AI Search External

AI crawlerSignedVery uncommon

How to detect AI Search External

AI Search External signs its requests, so you detect it by verifying the cryptographic signature on each request. A valid signature proves the request came from Cloudflare; a copied user agent without the signature does not.

Detection method: SignedThe agent signs its requests, so its identity is verified cryptographically.
Signals that identify it: CryptographicA signed request verified cryptographically
BehavioralHow the session clicks, types, moves and navigates, checked after the signature is verified

Every signal Verisoul checks for AI Search External

AI Search External signs its requests, so we verify who it is cryptographically, then check the rest of the session.

Used
Cryptographic
A signed request verified cryptographically
Not used
Network
Not needed to identify it
Not used
Device
Not needed to identify it
Used
Behavioral
How the session clicks, types, moves and navigates, checked after the signature is verified

How often you'll see it

Very uncommon

Rare, brand new, or not seen on Verisoul traffic yet

Questions about AI Search External

How do you detect AI Search External?

What is AI Search External?

AI Search External is an AI crawler run by Cloudflare that signs its requests.

Does AI Search External identify itself?

Yes. AI Search External signs its requests cryptographically, which is the strongest way an agent can identify itself.

Can a bot pretend to be AI Search External?

Not convincingly. A bot can copy AI Search External's user agent, but without Cloudflare signing keys its requests fail verification and it is not labeled AI Search External.

How common is AI Search External?

Very uncommon. Rare, brand new, or not seen on Verisoul traffic yet.

What does the Verisoul API return for AI Search External?

Every session Verisoul identifies as AI Search External carries an agent block with id "ai_search_external", name, provider, type "ai_crawler", detection_method "signed" and the detection_signals used (cryptographic, behavioral). Build rules on the id, type and detection method.

In the Verisoul API

Every session Verisoul identifies as AI Search External carries this agent block

API response

"agent": {
  "id": "ai_search_external",
  "name": "AI Search External",
  "provider": "Cloudflare",
  "type": "ai_crawler",
  "detection_method": "signed",
  "detection_signals": [
    "cryptographic",
    "behavioral"
  ]
}

detection_signals also includes device when the session shows signs of automation tools.

Read the docs

Look-alikes

Signatures can't be copied. A bot pretending to be AI Search External without Cloudflare's signing keys won't be labeled AI Search External.

AI Search External

How to detect AI Search External

Every signal Verisoul checks for AI Search External

Cryptographic

Network

Device

Behavioral