# SiteAuditBot

> Semrush's Site Audit crawler: it walks a site a customer owns and reports technical SEO problems. Semrush names it as the token to block for that product.

| field | value |
|---|---|
| operator | Semrush |
| category | SEO and backlink crawlers |
| robots.txt token | `SiteAuditBot` |
| user-agent contains | `SiteAuditBot` |
| robots.txt | obeys robots.txt (documented) |
| verify by | no published verification method |
| published IP ranges | none published |
| prefixes mirrored | 0 IPv4 / 0 IPv6 |
| operator docs | https://www.semrush.com/bot/ |
| last reviewed | 2026-09-14 |

## What blocking it costs you

Site Audit reports on your own domain stop working. If a customer is auditing your site with your permission, blocking this breaks their tooling and nothing of yours.

## Full user-agent string

```
Mozilla/5.0 (compatible; SiteAuditBot/0.97; +http://www.semrush.com/bot.html)
```

## Block it

```
User-agent: SiteAuditBot
Disallow: /
```

## Allow it

```
User-agent: SiteAuditBot
Allow: /
```

## Ask this page a question, with one GET

A question about this page, answered by a call you can make right now — no key, no account, no JSON-RPC, nothing to assemble. The query string is already filled in with this page's own subject.

- **How do I prove a request really is SiteAuditBot?**  
  `curl -s 'https://www.pathwren.workers.dev/tools/verification-methods?crawler=siteauditbot&s=client-dossiers'`  
  The verification method its operator actually publishes — published IP ranges, reverse DNS, or nothing at all — and the mirror of it on this host.

Every parameter above is a value the endpoint reads, not an address it visits: nothing is fetched on your behalf. Called without any parameter, each endpoint returns its own specification instead of an error.

JSON: https://www.pathwren.workers.dev/crawler/siteauditbot.json · index: https://www.pathwren.workers.dev/llms.txt