Overview
Salesforce is a web scraper from Salseforce used for public web data collection, page extraction, content monitoring, and third-party crawler activity.
Its primary user-agent pattern is SFDC-Callout; a representative HTTP user-agent is SFDC-Callout/49.0.
Salesforce is Unverified at the identity-evidence level. The listed identity remains useful for detection, but this record does not currently contain authoritative evidence sufficient to authenticate the identity claim.
Robots.txt behavior is not currently confirmed.
Salesforce should be reviewed against site policy, source evidence, crawl rate, and requested paths before a permanent allow or block rule is created.
Identity
- User-Agent
SFDC-Callout- HTTP Agent Examples
SFDC-Callout/49.0- Robots.txt Token
SFDC-Callout- Identity Type
- Observed
- Evidence Method
- Treat `SFDC-Callout` as an identity signal only. Confirm it with current operator documentation, cryptographic verification, forward-confirmed reverse DNS, source-network ownership, or other authoritative evidence before trusting the claimed identity.
Classification
- Type
- Scraper
- Kind
- Crawler
- Family
- Salseforce
- Purpose
- scraping
Behavior and handling
- Common Use
- Salesforce is used for public web data collection, page extraction, content monitoring, and third-party crawler activity.
- Detection Notes
- Salesforce traffic is primarily detected by the `SFDC-Callout` user-agent pattern; a representative HTTP user-agent is `SFDC-Callout/49.0`. Compare source IPs, reverse DNS, request paths, and crawl cadence with Salseforce infrastructure before trusting the traffic.
- Respects robots.txt
- Unknown
- Spoofing Risk
- Salesforce has medium spoofing risk because user-agent strings can be copied; pair the match with DNS, IP, behavior, or operator evidence.
- Risk
- Neutral
- Recommended Handling
- Depends
Rules and controls
- Robots.txt Snippet
# robots.txt behavior is unconfirmed. Do not rely on this rule without verification.