust
security.txt is published at the standard path with a contact route for machines. The homepage responds to automated requests with HTTP 200 and serves content normally.
2 observations recorded.
Commercial rails
Prices are published in raw HTML on the pricing page. A self serve signup form is reachable from the homepage in 3 steps. No payment collection occurs on the signup form itself.
2 observations recorded.
Steps to first value
The signup form is 3 steps from the homepage via the Sign Up Free call to action. The form itself contains 5 fields, none required. A human can complete signup without providing payment details or undergoing verification, reaching a trial.
1 observation recorded.
Required fields
The signup form contains 5 fields, of which 0 are required. Google single sign on is offered as an alternative to email entry. No validation rules are enforced on any input field, allowing submission with minimal data.
1 observation recorded.
Verification walls
No verification requirement appears on the signup page. Email confirmation, phone verification or identity checks are not mentioned. Google single sign on bypasses email verification entirely.
1 observation recorded.
Error recovery
0 of 5 input fields carry validation rules or constraint attributes. No inline error containers are present on the form. 1 live region is present, which can announce errors to assistive technology.
1 observation recorded.
It got through 9 of 15.
The agent got through 9 of 15 requests, but could not read the site's own guide for language models. It came up empty on 5 other checks too.