zgrab
Reviewzgrab is a security scanner from ZMap Project used for security scanning, malware checks, vulnerability assessment, certificate review.
User-Agent
zgrabUser-agent strings are identity signals, not proof of identity. Confirm the source and behavior before trusting a request.
Verification and Detection
Verification method: Verify zgrab by matching `zgrab` to ZMap Project evidence, then checking reverse DNS, source-network ownership, signed request data, or published crawler documentation when available.
zgrab traffic is primarily detected by the `zgrab` user-agent pattern. Compare source IPs, reverse DNS, request paths, and crawl cadence with ZMap Project infrastructure before trusting the traffic.
Handling Guidance
Use this record as identity context. Verify the request source, behavior, and relevance to your site before allowing or restricting traffic.
zgrab is used for security scanning, malware checks, vulnerability assessment, certificate review, and site-safety analysis.
Record Details
- Type
- security-scanner
- Operator
- ZMap Project
- Family
- ZMap Project
- Kind
- Security Scanner
- Purpose
- Security Scanning
- Identity
- Documented
- Detection confidence
- Medium
- Spoofing risk
- Zgrab Has Medium Spoofing Risk Because User Agent Strings Can Be Copied; Pair The Match With DNS, IP, Behavior, Or Operator Evidence.
- Status
- Active
- Respects robots.txt
- Unknown
- Last verified
- 2026 06 22
Robots.txt Snippet
User-agent: zgrab
Disallow: /