GPTBot
Run by OpenAI
How to detect GPTBot
GPTBot names itself in its user agent, but anyone can copy a user agent, so it is detected by confirming the user agent against other signals: source IP confirmed as the operator's own network; and how the session clicks, types, moves and navigates matches an automated agent.
- Detection method
- Self-declaredThe agent names itself in its user agent, and Verisoul confirms it with network, device or behavioral data. A user agent alone is never enough.
- Signals that identify it
- NetworkSource IP confirmed as the operator's own network
- DeviceNames itself as GPTBot in its user agent, which we check against the rest of the session
- BehavioralHow the session clicks, types, moves and navigates matches an automated agent
Every signal Verisoul checks for GPTBot
GPTBot names itself in its user agent. Anyone can copy that, so we only label a session GPTBot when the other signals check out too.
- Not used
Cryptographic
Not needed to identify it
- Used
Network
Source IP confirmed as the operator's own network
- Used
Device
Names itself as GPTBot in its user agent, which we check against the rest of the session
- Used
Behavioral
How the session clicks, types, moves and navigates matches an automated agent
How often you'll see it
Very common
About 6% of global crawler traffic in September 2026, per Cloudflare Radar
More from OpenAI
- ChatGPT agentOpenAI's agent mode in ChatGPT, which runs its own browser to finish multi-step tasks for a person.SignedHow common: Growing
- ChatGPT-UserFetches a page when a person asks ChatGPT about it.Self-declaredHow common: Common
- OAI-SearchBotOpenAI's crawler that indexes pages for ChatGPT search.Self-declaredHow common: Common
- OAI-AdsBotReviews the landing pages of ads shown in ChatGPT.Self-declaredHow common: Uncommon
Questions about GPTBot
How do you detect GPTBot?
GPTBot names itself in its user agent, but anyone can copy a user agent, so it is detected by confirming the user agent against other signals: source IP confirmed as the operator's own network; and how the session clicks, types, moves and navigates matches an automated agent.
What is GPTBot?
GPTBot is OpenAI's crawler that collects public pages for model training.
Does GPTBot identify itself?
Partly. GPTBot names itself in its user agent, but user agents are easy to copy, so the name alone is not proof.
Can a bot pretend to be GPTBot?
A bot can copy GPTBot's user agent or markers, but the network, device and behavior signals will not match, so it is not labeled GPTBot.
How common is GPTBot?
Very common. About 6% of global crawler traffic in September 2026, per Cloudflare Radar.
What does the Verisoul API return for GPTBot?
Every session Verisoul identifies as GPTBot carries an agent block with id "gptbot", name, provider, type "ai_crawler", detection_method "self_declared" and the detection_signals used (network, behavioral). Build rules on the id, type and detection method.