Taboola is a bot in the advertising and marketing bots category, operated by Taboola.
The Taboola crawler visits websites advertiser campaign websites to audit the content of the page and gather site metadata and summary data.
Advertising bots review landing pages, check ad placements and classify pages for brand safety and contextual targeting. Blocking ad verification bots can stop your ads or your inventory from serving, so allow the ones your ad partners use.
Taboola identifies itself with this user agent string:
Mozilla/5.0 (compatible; Taboolabot/3.7; +http://www.taboola.com)Anyone can copy a user agent string. Transfon Security also checks where each request comes from, so a request that claims to be a known crawler but comes from the wrong network is treated as a fake, not as the real crawler.
We have not confirmed whether Taboola follows robots.txt. Add a rule, then check your logs to see that it stopped. robots.txt is a plain text file at the root of your domain, such as https://example.com/robots.txt.
User-agent: Taboolabot Disallow: /
User-agent: Taboolabot Disallow: /private/ Disallow: /search
User-agent: Taboolabot Allow: /blog/ Disallow: /
User-agent: Taboolabot Allow: / User-agent: * Disallow: /
User-agent: Taboolabot group, Taboola ignores your User-agent: * rules, so repeat any that should still apply.Taboolabot from Taboola's user agent; check Taboola's own documentation if it publishes a different robots.txt name.Treat robots.txt as a statement of your policy, and enforce it where requests arrive.
Ad verification and contextual crawlers like Taboola can decide whether your pages get demand. Blocking the ones your partners use can lower fill rates.
Transfon Security for publishersTaboola checks pages for ad platforms. Its visits to landing pages are not users, so exclude them from conversion data.
Transfon Security for advertisersAd platforms send crawlers like Taboola to check product landing pages. Keep it allowed so ads are not disapproved, and out of analytics.
Transfon Security for e-commerceAllow Taboola on landing pages linked from your ads, and keep it off the app.
Transfon Security for SaaS and APIsrobots.txt is a request, not an enforcement. Transfon Security shows Taboola by name in the Top Bots report, so you can see how often it visits and which pages it reads. Block or allow it with a User Agent rule, or slow it down with a rate limit decision rule.
Transfon Security
Taboola is a bot in the advertising and marketing bots category, operated by Taboola. The Taboola crawler visits websites advertiser campaign websites to audit the content of the page and gather site metadata and summary data.
We have not confirmed whether Taboola follows robots.txt. Add a robots.txt rule, then check your logs to see that it stopped, and block it by user agent if it did not.
Add "User-agent: Taboolabot" followed by "Disallow: /" to the robots.txt file at the root of your site. To enforce it, block requests whose user agent contains "Taboolabot" at your WAF. In Transfon Security that is one User Agent block rule.
No. robots.txt is voluntary, so Taboola may not follow it, and anyone can send Taboola's user agent, so a fake Taboola ignores your rule. Enforce the rule where requests arrive, at your WAF, and check the source network.
Advertising bots review landing pages, check ad placements and classify pages for brand safety and contextual targeting. Blocking ad verification bots can stop your ads or your inventory from serving, so allow the ones your ad partners use.
Transfon Security identifies every bot in this directory in your traffic reports, flags fake search crawlers, and lets you allow, block or rate limit each bot.
Privacy, security, monetization, and performance insights. A few emails a month, no spam.