FlowSnitchBot

FlowSnitch checks websites for their owners. If you see us in your logs, here's what we do and how to recognize us.

User agent

Mozilla/5.0 (compatible; FlowSnitchBot/1.0; +https://flowsnitch.com/bot)

Two kinds of traffic

• Launch Checks, started by anyone for any public URL. They are read-only: only GET/HEAD requests, about 20-40 requests per check, no form submissions. Any non-GET request the page tries to make is blocked. They are rate limited per visitor and per site.
• Flow checks run only on sites whose owner proved ownership with a meta tag or DNS TXT record. They may fill and submit forms like a real user would. Every request carries the header x-flowsnitch-test: 1, and test signups use addresses like owner+fstest-<id>@yourdomain.com.

Filtering our test data

Skip analytics, emails and webhooks when the x-flowsnitch-test header is 1, or when an email contains +fstest-.

Opting out

Block the FlowSnitchBot user agent, or email abuse@flowsnitch.com and we'll add your domain to our do-not-check list.