Meet SeoJamaBot
SeoJamaBot is the scanner behind every SeoJama SEO audit. This page explains what it does, how to recognize its requests, and how to allow it if your site's security blocks automated visitors.
What SeoJamaBot does
SeoJamaBot only visits a website when someone asks it to. It does not roam the web on its own:
- On-demand audits — a person enters a URL on seojama.com and requests a free SEO report. The bot fetches that page (plus its
robots.txtand sitemap) to score it. - Site audits — a SeoJama customer runs or schedules an audit of their own website. The bot crawls a capped number of pages on that site to build the report.
Fetched content is used solely to generate the SEO report for the person who requested it. It is not republished, resold, or made part of a public index. Audits are capped to a small number of pages and run in short bursts — there is no continuous crawling.
SeoJamaBot respects robots.txt. Site-audit crawls honor
Allow /
Disallow rules and
Crawl-delay (honored up to 10 seconds)
addressed to User-agent: SeoJamaBot (or
User-agent: *), so you can shape or
stop our crawler the same way you would any other bot. Single-page reports are individual fetches
made at a person's explicit request — comparable to Google's URL testing tools.
Requests are cryptographically signed. SeoJamaBot
implements Web Bot Auth
(HTTP Message Signatures, RFC 9421): every request carries
Signature,
Signature-Input and
Signature-Agent headers signed with
our Ed25519 key, whose public half is served from
https://seojama.com/.well-known/http-message-signatures-directory.
Verifiers can authenticate our traffic regardless of IP address.
How to identify our requests
Every request from SeoJamaBot carries this User-Agent header:
SeoJamaBot/1.0 (+https://seojama.com/bot)
Requests originate from this IP address:
32.184.115.18
Allow SeoJamaBot on your website
If your site sits behind Cloudflare (or similar bot protection), our scanner may be challenged or blocked and your audit will fail with a "security service is blocking automated scanners" message. Allowing the bot takes about two minutes:
Cloudflare
- Log in to the Cloudflare dashboard and select your site.
- Go to Security → WAF → Custom rules and create a new rule (e.g. "Allow SeoJamaBot").
- Set the expression to match User Agent contains
SeoJamaBot— or, for a stricter rule, IP Source Address equals32.184.115.18. - Choose the action Skip, tick the security features to skip (at minimum All managed rules and the challenge/Bot Fight features you have enabled), and deploy.
Other firewalls & security plugins
In tools like Sucuri, Wordfence, or your server firewall, add an allowlist entry for the
SeoJamaBot user agent
or the IP address listed above .
Then re-run your audit — no other changes are needed.
Ready to re-run your audit?
Once the bot is allowed, your next scan should complete normally. Questions? Our help center covers the rest.