Partial scanSoftware business · Marketing site/Scanned 10 Sept 2026, 22:44 UTC/1 browser pass, 1 pages reached
xero.com
0 human and 4 agent dimensions measured from the pages checked; remaining dimensions are not scored.
Partial scanThe walk did not reach everything it looks for. 6 dimensions are recorded as not measured: Programmatic onboarding, Commercial rails, Steps to first value, Required fields, Verification walls and Error recovery. They are not scored as zero, and the composite is computed from the doors that were measured.
Older scan
This report was produced by an earlier version of the scanner. Some findings may not match how the site is measured now.
Human door
Not measured
What a first time visitor meets between landing and first value. 0 of 4 measured.
Agent door
55
What a machine can do on the site with nobody watching. 4 of 6 measured.
Door Gap
Not measured
One door was not measured on this scan, so there is no Door Gap to report.
Composite
55
Median for this class is 68. Agent door only. The human door could not be measured on this scan.
The one issue worth fixing
Ordered by what the evidence says is costing most. Written for whoever owns the site, not whoever builds it.
1Machine-fetchable trust
No valid security.txt was identified at /.well-known/security.txt.
Publish /.well-known/security.txt with a contact route.
OwnerSite ownerEffort10 minutesDimension40Weak
See the fix and the evidenceDid this report tell you something you did not know?
Full issue list
1 across both doors. The first is open to everyone; the rest open with a work email or a free account.
What the scan saw
/.well-known/security.txt: not found (404)
Checked URL: https://www.xero.com/.well-known/security.txt
Researchers and automated scanners find a disclosure address instead of guessing one.
The fix
Publish /.well-known/security.txt with a contact route.
Fixed something? Rescan and the score updates the same hour, and every rescan is kept so you can show the before and the after. The full audit of what the agents checked is at the . go deeper.
This is a basic scan, so it raises the three issues the deterministic evidence supports. A deep scan sends two agents over the site and raises up to ten, each with cited evidence and the screens to prove it.
Deep scans need an account. Accounts are free.
A deep scan walks the site with two agents, records cited evidence and screenshots, and keeps a mission timeline. It comes with the paid plans. Making an account costs nothing and gives you one basic scan a month.
Get full access
The score, the audit trail and the first issue stay public. The rest opens with a work email or an account.
Free$0
For finding out where you stand.
- 1 basic scan a month
- 3 prioritised fixes, with evidence
- No watched domains
- Your latest report
Starter$29 a month
For one site you care about.
- A deep scan every week, another when your site changes, and 3 on demand
- Every fix the scan finds, not three
- Fixes reopen when a release undoes them
- 1 watched domain, checked every day
Free account
Keep this report and see the number move
This report is permanent. The site it describes is not. The address never changes, so a link sent today still opens next year, and a free account keeps it on a dashboard and rescans it once a month.
Share the result
Put the number where your team will see it
The badge always shows the latest scores for this domain and links back to the report. Put it in a README or a footer.
What the agents checked
The audit trail. Ten dimensions, 6 not measured. Not measured is not zero.
Agent door55 of 100
Machine discoverability
No restriction on the tested crawler names was found in robots.txt. On its first visit, our browser read the homepage. Our client was refused when declaring 2 AI crawlers that robots.txt welcomes.
7 observations recorded.
87Strong
Programmatic onboarding
Not measured: robots.txt did not permit our scanner to read the required page.
Not measured
Pricing legibility
12 prices are readable without JavaScript, with no tier sent to sales.
1 observation recorded.
85Strong
The walk
Two agents, the same journey, side by side. Each entry describes what this scan actually reached.
Human doorchrome, javascript on
01Entry observationPrimary entry is "Get 90% off for 6 months". 2 steps from the homepage. no signup form or sign-in options were identified on the rendered page; the signup requirements remain unmeasured./us/pricing-plans/
1 moment recorded. Nothing was submitted and no account was created.
Agent doorhttp fetch, no javascript
reached01www.xero.comWent to reach the site at all.
not found03www.xero.comCould not ask whether the door opens for requests carrying the AI crawlers' names.