# AhrefsSiteAudit

> Ahrefs' site-audit crawler, separate from AhrefsBot. Ahrefs documents that it obeys robots.txt by default, and that a verified site owner can ask for it to be allowed to ignore robots.txt on their own site so the audit can see disallowed sections.

| field | value |
|---|---|
| operator | Ahrefs |
| category | SEO and backlink crawlers |
| robots.txt token | `AhrefsSiteAudit` |
| user-agent contains | `AhrefsSiteAudit` |
| robots.txt | obeys robots.txt (documented) |
| verify by | published IP ranges |
| published IP ranges | https://api.ahrefs.com/v3/public/crawler-ip-ranges |
| prefixes mirrored | 81 IPv4 / 0 IPv6 |
| operator docs | https://ahrefs.com/robot |
| last reviewed | 2026-09-14 |

## What blocking it costs you

Site owners auditing your domain get an incomplete report. Blocking it saves bandwidth and costs you nothing in search.

## Full user-agent string

```
Mozilla/5.0 (compatible; AhrefsSiteAudit/6.1; +http://ahrefs.com/robot/site-audit)
```

## Block it

```
User-agent: AhrefsSiteAudit
Disallow: /
```

## Allow it

```
User-agent: AhrefsSiteAudit
Allow: /
```

## Ask this page a question, with one GET

A question about this page, answered by a call you can make right now — no key, no account, no JSON-RPC, nothing to assemble. The query string is already filled in with this page's own subject.

- **How do I prove a request really is AhrefsSiteAudit?**  
  `curl -s 'https://www.pathwren.workers.dev/tools/verification-methods?crawler=ahrefssiteaudit&s=client-dossiers'`  
  The verification method its operator actually publishes — published IP ranges, reverse DNS, or nothing at all — and the mirror of it on this host.
- **Is 142.44.220.0 really AhrefsSiteAudit?**  
  `curl -s 'https://www.pathwren.workers.dev/tools/verify-crawler?ip=142.44.220.0&ua=AhrefsSiteAudit&s=client-dossiers'`  
  That address checked against every prefix this host mirrors. 142.44.220.0 is the first address of 142.44.220.0/24, one of the ranges listed on this page — so the link is a worked example that returns a match. Swap in an address from your own log.

Every parameter above is a value the endpoint reads, not an address it visits: nothing is fetched on your behalf. Called without any parameter, each endpoint returns its own specification instead of an error.

JSON: https://www.pathwren.workers.dev/crawler/ahrefssiteaudit.json · index: https://www.pathwren.workers.dev/llms.txt