About this bot
Detectify is associated with Detectify and used for web application security testing.
The primary identifying User-Agent token is Detectify. Representative HTTP request identity: Mozilla/5.0 (compatible; Detectify).
Directory status: Active. Identity classification: Verified with High confidence.
robots.txt behavior: unknown.
Performs customer-authorized attack-surface monitoring, application scanning, API security testing, and vulnerability checks.
How to identify this bot
- User-agent and crawler identifiers
-
DetectifyMozilla/5.0 (compatible; Detectify) - Also known as
- Detectify Surface Monitoring; Detectify Application Scanning
Details
- Kind
- Security scanner
- Family
- Detectify
- Purpose
- Web application security testing
- Common Use
- Performs customer-authorized attack-surface monitoring, application scanning, API security testing, and vulnerability checks.
- Respects robots.txt
- Unknown
Verification
- Identity Type
- Officially documented
- Evidence Method
- Match the documented Detectify User-Agent and verify the request originates from Detectify's published scanner IP ranges. Do not allowlist solely by User-Agent.
- Detection Notes
- Surface Monitoring can identify as `Detectify`; Application Scanning uses a browser-compatible Detectify UA and can include scan-specific context.
Website controls
- Robots.txt Snippet
# robots.txt behavior is not sufficiently established. Use server-side controls when deterministic restriction is required.- Apache Rule
RewriteCond %{HTTP_USER_AGENT} "Detectify" [NC] RewriteRule ^ - [F,L]- Nginx Rule
if ($http_user_agent ~* "Detectify") { return 403; }