What is QualysSSLScanner?

QualysSSLScanner is a bot in the monitoring and analytics bots category, operated by Qualys.

Bot name
QualysSSLScanner
Operator
Qualys
Type
Bot
Respects robots.txt
Not confirmed
robots.txt user agent
QualysSSLScanner
Signs requests (Web Bot Auth)
No

About QualysSSLScanner

SSL Labs / Qualys is used to test monitor ssl rating against their site

Monitoring bots check uptime, performance and page changes on behalf of a site owner or a third party. Allow the services you run yourself and exclude them from analytics so they do not inflate page views.

QualysSSLScanner user agent

QualysSSLScanner identifies itself with this user agent string:

  • SSL Labs

Anyone can copy a user agent string. Transfon Security also checks where each request comes from, so a request that claims to be a known crawler but comes from the wrong network is treated as a fake, not as the real crawler.

How to block QualysSSLScanner in robots.txt

We have not confirmed whether QualysSSLScanner follows robots.txt. Add a rule, then check your logs to see that it stopped. robots.txt is a plain text file at the root of your domain, such as https://example.com/robots.txt.

Block QualysSSLScanner from the whole site

User-agent: QualysSSLScanner
Disallow: /

Block QualysSSLScanner from some folders

User-agent: QualysSSLScanner
Disallow: /private/
Disallow: /search

Allow QualysSSLScanner only on some folders

User-agent: QualysSSLScanner
Allow: /blog/
Disallow: /

Allow QualysSSLScanner and block other crawlers

User-agent: QualysSSLScanner
Allow: /

User-agent: *
Disallow: /

Things to know

  • Each host needs its own file. Rules on www.example.com do not apply to shop.example.com.
  • A crawler obeys only the most specific group that names it. Once you add a User-agent: QualysSSLScanner group, QualysSSLScanner ignores your User-agent: * rules, so repeat any that should still apply.
  • The user agent name is not case sensitive. We take QualysSSLScanner from QualysSSLScanner's user agent; check Qualys's own documentation if it publishes a different robots.txt name.
  • Crawlers cache robots.txt, so changes can take up to a day to apply. Disallow stops crawling but does not remove pages already collected or indexed.

Limits of robots.txt

  1. QualysSSLScanner may not follow the rule. robots.txt is a request that nothing enforces, and we have not confirmed that QualysSSLScanner follows it. Check your logs after adding a rule.
  2. The user agent could be fake. robots.txt matches the name a request claims. Anyone can send QualysSSLScanner's user agent, and a scraper using it is not bound by Qualys's robots.txt policy. Only checking the source network tells a real QualysSSLScanner from a fake one.

Treat robots.txt as a statement of your policy, and enforce it where requests arrive.

Who should care about QualysSSLScanner

Publishers

Allow QualysSSLScanner if it is a service you use, and keep its visits out of page views and ad requests either way.

Transfon Security for publishers

Media buyers and advertisers

QualysSSLScanner is not a person. Exclude it from campaign and conversion data so reports reflect real visitors.

Transfon Security for advertisers

E-commerce

Allow QualysSSLScanner only if it works for your store, and keep it away from cart and checkout.

Transfon Security for e-commerce

SaaS and APIs

If QualysSSLScanner is a service you use, allow it on the endpoints it needs and block it elsewhere.

Transfon Security for SaaS and APIs

Block QualysSSLScanner with Transfon Security

robots.txt is a request, not an enforcement. Transfon Security shows QualysSSLScanner by name in the Top Bots report, so you can see how often it visits and which pages it reads. Block or allow it with a User Agent rule, or slow it down with a rate limit decision rule.

Transfon Security

Control QualysSSLScanner on your site

  • See every QualysSSLScanner visit and the pages it reads
  • Spot bots that fake trusted crawler names
  • Block, allow or rate limit QualysSSLScanner with one rule
  • Works with or without robots.txt support

Frequently asked questions

What is QualysSSLScanner?

QualysSSLScanner is a bot in the monitoring and analytics bots category, operated by Qualys. SSL Labs / Qualys is used to test monitor ssl rating against their site

Does QualysSSLScanner respect robots.txt?

We have not confirmed whether QualysSSLScanner follows robots.txt. Add a robots.txt rule, then check your logs to see that it stopped, and block it by user agent if it did not.

How do I block QualysSSLScanner?

Add "User-agent: QualysSSLScanner" followed by "Disallow: /" to the robots.txt file at the root of your site. To enforce it, block requests whose user agent contains "SSL Labs" at your WAF. In Transfon Security that is one User Agent block rule.

Is robots.txt enough to block QualysSSLScanner?

No. robots.txt is voluntary, so QualysSSLScanner may not follow it, and anyone can send QualysSSLScanner's user agent, so a fake QualysSSLScanner ignores your rule. Enforce the rule where requests arrive, at your WAF, and check the source network.

Should I block QualysSSLScanner?

Monitoring bots check uptime, performance and page changes on behalf of a site owner or a third party. Allow the services you run yourself and exclude them from analytics so they do not inflate page views.

Related bots

All monitoring and analytics bots · Full bot directory

See Which Bots Visit Your Site

Transfon Security identifies every bot in this directory in your traffic reports, flags fake search crawlers, and lets you allow, block or rate limit each bot.

Stay ahead of the publishing curve

Privacy, security, monetization, and performance insights. A few emails a month, no spam.

By subscribing you agree to our privacy policy.