All checks › Bot Access Control
Web Bot Auth
Why it matters
User-Agent is just a string any bot can forge — it proves nothing. Web Bot Auth uses HTTP cryptographic signatures to actually prove that a request comes from the bot it claims to be. Today it is informational (zero weight) because it is still new, but it is the path to agent identity verification that should replace blind trust in the User-Agent header.
Want to see how your site does?
The free scan runs this and every other check in about 30 seconds and shows the evidence for each one.
Scan my site for free