How the lookup decides
It runs three sets of rules, in this order, the same ones invisit uses to sort traffic:
- Known crawlers. A list of about 80 bots by name, each with the company that runs it and what it is for: AI training, AI search, AI assistants, search engines, SEO tools, link previews and archivers.
- Automation. Headless browsers, test runners, uptime monitors and HTTP libraries such as curl or Python’s requests. These are kept out of visits even when they don’t say they’re a bot.
- People. Anything left is read as a browser, a system and a kind of device.
A match in the first list doesn’t prove the bot is real, only that the request says so. The bot pages explain how to check.
Where to find user agents
Your web server’s access log has one per request. In Nginx and Apache’s default combined format it is the last quoted field on each line. On Vercel, Netlify and Cloudflare, the request logs show it as user-agent. In your own browser, the button above fills in yours.