About this bot
Drata Autopilot is associated with Drata and used for security and compliance validation.
The primary identifying User-Agent token is Dratabot. Representative HTTP request identity: Dratabot (+https://dratabot.com).
Directory status: Active. Identity classification: Verified with High confidence.
robots.txt behavior: no under Dratabot.
Collects evidence and performs authorized security/compliance substantiation checks for Drata customers.
How to identify this bot
- User-agent and crawler identifiers
-
DratabotDratabot (+https://dratabot.com) - Also known as
- Dratabot; Drata Autopilot
Details
- Kind
- Compliance agent
- Family
- Drata
- Purpose
- Security and compliance validation
- Common Use
- Collects evidence and performs authorized security/compliance substantiation checks for Drata customers.
- Respects robots.txt
- No
Verification
- Identity Type
- Officially documented
- Evidence Method
- Match `Dratabot` and corroborate with Drata's documented reverse-DNS/source-network signals or authorized Drata compliance context. User-Agent alone is not authentication.
- Detection Notes
- Dratabot validates customer-authorized systems and controls, including TLS/SSL and configuration checks; it is not a general web crawler.
Website controls
- Robots.txt Snippet
# robots.txt is not a reliable control for this agent. Use server-side access controls when restriction is required.- Apache Rule
RewriteCond %{HTTP_USER_AGENT} "Dratabot" [NC] RewriteRule ^ - [F,L]- Nginx Rule
if ($http_user_agent ~* "Dratabot") { return 403; }