RankThatBot

How to identify it

Page requests use this user agent:

Speed tests load pages in a real browser, which adds this to a standard Chrome user agent:

All requests come from this IP address:

Machine-readable list: rankthatseo.com/rankthatbot.json. A request that claims to be RankThatBot from any other address is not us.

How it behaves

• Follows robots.txt rules for RankThatBot (and for * when there is no specific group).
• Crawls only sites with a requested audit, a limited number of pages per audit, a few requests at a time.
• Never submits forms, logs in, or tries to get past firewalls or bot protection. If a site blocks it, the audit says so.
• Does not collect personal data from the pages it reads.

Blocking RankThatBot

Add this to your robots.txt:

Allowing RankThatBot through a firewall

If your site uses bot protection and you want a full audit, allowlist the IP address above:

• Cloudflare: Security, WAF, Tools, IP Access Rules: add the IP with the action Allow.
• Wordfence: Firewall, All Firewall Options, Allowlisted IP addresses.
• Sucuri: Settings, Access Control, Allowlist IP Address.
• Imunify360: Firewall, White List (or ask your host).
• SiteGround: ask SiteGround support to allowlist the IP for their Anti-Bot system.
• Anything else: ask whoever manages the firewall to allowlist the IP and the RankThatBot user agent.

Questions

To report a problem or ask us to stop crawling a site, contact us.