'%20stroke='url(%23grad)'%20stroke-width='2'%20/%3e%3cpath%20d='M11%2023c2.5-4%204.5-10%2010-10%202.6%200%204.5%201.8%204.5%204.4%200%203.9-3.4%206.6-7.7%206.6-2.2%200-4.1-.7-5.5-2z'%20fill='url(%23grad)'%20/%3e%3ccircle%20cx='14'%20cy='14'%20r='2'%20fill='%232de2e6'%20/%3e%3c/svg%3e){kind=small}
Pingaroo monitoring bot
PingarooBot performs the HTTP uptime checks configured by Pingaroo customers for websites they manage.
Request identity
User-Agent
PingarooBot/1.0 (+https://pingaroo.dev/bot)Method
GETWeb Bot Auth
Redirects
Up to five; private and reserved network destinations are rejected.
Uptime requests use short-lived Ed25519 HTTP Message Signatures for Web Bot Auth. A customer-specific X-Pingaroo-Monitor credential may also be sent as a WAF fallback; it is removed before an off-site redirect.
Cloudflare
Pingaroo signs monitoring requests using Cloudflare Web Bot Auth and publishes its verification keys above. Cloudflare Verified Bot registration removes the need for customers to weaken bot protection.
Until verified-bot recognition is active everywhere, customers using Super Bot Fight Mode or WAF rules can use the narrowly scoped Skip expression from their Pingaroo site page.