About this bot
WHITEHAT is a dynamic application security scanner associated with Black Duck Software and used for authorized dynamic application security testing.
Primary directory identity signal: WHITEHAT. Representative HTTP identity: WHITEHAT (request marker; do not confuse with network/ASN naming).
Directory status: Active. Identity classification: Verified with Medium confidence. Identity type: network corroborated security scanner.
robots.txt is not recorded as a reliable control for this traffic. Use request authentication, application controls, firewall policy, or service configuration when restriction is required.
Risk classification: Caution. Recommended handling is to evaluate the request context before allowing, rate-limiting, or blocking.
How to identify this bot
- User-agent and crawler identifiers
-
WHITEHATWHITEHAT (request marker; do not confuse with network/ASN naming) - Also known as
- WhiteHat Dynamic; Black Duck Continuous Dynamic
Details
- Kind
- Dynamic application security scanner
- Family
- Black Duck Continuous Dynamic
- Purpose
- Authorized dynamic application security testing
- Common Use
- Authorized dynamic application security testing, production-safe vulnerability scanning, and application risk assessment.
- Respects robots.txt
- No
Verification
- Identity Type
- network-corroborated-security-scanner
- Evidence Method
- Match the WHITEHAT request marker only as a claim and corroborate with Black Duck/WhiteHat production network ownership or an authorized scan engagement.
- Detection Notes
- The current product lineage is Black Duck Continuous Dynamic, formerly WhiteHat Dynamic. Network context is materially stronger than UA-only attribution.
Website controls
- Apache Rule
SetEnvIfNoCase User-Agent "WHITEHAT" botcrawl_match=1- Nginx Rule
if ($http_user_agent ~* "WHITEHAT") { set $botcrawl_match 1; }