curl -s https://www.pathwren.workers.dev/crawler/isscyberriskcrawler.json   # this page, as JSON

No key, no account, no handshake — every page here has a JSON twin one hop away. Machine doors: 6 keyless GET tools · documents.json · changes · llms.txt · openapi.json · agent card · mcp · a2a

ISSCyberRiskCrawler

ISS Corporate Solutions · AI training crawlers · json

User-agent: ISSCyberRiskCrawler
Disallow: /
robots.txt tokenISSCyberRiskCrawler
User-agent containsISSCyberRiskCrawler
OperatorISS Corporate Solutions
CategoryAI training crawlers
robots.txtcompliance disputed
Verify byno published verification method

What it is

Crawls in order to train models that score a company's cyber risk. The ai.robots.txt dataset records the operator as not respecting robots.txt; ISS publishes no compliance statement of its own.

What blocking it costs you

A rule here is a statement of intent. Your organisation's public footprint still gets scored — by a model trained on everybody else.

Full user-agent string

ISSCyberRiskCrawler

Allow it instead

User-agent: ISSCyberRiskCrawler
Allow: /

Ask this page a question, with one GET

A question about this page, answered by a call you can make right now — no key, no account, no JSON-RPC, nothing to assemble. The query string is already filled in with this page's own subject.

curl -s 'https://www.pathwren.workers.dev/tools/verification-methods?crawler=isscyberriskcrawler&s=client-dossiers'

Every parameter above is a value the endpoint reads, not an address it visits: nothing is fetched on your behalf. Called without any parameter, each endpoint returns its own specification instead of an error. All of them.

Operator documentation: https://iss-cyber.com
Machine copies: json · markdown
Policies that name this crawler: allow-all · block-ai-training · block-all-ai · block-disputed · maximum-ai-visibility