Bot intelligence record
PWABuilder
Review firstUse the PWABuilderHttpAgent identifier to separate Microsoft automated traffic that needs additional verification from normal visitor requests in server logs.
- Operator
- Microsoft
- Family
- Microsoft
- Type
- Unknown
- Source type
- Verified Directory
- Last checked
- 2026-05-20
User-Agent Pattern
MicrosoftPWABuilderHttpAgent
User-agent strings are identification signals, not proof of identity. Confirm important allow, block, or rate-limit decisions with logs, DNS or IP evidence, request behavior, or operator documentation when available.
Robots.txt Snippet
Click snippet to copyUser-agent: PWABuilderHttpAgent Disallow: /Click the snippet to copy it, or highlight the text manually.
Handling Guidance
DependsUse this record as bot intelligence, then verify the request source and behavior before allowing, blocking, or rate limiting.
Automated traffic classification requires log review, user-agent comparison, and additional verification signals.
Record Details
Structured data- Operator
- Microsoft
- Family
- Microsoft
- Type
- Unknown
- Purpose
- Unknown
- Identity type
- Verified Bot
- Confidence
- Medium
- Last verified
- 2026-04-01
- Last checked
- 2026-05-20
- Source type
- Verified Directory
- Verification
- Validate the identifying user-agent or signature against the operator documentation before creating hard allow rules.
- Spoofing risk
- User-agent strings can be spoofed. For allow-listing or low-friction rules, pair the published identifier with operator documentation or cryptographic verification when available.
Notes
PWABuilder is listed in the Botcrawl directory as an automated bot from Microsoft. The primary identifier for log review is PWABuilderHttpAgent.
Identification
- User-agent pattern:
PWABuilderHttpAgent - Family: Microsoft
- Type: Unknown
- Kind: Unknown
Common use
Automated traffic classification requires log review, user-agent comparison, and additional verification signals.
Verification and handling
Confirm the user-agent against server logs and use published operator documentation, IP ranges, reverse DNS, or other trust signals when available.
Directory guidance marks the risk level as Neutral and the blocking decision as Depends. Do not rely on the user-agent string alone because user-agent strings can be copied or spoofed.
Robots.txt handling: Yes.
Evidence and Source
- Validate the identifying user-agent or signature against the operator documentation before creating hard allow rules.
- Match `PWABuilderHttpAgent` as a case-insensitive substring in HTTP user-agent logs. Use bot_http_agent for full user-agent examples when the client sends a longer browser-like string. Do not treat a user-agent match alone as proof of identity for allow-listing.
- Automated traffic classification requires log review, user-agent comparison, and additional verification signals.
- User-agent strings can be spoofed. For allow-listing or low-friction rules, pair the published identifier with operator documentation or cryptographic verification when available.
Monitor This Bot In Edge
Botcrawl EdgeUse Botcrawl Edge to see matching traffic, create allow or block rules, and control this bot across connected sites.