StackraBot
StackraBot is Stackra's research crawler. If you found it in your logs, this page says what it was doing and how to stop it.
How to recognize it
It sends this user-agent:
StackraBot/1.0 (+https://stackra.app/bot/)
What it does
StackraBot reads public pages, robots.txt and response headers across the web for research: things like the software versions servers report and how quickly hosting providers roll out security updates. It is separate from the Stackra scan, which only runs when someone scans a site and does not use this name.
How it behaves
- It reads robots.txt first and follows it, including Crawl-delay.
- It sends one request per page and spaces its requests out. It does not retry a site that refuses it.
- It only reads. It never submits forms, never tries to log in and never sends attack or exploit traffic.
- It only requests public pages, the same ones any visitor can open.
How to block it
Add this to your robots.txt to keep StackraBot off your whole site:
User-agent: StackraBot Disallow: /
To slow it down instead, add a line such as Crawl-delay: 10 under the same user-agent.
What we keep
- We keep what it measures, such as response headers and the software versions a server reports.
- We do not republish your pages, and nothing StackraBot reads is used to train AI models.
- Research we publish reports group totals, such as counts by hosting provider. We never publish a list of sites running outdated software.
Contact
Questions, or something you want us to stop: email luke@stackra.app.