Paste your URL or robots.txt and see exactly which AI bots can access your infrastructure — and which are stopped cold.
Find your robots.txt at: https://yourdomain.com/robots.txt
We'll fetch robots.txt from https://yourdomain.com/robots.txt via a public CORS proxy.
Unlike Googlebot (which respects crawl delays and caches well), AI training crawlers often make rapid parallel requests, bypass CDN caches, and hit database-backed pages. A single MetaExternalAgent burst has been reported to cause 5–10× temporary traffic spikes with no warning.
Major crawlers like GPTBot (OpenAI) and ClaudeBot (Anthropic) officially claim to respect robots.txt. Enforcement varies — this is a best-effort signal, not a firewall rule. Rate-limiting at the infrastructure level (Cloudflare, nginx) provides stronger guarantees.
Reports in 2025–2026 most commonly cite Meta-ExternalAgent, GPTBot, Bytespider (ByteDance), and CCBot (Common Crawl). Newer LLM services have also started operating undisclosed crawlers. See the full user agent reference →
Not necessarily. robots.txt only works for crawlers that choose to honor it. For cost protection, you also want real-time monitoring to know when a crawler is hitting your site and how much it's actually costing — so you can respond before the invoice arrives.