Scan bot policy

When you request a free scan, our crawler visits a sample of your site's public pages to look for third-party scripts, pixels, beacons, and embedded iframes. This page explains how it behaves.

User agent

Every request identifies itself with the user agent string:

TagQuietScan/0.3 (+https://tagquiet.com/scan-bot)

The version number changes as the scanner does; the TagQuietScantoken does not, so match on the token if you are writing a rule.

What it respects

• robots.txt on every host it visits
• a rate limit of at most 1 request per second per host
• a bounded page count per scan (it does not crawl an entire site)

What it never does

• It never submits live forms on your site.
• It never enters real personal or patient data anywhere.
• It never attempts to log in or access non-public pages.

When someone else asks for the scan

A web agency or developer who maintains a site can ask us to scan it, and we ask them to confirm they are authorised to do so before we start. The same limits above apply, and the report goes only to whoever asked. If that was not you and you would rather we did not, the exclusion below works either way and we will honour it for as long as you want.

Request exclusion

If you would prefer the scan bot not visit your site, add a Disallow rule for TagQuietScan in your robots.txt, or email us and we will exclude your domain by hand: [email protected]