Narrative
Hims scored 19/95 and lands in Invisible territory, but the diagnosis is unusual: this is not a store that forgot to add schema, it is a store whose edge actively refuses agent traffic. A 66% block rate at the CDN, 403s on the homepage, sitemap, cart, terms, and privacy pages mean agents cannot even begin the evaluation, let alone transact. The permissive robots.txt is theater when Cloudflare returns "Just a moment..." to everything downstream.
Where the points went
| Problem | Points lost | What an agent hits |
|---|---|---|
| No structured product data on any sampled URL | 6 | Agent cannot identify what Hims sells or at what price |
| Cart and checkout unreachable | 6 | Agent gives up before a purchase intent can be formed |
| Edge blocks two-thirds of requests | 6 | 403 on the homepage itself, agent bounces immediately |
| No price in raw HTML across 10 URLs | 8 | Price comparison and recommendation engines skip Hims entirely |
| No specification, decision-support, or delivery metadata | 9 | Agent has no basis to recommend one Hims product over a competitor |
The evidence
- Edge blocking, 0/6. 21 of 32 fetches returned 403, including
https://hims.com/,/cart,/checkout,/terms,/privacy,/sitemap.xml, and/llms.txt. The merchant verifiability classifier saw only "Just a moment... Enable JavaScript and cookies to continue," which is Cloudflare's challenge page, not content. - Structured product data, 0/6. Across 10 sampled URLs (all returned 403 to the crawler), zero had Product or Offer schema. The sample skewed heavily toward
/guides/andsupport.hims.comarticles rather than PDPs, which itself signals a discovery problem for agents trying to reach product pages. - Sitemap, 0/4.
https://hims.com/sitemap.xmlreturned 403. Robots.txt declareshttps://www.hims.com/sitemap.xmlbut the apex host blocks it, so crawlers hitting the canonical domain get nothing. - Price transparency, 0/4. The classifier saw "no pricing, shipping, or tax information visible" and could not evaluate the cart because the cart page was unavailable.
- Stated agent policy, 0/2. Terms and privacy both 403'd, so there is no discoverable statement of whether agents are welcome.
What already works
- Robots.txt explicitly allows all 8 tracked AI user agents including ChatGPT-User, Claude-User, PerplexityBot, and OAI-SearchBot. The intent is right.
- Shopify cart endpoint pattern detected at
/cart, so the underlying commerce plumbing is agent-compatible. - No CAPTCHAs on product, cart, checkout, or homepage flows once past the edge.
Fix first
- Whitelist declared AI user agents at Cloudflare so 403s stop on
/,/cart,/checkout,/sitemap.xml(+12 points across 4.1, 3.1, 1.3). - Add Product and Offer JSON-LD with price to PDPs, served in raw HTML (+14 points across 1.2, 2.1, 2.2).
- Publish
/llms.txtand expose returns and merchant identity on reachable pages (+5 points across 1.4, 5.1, 5.2).
The single biggest unlock is the CDN: every other fix is invisible until agents can actually reach hims.com.
DDiscoverability
Robots, sitemap, agent endpoints. patchy.
EMachine Readability
Schema coverage, raw-HTML price, inventory, variants. broken.
ETransactability
Checkout flow, guest, transparency, payment rails, cart API. broken.
EAgent Posture
Bot detection, CAPTCHA, rate limiting, stated agent policy. broken.
ETrust Signals
Return policy, merchant verifiability, price history, third-party anchors. broken.
EAgent-Native Content
Specs, descriptions, decision support, delivery, stability, absence of manipulation. broken.