Know YourAI Traffic

AI Crawler Analytics shows which AI crawlers and other bots it recognises among the visits measured on your website. It recognises 85+ bots by name, among them OAI-SearchBot (OpenAI), DuckAssistBot (DuckDuckGo), Applebot (Apple) and Googlebot (Google). You see who crawls, which pages they target, and how often. Use Smart Bot Config (Pro and up) to manage crawlers with AI-powered recommendations, and audit your robots.txt against recommended rules (Business and up).

AI Magnet checks what your homepage shows AI crawlers, generates your robots.txt and llms.txt files and lets you set crawler rules. robots.txt states your preferences; compliance is up to each crawler. HumanKey itself does not block any request.

We track 85+ AI crawlers and other bots, including OAI-SearchBot (OpenAI), DuckAssistBot (DuckDuckGo), Applebot (Apple) and Googlebot (Google). Our bot taxonomy grows as new AI systems appear — AI-powered Bot Research surfaces new crawlers, which we review and add.

HumanKey doesn't rely on a single signal. Every visit is scored from crawler taxonomy, network signals, and request metadata into a confidence-graded verdict — not a binary yes/no — so edge cases are flagged as lower-confidence rather than silently misclassified. Pro and higher plans add a behavioral-analysis layer and an advisory ML score that highlight sophisticated automation for your review; the verdict itself is computed the same way on every plan. Classification needs no names, e-mail addresses, accounts or cookies, and it does not try to establish who a visitor is; the Human Traffic Status Badge is based on the same classification.

Those tools measure how people use your site — sessions, clicks and conversions. HumanKey shows the AI crawlers and other bots among the visits measured on your site, and how many of those visits it classified as human. HumanKey complements them.

In stored traffic data, IP addresses are kept only in pseudonymised form (a keyed hash). We place no cookies on your visitors, build no cross-site or persistent visitor profile and store traffic data in the EU (Frankfurt and Amsterdam). As an account holder you can use these GDPR rights in the dashboard: access (Art. 15), erasure (Art. 17) and portability (Art. 20). Our DPIA, Transfer Impact Assessment (TIA) and DORA mapping are public — start at /legal/dpia. The Data Processing Agreement (GDPR Art. 28) is an annex to the Terms of Service on every plan and is accepted with them.

IP addresses are pseudonymised (a keyed hash) before they are written to our traffic database — a visitor's original IP is not kept there. For bot detection we read a limited set of device and browser characteristics during the visit; they are evaluated for the human-or-bot decision and are not written to our database. Where behaviour analysis is active (Pro and higher plans), we also store interaction measurements for each visit — pointer movement, typing rhythm, scrolling and click positions — and delete them together with the visit. We place no cookies on your visitors, use no advertising identifiers, and build no cross-site or persistent visitor profile.

Traffic data is stored in the EU — database in Frankfurt, application servers in Amsterdam. Some of our sub-processors are established in the United States. Where personal data is transferred to them, the transfer relies on standard contractual clauses (Art. 46(2)(c) GDPR); what each provider receives and the transfer mechanism for each are listed in our sub-processor list, and the transfers are assessed in our published transfer impact assessment.

Deleting your account deletes your sites, visit data, API keys and analytics from the service when you confirm; copies in backups expire on the database provider's backup cycle. Records the law requires us to keep (for example refund records for tax purposes) are kept only as long as the law requires. You can export a full copy of your data first from Dashboard → Settings → Privacy. Full detail at /privacy.

The badge is a small live status pill. An optional HumanKey script, once you add it to your site, shows it in the bottom-right corner of the page. Its label reflects the share of visits measured on that site in the last 24 hours that HumanKey classified as human; it can also say that it is still checking, that there is no data yet or that the subscription is inactive. The badge shows a label, not a number, and refreshes about every 5 minutes. The label is based on HumanKey's own classification of the measured visits and is not an independent audit. The badge is available on every plan, including Free.

Yes — HumanKey records the visits it attributes to AI systems: which bot, which URL and when, so you can see how often each one comes. You can use these records in talks with AI companies about licensing or pay-per-crawl programs, or to show the AI traffic HumanKey recorded on your site. Business and Enterprise plans include CSV export and 90–365 day data retention.

A dedicated HumanKey WordPress plugin is coming soon to the WordPress.org directory. Until then, you can add HumanKey to any WordPress site in about a minute with our 1-line JS snippet — no plugin required: paste it into your site header via your theme settings or a headers and footers helper plugin. When the plugin ships, it will let you enter your site key and auto-add tracking, with a traffic panel inside WP Admin.

Add one line of JavaScript to your site's <head> section. It works with any platform — Shopify, Webflow, Squarespace, custom HTML, React, Next.js, or any framework that allows custom HTML injection.

No. The snippet loads asynchronously (async attribute), runs after your page has loaded and does not block rendering.

Yes. On Pro and up, Smart Bot Config lets you classify, allow, or block any AI crawler with one click, with AI-powered auto-recommendations based on your traffic patterns, and generate optimized robots.txt rules automatically. The robots.txt Audit — a full diff against recommended rules — is available on Business and up.

The robots.txt Audit compares your current robots.txt file against HumanKey's recommended rules for all detected AI crawlers and shows a full diff view of exactly what to add, remove, or change — with one-click copy for quick updates. The Audit is a Business and Enterprise feature. On Pro, you instead get AI-generated robots.txt and llms.txt rules from your Smart Bot Config settings — rule generation, not the diff audit.

Traffic Trends shows how your human, bot, and unknown traffic evolves over time using automated daily aggregations. Compare periods to spot changes, see which bots dominate your traffic, and track trend shifts. Available on Pro (30-day), Business (90-day), and Enterprise (365-day) plans. Find it at Dashboard → Traffic → Benchmarks.

Free: 1,000 verifications/month, 1 site, AI crawler report + Human Traffic Status Badge — no charge. Pro ($49/month): 100,000 verifications/month, 3 sites, full AI analytics dashboard and the WordPress plugin (coming soon). Business ($149/month): 1,000,000 verifications/month, 10 sites, data export, webhooks, team accounts, and priority support.

On Business and Enterprise plans, owners can invite collaborators by email through the Team page in the dashboard. The invitee receives a link, opens a preview showing the inviter's name, when one is set, and which role they're being offered (Admin, Analyst, or Read-only), and explicitly clicks Accept to join. Invitations expire after 7 days. The inviter is notified if the invitation is declined. Once accepted, the new member appears on the Team page with their role and can switch into the team's context to access the workspace.