Centinel AnalyticaCybaaBot
CybaaBot is Cybaa's security-research crawler. It scans the top 1 million domains for misconfigurations and security-header adoption, respects robots.txt, and signs its requests with Web Bot Auth.
At a glance
- Operator: Cybaa
- Type: Security
How Centinel checks it
- User agent: The request calls itself this crawler. Anyone can send the same string.
- Web bot auth: The crawler signs its requests, and Centinel checks the signature against the operator key.
A request that passes one of these checks is CybaaBot itself. One that only matches the user agent is reported as unverified. The match tokens, verification domains, and address feeds are not published here.
Allowing or blocking it
The crawler object in the /validate response sets access_allowed to true only for a verified source that your tenant allowlists. A policy rule can allow or block this crawler by its category, Security.