Security

Checking who a request really comes from: verifying Web Bot Auth signatures with fastify-web-bot-auth, and testing a crawler's IP against the ranges its operator publishes.

2 pieces tagged Security, newest first. Everything I've published is inthe archive.

• How to verify GPTBot and ClaudeBot by IP, not user agent28 Oct 2026
• The user-agent header is a claim, not evidence22 Aug 2026