AnyVisitorBot
AnyVisitorBot is a browser run by AnyVisitor for a usability test that someone set up for your site. An AI tester plays a person, such as a 47-year-old warehouse lead on a phone or a procurement manager on a laptop, and tries one task the way that person would: reading, clicking and typing, a few dozen pages at most.
How to recognise it
Every request carries this in its user agent:
AnyVisitorBot/1.0 (+https://anyvisitor.com/bot)
It runs on Cloudflare's Browser Run, so requests come from Cloudflare's network.
What it will not do
- It never places an order, pays, sends a message or submits an application unless the person running the test marked the site as their own test environment.
- It never types card numbers, ID numbers or real passwords. It signs in only with a test account the site's own team saved, or through a person from that team.
- It never tries to get past a CAPTCHA or bot check. If it meets one, it stops, or a person from the testing team steps in.
- No more than 10 AnyVisitor browsers visit one site at a time, across all of our customers.
Allow it on your own site
If you test your own site and it has bot protection, allow requests whose user agent contains AnyVisitorBot. In Cloudflare, add a WAF custom rule with the action Skip for http.user_agent contains "AnyVisitorBot", scoped to your test or staging hostname if you prefer.
Block it
Add this to your robots.txt. AnyVisitor checks it before every run and refuses to test a site that blocks it:
User-agent: AnyVisitorBot Disallow: /
Rules for User-agent: * are not read as a block, because teams often test staging sites that are closed to search engines.
Questions or abuse
Write to hello@anyvisitor.com with your domain and the time of the visits, and we will look into it.