Eight public-signal checks, no JavaScript installed anywhere. We fetch your robots.txt, look for AI-scraper directives, test edge mitigation and exposed admin paths, and grade your exposure. Nothing touches your ad account.
We read eight public signals — robots.txt, ai.txt, named crawler blocks, edge mitigation — and score your exposure. Nothing touches your ad account.
Does it exist? Is it parseable? What crawlers does it address by name, and what's the blast-radius of its rules?
Newer AI-scraper opt-out files. We check presence and whether the directives actually bind the crawlers they claim to.
OpenAI's training crawler. We check whether it's disallowed in robots.txt and whether you'd be blocking it cleanly.
Common Crawl's archiver — the firehose that feeds most large language models. Check its disallow status.
Anthropic's training and inference crawlers. We flag separate rules (training-only opt-out is supported).
Bingbot respects a Crawl-Delay directive. We test whether you're rate-limiting it sanely or accidentally starving it.
Edge bot mitigation. We sniff response headers for Cloudflare's managed challenge — a strong first line of defence.
Common CMS admin paths (/wp-admin, /administrator) responding 200 are a free signal to attackers — we flag them.
Everything your site already tells the internet about how you treat bots — robots.txt, AI opt-outs, named crawler rules, edge mitigation, and surface-area exposure like unprotected admin paths.
It can't see who's clicking your Google ads right now. Only an installed snippet can score live traffic, flag clicks in under 200ms and generate an exclusion list. That's the paid product.
One line of JavaScript gets you a live dashboard of your bot traffic, wasted ad-spend and auto-synced Google Ads exclusion lists — usually within an hour of install.
You'll know your bot rate in 60 seconds, have refund-ready evidence in a week, and a cleaner CPA by month-end. No credit card.