# Webflow: -39 point Door Gap
- Site: webflow.com
- Scanned: 2026-09-03
- Scan type: Deep scan
- Business type: b2b_saas
- Report: https://www.seconddoor.io/r/webflow-9bzg24
- Scanner version: 9
Webflow publishes real prices and a clean signup CTA, then puts a press-and-hold bot challenge exactly where an agent or scripted buyer needs to act.
## Scores
| Measure | Score |
| --- | --- |
| Humans | 0/100 |
| Agents | 39/100 |
| Composite | 20/100 |
| Door Gap | -39 points |
The human score is the mean of the four human dimensions, the agent score the mean of the six agent dimensions, and the Door Gap the difference between them.
## What the machine actually did
The agent got through 13 of 17 requests, but could not find a published agent interface. It came up empty on 3 other checks too. That is enough missing for a machine to give up before it reaches a purchase.
- ok      reach the site at all
- ok      find out whether machines are welcome
- ok      ask whether the door opens for requests carrying the AI crawlers' names
- ok      read the site's own guide for language models
- ok      find out what pages exist
- ok      find a contact route for machines
- missing find a published agent interface
- ok      find an agent plugin manifest
- missing find out whether verified agents are recognised
- ok      read the homepage as data rather than as a page
- missing find a machine readable API spec
- ok      read the developer documentation
- ok      read the prices without running JavaScript
- ok      find a comparison page worth citing
- ok      walk the way a visitor would, to a signup form or a product
- missing check pricing tiers and checkout path
- ok      check if API key can be self-serve obtained
## What a visitor meets
1. **Landing page** (friction). Headline "agentic web platform for modern businesses" is vague. Scrolling reveals it is a website builder for marketing teams. Two CTAs: "Get started" (self-serve) and "Talk to Sales". Pricing link in nav.
2. **Pricing page** (smooth). Prices published without login: Free, Premium $15/mo, Team $2,500/mo, Enterprise custom via sales. Toggle for monthly/yearly. Rare positive for an agent evaluator since totals are computable.
3. **Signup page** (blocked). Navigating to /signup returns HTTP 403 and a "press and hold" bot challenge. An automated or agent visitor cannot pass this, so the signup form fields cannot be inspected at all. Hard stop for any non-human evaluator.
## Top issues
1. **Getting an API key requires creating a Workspace with Admin permissions and registering an OAuth app, with no direct self-serve key.** (programmatic_onboarding)
2. **No machine readable API specification exists anywhere a client could fetch, so any integration must be hand-written from prose.** (agent_aware_instrumentation)
3. **No machine readable pricing or OAuth metadata exists, so an agent cannot price or provision access without driving the web UI by hand.** (commercial_rails)
The evidence and the recommended fix for each are on the report page: https://www.seconddoor.io/r/webflow-9bzg24
## Files generated from this scan
- **robots.txt rules for AI crawlers** at `/robots.txt`, 10 minutes, no developer needed. Verify: The next scan reads robots.txt and finds every search and agent crawler allowed, none of them kept off product or pricing paths.
- **Machine interfaces: where you stand** at `notes`, 10 minutes, no developer needed. Verify: The next scan finds the interface you published answering at its well-known path, and that check passes.
- **pricing.md** at `/pricing.md`, 20 minutes, no developer needed. Verify: The next scan fetches /pricing.md as text and records pricing as machine readable.
- **security.txt** at `/.well-known/security.txt`, 10 minutes, no developer needed. Verify: The next scan fetches /.well-known/security.txt as text and the security.txt check passes.
- **llms.txt** at `/llms.txt`, 15 minutes, no developer needed. Verify: The next scan fetches /llms.txt as text and the llms.txt check passes.
Each file is written from what this scan found on the site. The content is in the JSON once the evidence is opened: https://www.seconddoor.io/api/reports/webflow-9bzg24
## The agent door
- **machine_discoverability** 95/100. Sitemap lists 6510 URLs, 19 schema.org types are present, and no crawler user agent rule blocks the named AI bots. Comparison pages render without JavaScript. Discovery is thoroughly open.
- **programmatic_onboarding** 34/100. There is no self-serve API key. Getting an API credential requires a Workspace with Admin permissions and registering an OAuth app, and advanced access needs a separate 'Developer Workspace' request.
- **pricing_legibility** 35/100. 10 prices sit in the homepage HTML ($6, $4, $25, $200 tiers) and the pricing page itself shows Free, Premium $15/mo, Team $2,500/mo with an Enterprise sales tier, so a buyer can compute cost.
- **agent_aware_instrumentation** 8/100. No MCP manifest.
- **machine_fetchable_trust** 40/100. robots.txt, security.txt, llms.txt and ai-plugin.json all failed to fetch. The homepage itself answers automated requests fine and carries structured Organization data, but the trust surface files a scanner expects are missing.
- **commercial_rails** 20/100. Self-serve pricing and a 'Start for free' CTA exist, but the signup step returns a 403 with a press-and-hold challenge to an automated client, and no pricing.md or OAuth authorization metadata exists to let an agent complete a purchase.
## The human door
- **steps_to_first_value** null/100. Could not verify: this scan did not reach the pages that would show it.
- **required_fields** null/100. Could not verify: this scan did not reach the pages that would show it.
- **verification_walls** null/100. Could not verify: this scan did not reach the pages that would show it.
- **error_recovery** null/100. Could not verify: this scan did not reach the pages that would show it.
---
Scored by SecondDoor. Method: https://www.seconddoor.io/methodology
Scan another site: https://www.seconddoor.io
Rate an issue or this report: POST https://www.seconddoor.io/api/feedback, or the rate_fix tool on https://www.seconddoor.io/api/mcp