What is SiteAuditBot?
Semrush identifies SiteAuditBot as the token to control crawling for SEO and technical issues in Site Audit. This is a separate robots.txt identity from the main SemrushBot, which builds backlink data, and from Semrush's other product-specific agents. Semrush documents the token and a disallow example but does not publish a canonical full browser-style header on this page, so the value shown is the documented identifier rather than an invented full request header.
User Agent String
SiteAuditBot
Copy
How to Control SiteAuditBot
Block Completely
To prevent SiteAuditBot from accessing your entire website, add this to your robots.txt file:
User-agent: SiteAuditBot
Disallow: /
Block Specific Directories
To restrict access to certain parts of your site while allowing others:
User-agent: SiteAuditBot
Disallow: /admin/
Disallow: /private/
Disallow: /wp-admin/
Allow: /public/
Set Crawl Delay
To slow down the crawl rate (note: not all bots respect this directive):
User-agent: SiteAuditBot
Crawl-delay: 10
How to Verify SiteAuditBot
Verification Method:
Semrush documents this token but says not to rely on static IP blocks. A matching header alone is spoofable; confirm questionable traffic with Semrush support and request details.
Learn more in the official documentation .
Detection Patterns
Multiple ways to detect SiteAuditBot in your application:
Basic Pattern
/SiteAuditBot/i
Strict Pattern
/^SiteAuditBot$/
Flexible Pattern
/SiteAuditBot[\s\/]?[\d\.]*?/i
Vendor Match
/.*Semrush.*SiteAuditBot/i
Implementation Examples
PHP
Python
JavaScript
.htaccess
Nginx
Copy
function detect_siteauditbot() {
$user_agent = $_SERVER['HTTP_USER_AGENT'] ?? '';
$pattern = '/SiteAuditBot/i';
if (preg_match($pattern, $user_agent)) {
// Log the detection
error_log('SiteAuditBot detected from IP: ' . $_SERVER['REMOTE_ADDR']);
// Set cache headers
header('Cache-Control: public, max-age=3600');
header('X-Robots-Tag: noarchive');
// Optional: Serve cached version
if (file_exists('cache/' . md5($_SERVER['REQUEST_URI']) . '.html')) {
readfile('cache/' . md5($_SERVER['REQUEST_URI']) . '.html');
exit;
}
return true;
}
return false;
}
Copy
import re
from flask import request, make_response
def detect_siteauditbot():
user_agent = request.headers.get('User-Agent', '')
pattern = r'SiteAuditBot'
if re.search(pattern, user_agent, re.IGNORECASE):
# Create response with caching
response = make_response()
response.headers['Cache-Control'] = 'public, max-age=3600'
response.headers['X-Robots-Tag'] = 'noarchive'
return True
return False
class siteauditbotMiddleware:
def __init__(self, get_response):
self.get_response = get_response
def __call__(self, request):
if self.detect_bot(request):
# Handle bot traffic
pass
return self.get_response(request)
Copy
const express = require('express');
const app = express();
// Middleware to detect SiteAuditBot
function detect_siteauditbot(req, res, next) {
const userAgent = req.headers['user-agent'] || '';
const pattern = /SiteAuditBot/i;
if (pattern.test(userAgent)) {
// Log bot detection
console.log('SiteAuditBot detected from IP:', req.ip);
// Set cache headers
res.set({
'Cache-Control': 'public, max-age=3600',
'X-Robots-Tag': 'noarchive'
});
// Mark request as bot
req.isBot = true;
req.botName = 'SiteAuditBot';
}
next();
}
app.use(detect_siteauditbot);
Copy
RewriteEngine On
RewriteCond %{HTTP_USER_AGENT} SiteAuditBot [NC]
RewriteRule .* - [F,L]
RewriteCond %{HTTP_USER_AGENT} SiteAuditBot [NC]
RewriteCond %{REQUEST_URI} !^/static/
RewriteRule ^(.*)$ /static/$1 [L]
SetEnvIfNoCase User-Agent "SiteAuditBot" is_bot=1
<If "%{HTTP_USER_AGENT} =~ /SiteAuditBot/i">
Header set Cache-Control "public, max-age=3600"
Header set X-Robots-Tag "noarchive"
</If>
Copy
map $http_user_agent $is_siteauditbot {
default 0;
~*SiteAuditBot 1;
}
server {
if ($is_siteauditbot) {
return 403;
}
location / {
if ($is_siteauditbot) {
root /var/www/cached;
try_files $uri $uri.html $uri/index.html @backend;
}
try_files $uri @backend;
}
location @backend {
if ($is_siteauditbot) {
add_header Cache-Control "public, max-age=3600";
add_header X-Robots-Tag "noarchive";
}
proxy_pass http://backend;
}
}
Should You Block This Bot?
Recommendations based on your website type:
Site Type
Recommendation
Reasoning
E-commerce
Optional
Evaluate based on bandwidth usage vs. benefits
Blog/News
Allow
Increases content reach and discoverability
SaaS Application
Block
No benefit for application interfaces; preserve resources
Documentation
Selective
Allow for public docs, block for internal docs
Corporate Site
Limit
Allow for public pages, block sensitive areas like intranets
Advanced robots.txt Configurations
E-commerce Site Configuration
Copy
User-agent: SiteAuditBot
Crawl-delay: 5
Disallow: /cart/
Disallow: /checkout/
Disallow: /my-account/
Disallow: /api/
Disallow: /*?sort=
Disallow: /*?filter=
Disallow: /*&page=
Allow: /products/
Allow: /categories/
Sitemap: https://example.com/sitemap.xml
Publishing/Blog Configuration
Copy
User-agent: SiteAuditBot
Crawl-delay: 10
Disallow: /wp-admin/
Disallow: /drafts/
Disallow: /preview/
Disallow: /*?replytocom=
Allow: /
SaaS/Application Configuration
Copy
User-agent: SiteAuditBot
Disallow: /app/
Disallow: /api/
Disallow: /dashboard/
Disallow: /settings/
Allow: /
Allow: /pricing/
Allow: /features/
Allow: /docs/
Quick Reference
User Agent Match
SiteAuditBot
Robots.txt Name
SiteAuditBot
Category
seo
Respects robots.txt
Yes