DuckAssistBot
Run by DuckDuckGo
How to detect DuckAssistBot
DuckAssistBot signs its requests, so you detect it by verifying the cryptographic signature on each request. A valid signature proves the request came from DuckDuckGo; a copied user agent without the signature does not.
- Detection method
- SignedThe agent signs its requests, so its identity is verified cryptographically.
- Signals that identify it
- CryptographicA signed request verified cryptographically
- BehavioralHow the session clicks, types, moves and navigates, checked after the signature is verified
Every signal Verisoul checks for DuckAssistBot
DuckAssistBot signs its requests, so we verify who it is cryptographically, then check the rest of the session.
- Used
Cryptographic
A signed request verified cryptographically
- Not used
Network
Not needed to identify it
- Not used
Device
Not needed to identify it
- Used
Behavioral
How the session clicks, types, moves and navigates, checked after the signature is verified
How often you'll see it
Uncommon
Seen on some sites, in small volumes
More from DuckDuckGo
Questions about DuckAssistBot
How do you detect DuckAssistBot?
DuckAssistBot signs its requests, so you detect it by verifying the cryptographic signature on each request. A valid signature proves the request came from DuckDuckGo; a copied user agent without the signature does not.
What is DuckAssistBot?
DuckAssistBot is DuckDuckGo's fetcher for the AI-assisted answers in its search results.
Does DuckAssistBot identify itself?
Yes. DuckAssistBot signs its requests cryptographically, which is the strongest way an agent can identify itself.
Can a bot pretend to be DuckAssistBot?
Not convincingly. A bot can copy DuckAssistBot's user agent, but without DuckDuckGo signing keys its requests fail verification and it is not labeled DuckAssistBot.
How common is DuckAssistBot?
Uncommon. Seen on some sites, in small volumes.
What does the Verisoul API return for DuckAssistBot?
Every session Verisoul identifies as DuckAssistBot carries an agent block with id "duckassistbot", name, provider, type "ai_assistant", detection_method "signed" and the detection_signals used (cryptographic, behavioral). Build rules on the id, type and detection method.