The crawler behind ScriptProof
ScriptProofBot
ScriptProofBot is the crawler behind ScriptProof, a monitoring service that helps merchants watch their own payment pages for unauthorized script and header changes (PCI DSS 6.4.3 and 11.6.1 support).
What it does
- Identifies itself with the user agent
ScriptProofBot/1.0 (+this page) - Only visits pages whose owners verified domain control via DNS or a meta tag
- Fetches at most one page every 2 seconds per site, with a 30-second timeout
- Never submits forms, never interacts with payment fields or iframes
- Never collects or stores cardholder data — only script metadata, hashes and headers
Seeing unexpected traffic?
If you see ScriptProofBot on a site you own and did not sign up, someone may have verified a domain they should not have. Contact us and we will investigate and block the site.