Security scanners probe sites for vulnerabilities, certificates and exposed services.
Some are research projects, some are vendors you hired. Allow your own scanners and block the rest at the WAF.
Of the 2 security scanners with a stated policy, 2 follow robots.txt and 0 do not. Bots that ignore robots.txt can only be stopped by user agent or IP at your server, CDN or WAF.
Transfon Security identifies every bot in this directory in your traffic reports, flags fake search crawlers, and lets you allow, block or rate limit each bot.
Privacy, security, monetization, and performance insights. A few emails a month, no spam.