AI Search

AI crawlerSignedVery uncommon

How to detect AI Search

AI Search signs its requests, so you detect it by verifying the cryptographic signature on each request. A valid signature proves the request came from Cloudflare; a copied user agent without the signature does not.

Detection method: SignedThe agent signs its requests, so its identity is verified cryptographically.
Signals that identify it: CryptographicA signed request verified cryptographically
BehavioralHow the session clicks, types, moves and navigates, checked after the signature is verified

Every signal Verisoul checks for AI Search

AI Search signs its requests, so we verify who it is cryptographically, then check the rest of the session.

Used
Cryptographic
A signed request verified cryptographically
Not used
Network
Not needed to identify it
Not used
Device
Not needed to identify it
Used
Behavioral
How the session clicks, types, moves and navigates, checked after the signature is verified

How often you'll see it

Very uncommon

Rare, brand new, or not seen on Verisoul traffic yet

Questions about AI Search

How do you detect AI Search?

What is AI Search?

AI Search is an AI crawler run by Cloudflare that signs its requests.

Does AI Search identify itself?

Yes. AI Search signs its requests cryptographically, which is the strongest way an agent can identify itself.

Can a bot pretend to be AI Search?

Not convincingly. A bot can copy AI Search's user agent, but without Cloudflare signing keys its requests fail verification and it is not labeled AI Search.

How common is AI Search?

Very uncommon. Rare, brand new, or not seen on Verisoul traffic yet.

What does the Verisoul API return for AI Search?

Every session Verisoul identifies as AI Search carries an agent block with id "ai_search", name, provider, type "ai_crawler", detection_method "signed" and the detection_signals used (cryptographic, behavioral). Build rules on the id, type and detection method.

In the Verisoul API

Every session Verisoul identifies as AI Search carries this agent block

API response

"agent": {
  "id": "ai_search",
  "name": "AI Search",
  "provider": "Cloudflare",
  "type": "ai_crawler",
  "detection_method": "signed",
  "detection_signals": [
    "cryptographic",
    "behavioral"
  ]
}

detection_signals also includes device when the session shows signs of automation tools.

Read the docs

Look-alikes

Signatures can't be copied. A bot pretending to be AI Search without Cloudflare's signing keys won't be labeled AI Search.

AI Search

How to detect AI Search

Every signal Verisoul checks for AI Search

Cryptographic

Network

Device

Behavioral