Some cookies are necessary for SecondDoor to work. Others are optional, and tell us how the site and the product are used. Accept all, or decline all optional ones. Without a selection, nothing optional is set. More in our cookie policy.
Basic scanUnclassified/Scanned 8 Sept 2026, 14:34 UTC/1 browser pass
Whoop blocks automated clients at the edge while serving browsers normally, making the site inaccessible to AI agents and integration tools.
Older scan
This report was produced by an earlier version of the scanner. Some findings may not match how the site is measured now.
Severe. Your human funnel and your agent funnel are different products.
Ordered by what the evidence says is costing most. Written for whoever owns the site, not whoever builds it.
1 piece of evidence and the recommended fix are recorded for this issue, with notes written from your own pages.
This is a basic scan, so it raises the three issues the deterministic evidence supports. A deep scan sends two agents over the site and raises up to ten, each with cited evidence and the screens to prove it.
A deep scan walks the site with two agents, records cited evidence and screenshots, and keeps a mission timeline. It comes with the paid plans. Making an account costs nothing and gives you one basic scan a month.
The score and the audit trail stay public. The evidence and the files open with an account.
The audit trail behind every number above. Not measured is not zero.
Machine discoverability
No AI crawler is blocked, a real browser is served the page normally, no sitemap, no schema.org markup, a key page turns the honest client away while serving a real browser, a rule about the client.
4 observations recorded.
Programmatic onboarding
Authentication is documented, the product needs no account at all.
3 observations recorded.
Pricing legibility
Could not verify: this scan did not reach the pages that would show it.
1 observation recorded.
Agent-aware instrumentation
No MCP manifest.
4 observations recorded.
Machine-fetchable trust
Security.txt could not be checked because automated access was refused with HTTP 403. The homepage refuses automated clients outright, blocking verification of trust signals.
2 observations recorded.
Commercial rails
.
2 observations recorded.
Steps to first value
The product is usable immediately without any account or signup. No entry wall exists, no form is presented, and no authentication is required to access the core offering. A visitor lands on the site and can use it at once.
1 observation recorded.
Required fields
No signup form exists on the site. No fields are required because no account system is present. A visitor provides nothing to access the product.
1 observation recorded.
Verification walls
No account system means no verification is required. There is no email confirmation, phone verification, or identity check standing between a visitor and the product.
1 observation recorded.
Error recovery
No form exists to generate errors, so error handling cannot be observed. The site's immediate usability without signup means validation and recovery flows are not part of the entry path.
1 observation recorded.
It got through 3 of 14.
The site refused automated access at whoop.com, so the agent could not reach the site at all.