Creative agency glossarySEO and Analytics

User-Agent

A user-agent is the string a browser, app or bot sends to identify itself when it requests a web page, and it is how servers, analytics and SEO tools tell a person from a crawler.

What is a user-agent?

Every request to a web server carries a user-agent header: a line of text that says what kind of software is asking. A browser sends a long string that identifies the browser, its version and the operating system. Google's crawler sends a string containing the word Googlebot and a version number. Other search engines, social platforms fetching link previews, monitoring services, scrapers and AI crawlers all identify themselves with their own strings, and a server can read the header and decide how to respond.

The term also means the software itself. A browser is a user-agent; so is a crawler. In SEO the word is used mostly in the second sense, as in "which user-agents are hitting the site", and in the context of robots.txt, where rules are written per user-agent.

Why it matters

Why a user-agent matters

It is the basis of nearly every rule a site applies to crawlers. Robots.txt rules begin with a user-agent line that names who they apply to, so a site can allow Googlebot everywhere, keep an aggressive scraper out entirely and slow a third crawler down. Server logs are sorted by user-agent to see what the search engines are actually fetching and how often, which is the only direct evidence of crawl behavior a site has. Analytics filters out bots by user-agent so that reported traffic is people.

It also matters for rendering. Some sites serve different markup to crawlers, legitimately for performance or illegitimately as cloaking, and the user-agent is the switch. Knowing which user-agents a site treats differently, and why, is part of any technical audit.

In practice

How a user-agent works in practice

  1. 01

    Log file analysis is the main use. The server's access logs are filtered to the user-agents of the major crawlers, and the results show which pages are crawled, which are ignored, how much of the budget goes to junk URLs, and whether a crawler is hitting errors the browser never sees. Because user-agents can be forged, serious analysis verifies that a request claiming to be Googlebot really came from Google's published address ranges.

  2. 02

    The second use is control. Robots.txt rules are written per user-agent, with a default block for everyone and specific allowances for the crawlers the site wants. Firewall and hosting rules block or rate-limit user-agents that cause problems. Testing tools, including Google's own, let a page be fetched with a chosen user-agent so that the team can see exactly what each crawler receives.

Watch out

What people get wrong about user-agents

Trusting the string. Anyone can send any user-agent, and bad bots often claim to be Googlebot to slip past rules; verification by IP is the only reliable check. The other mistake is blocking by user-agent too freely, which can shut out a search engine's newer crawler, a social platform's preview fetcher or a partner's monitoring tool. And teams forget that analytics bot filtering depends on user-agent lists that need updating, so new crawlers quietly inflate traffic numbers until someone notices.

Questions

People also ask

What is the Googlebot user-agent?

Google's main crawler identifies itself with a string containing "Googlebot", with separate variants for desktop, smartphone, images, video and news. Because the string can be forged, Google publishes the IP ranges its crawlers use so that requests can be verified.

Can I block a user-agent?

Yes, in robots.txt for well-behaved crawlers, which follow the rules voluntarily, and at the server or firewall level for crawlers that do not. Block carefully: an overbroad rule can keep out a search engine or a social platform's link preview.

Why do user-agent strings all start with Mozilla?

History. Early web servers served better pages to Netscape, whose code name was Mozilla, so other browsers added the word to be treated the same, and it has never been removed. The useful information is in the rest of the string.

Next to it in the glossary

  1. 200 (OK) Response CodeA 200 OK response code is the server's confirmation that a request succeeded and the page was delivered as asked.
  2. 301 RedirectA 301 redirect is a permanent instruction that sends browsers and search engines from an old URL to a new one, carrying the old page's ranking signals with it.
  3. 302 RedirectA 302 redirect is a temporary instruction that sends visitors from one URL to another while telling search engines the original address will return.
  4. 304 Not ModifiedA 304 Not Modified response tells a browser or a crawler that the page has not changed since it was last fetched, so the cached copy can be used instead.
  5. 307 Temporary RedirectA 307 Temporary Redirect sends a visitor to a different URL for now, while guaranteeing that the request is repeated exactly as it was made.
  6. 403 ForbiddenA 403 Forbidden error means the server understood the request but refuses to serve the page, usually because the visitor does not have permission to see it.

Every SEO and Analytics term →

In the work

Where it shows up

All our creations →

From the journal

Read around it

The journal →

Talking the talk is one thing

We make the work.

RIOT is a creative agency and production studio in New York. Strategy, brand, film, photography, design and the campaigns that carry them, made by one team. A few lines is enough to start: we read every brief the same day.

    Footage