Promptwatch Logo

Cybaa Agent

Cybaa Agent appears when a Cybaa customer asks the service to check a particular public domain or URL.
VerificationUser InitiatedMonitoring

What is Cybaa Agent?

Cybaa Agent appears when a Cybaa customer asks the service to check a particular public domain or URL. The assessment covers security information such as response headers and TLS configuration. Cybaa treats this targeted agent separately from Cybaa Bot, which it uses for broader security research.

A check loads the requested page in headless Chromium, Edge, or Firefox. The browser and operating system portions of the header can therefore change. Cybaa's bot policy identifies the trailing CybaaAgent text as the authoritative user-agent marker and says the agent does not perform a broad crawl.

Every request is signed through Web Bot Auth. The Signature header carries the web-bot-auth tag, and Cybaa publishes the Ed25519 verification material at https://cybaa.io/.well-known/http-message-signatures-directory. Checking that signature gives stronger evidence than accepting a browser header that anyone can copy.

Cybaa Agent is user initiated, and the operator says it may visit the exact URL supplied by the user regardless of robots.txt. It is not presented as an AI search crawler or a training-data collector. A denial affects the requested security result, not the site's eligibility for an AI answer.

Not relevant for AI search

Is Cybaa Agent relevant for AI search?

No. Cybaa Agent is not part of AI search or training, so allowing or blocking it does not change your AI visibility.

Cybaa Agent runs synthetic monitoring or uptime checks on a schedule. It is not collecting content for any index or model, so it has no bearing on search rankings or AI answers. You usually see it because your own team or a service you use set up a check.

How to handle Cybaa Agent

Confirm that the URL was submitted by an authorized customer before making an access exception. Validate the HTTP Message Signature against Cybaa's directory and keep normal authentication on private routes. The CybaaAgent suffix identifies the software but does not authenticate the requester.

A stable marker makes this group syntactically useful for identification:

User-agent: CybaaAgent
Disallow: /

It is not an effective opt-out for this agent. Cybaa explicitly says a user-requested check may fetch the submitted URL despite robots.txt. Use application authorization, a firewall rule, or removal of the check in Cybaa when the request must not proceed.

Examples

  • After renewing a certificate, an administrator asks Cybaa to check the public site. The resulting browser request ends in CybaaAgent and returns the current TLS and header observations to that check.
  • A request claims to be Cybaa but arrives unexpectedly. The security team verifies the `web-bot-auth` signature first, then asks the domain owner whether anyone submitted the URL.

Frequently asked questions about Cybaa Agent

Learn about AI visibility monitoring and how Promptwatch helps your brand succeed in AI search.

A Cybaa customer supplies the public domain or URL for a targeted security check. The policy says Cybaa Agent does not carry out broad crawling.

Related bots

Awario Bot

Awario's web crawler used to discover and collect new and updated web data for their social media monitoring and brand mention tracking platform.

Monitoring

Better Stack

Better Stack is a platform for monitoring and alerting on your applications.

Monitoring

Checkly

Checkly is a platform for monitoring and alerting on your applications.

Monitoring

Cookiebot

Cookiebot automates compliance with cookie laws and helps you manage your cookie consent preferences.

Monitoring

CookieScript

A cookie scanning bot that examines websites for cookie usage to help maintain GDPR and other privacy regulation compliance.

Monitoring

Be the brand AI recommends

Monitor your brand's visibility across ChatGPT, Claude, Perplexity, and Gemini. Get actionable insights and create content that gets cited by AI search engines.

Promptwatch Dashboard