60+
named AI crawlers detected
1 line
of HTML, zero JavaScript
48hrs
to first bot detection, typical
30 days
revisit detection window

Verified, suspicious, or spoofed

Every request claiming to be GPTBot, ClaudeBot, PerplexityBot, or another known AI crawler is checked against that provider's published IP ranges and reverse-DNS — not just a user-agent string, which is trivial to fake.

Per-request access logs

See exactly which AI systems hit your site, which pages they pulled, and how often — verified crawlers, unverified traffic, and blocked attempts, broken out separately instead of lumped into one bot number.

Allow, block, or redirect

Set policy per crawler instead of an all-or-nothing robots.txt rule. Let citation-driving engines through, slow down aggressive scrapers, and get an alert the moment a request spoofs a known crawler's identity.

The core distinction

Know your Stock vs. your Flow.

Not every AI crawler is doing the same job. The distinction between training crawlers and search crawlers is the most consequential signal in AEO — AI Access tells you which one just hit a page, so you know how to respond to it.

Stock signal

AI training crawlers

Ingesting your content into future model weights. This is the crawl that determines what the next generation of models will know about your brand a year from now.

GPTBot ClaudeBot Google-Extended Anthropic-AI Mistral AI Cohere Common Crawl DeepSeek Meta AI Allen Institute AI2

Flow signal

AI search crawlers

Retrieving your content for real-time answers being served to users right now. This is the crawl connected to live citations and current referral traffic.

OAI-SearchBot ChatGPT-User Perplexitybot Grok / xAI Brave Search You.com

AI Assistant crawlers (AmazonBot/Alexa, AppleBot-Extended) form a third category — indexing your content for voice responses and personal AI agents acting on behalf of high-intent users.

Revisit tracking

The AEO Pulse — proof a crawl was triggered.

AI citation recency is a measurable signal. Track how often each bot returns to a page, and see exactly when to push a content update to trigger a re-crawl.

11 days
to GPTBot revisit after a schema push, typical
30 days
revisit detection window per page
60s
dedup window — no inflated counts from multi-request crawls

If a model hasn't revisited a page in 14 days, your brand is going stale in AI answers. Revisit tracking shows the exact recency of each AI system's knowledge of your content — per page, per bot, per day. No other tool surfaces this as a primary signal.

Installation

Up and running in 60 seconds.

One line of HTML, works on every platform that renders HTML. No plugin, no server access.

Step 1 — Sign up, get your embed snippet

After signup you'll get a unique Site ID and a ready-to-paste HTML snippet, shown at the top of your dashboard.

Step 2 — Paste one line before </body>

<img src="https://aeofix.com/api/bot-pixel?site=YOUR_ID&page=/" width="1" height="1" style="display:none" alt="">

No plugin, no JavaScript, no server access needed. Works instantly on WordPress, Shopify, Webflow, Squarespace, Wix, Ghost, Framer, Carrd, Weebly, and Bubble.

WordPress Squarespace Webflow Shopify Wix Ghost Framer Carrd Weebly Bubble

Full installation guide + verification →

Step 3 — Open your dashboard, watch the bots arrive

Log in to see every AI crawler visit in real time — named, categorized, geo-tagged, and revisit-flagged. Most customers see their first detection within 48 hours.

Endpoint security

The tracking pixel itself is hardened.

Adversarial bots sometimes embed instructions in User-Agent strings or request parameters, targeting analytics endpoints directly. The pixel that powers AI Access is built to reject that before anything is ever logged. This protects the tracking endpoint itself — it's separate from AEOfix's own site-wide security infrastructure.

15-pattern injection detection

Regex checks cover role manipulation, system-prompt extraction, jailbreak strings, SQL injection, and encoded payload bypasses on every request.

Silent rejection

Flagged requests still receive the 1×1 pixel response — the attacking bot detects nothing — but nothing is written to your data. Your dashboard stays clean.

Rate limiting

200 requests per hour per IP, so a bad actor can't flood your data with noise from a single source.

Zero-cost geo

Country and city come from native edge infrastructure headers — no external geo API, no added latency, no added cost at scale.

How it compares

The gap in your existing stack.

Cloudflare blocks bots. Analytics tools filter them out. SEO tools track keywords. None of them were built to answer the question that matters for AEO: which AI is reading you, and did it come back?

Feature SEO Tools Bot Managers Analytics (GA4) AI Access
AI crawler detection Partial Block-focused Filtered out 60+ named bots
Stock vs Flow intent classification None None None Native
Revisit / recency tracking No Hard to export No Primary signal
Tracking endpoint injection protection No WAF level only No On the endpoint
Geo data cost Paid add-on Included Sampled Native, zero cost
Implementation Heavy script Infrastructure change Script tag One HTML line
Pricing

Simple monthly pricing. Cancel anytime.

Every tier gets full bot detection, Stock vs Flow classification, and revisit tracking. Higher tiers add sites, history, and export.

Access
1 site
$39/mo
per site, cancel anytime
  • All 60+ named bots detected
  • Stock vs Flow classification
  • Revisit tracking
  • 30-day data history
  • Real-time dashboard
  • Monthly email digest
Agency
Up to 25 sites
$199/mo
per account, cancel anytime
  • Everything in Pro, up to 25 sites
  • 1-year data history
  • Monthly AI intelligence brief
  • Priority support
FAQ

Questions you'll have before installing.

What's the difference between an AI Training bot and an AI Search bot?

AI Training bots (GPTBot, ClaudeBot, Google-Extended) ingest your content into future model weights — this is your Stock signal, representing long-term brand knowledge in AI systems. AI Search bots (OAI-SearchBot, Perplexitybot, Grok) retrieve your content for real-time answers being served to users right now — this is your Flow signal, representing current citation traffic. AI Access tells you which one just hit a page.

Does this work on WordPress, Shopify, and other platforms?

Yes. The tracker is a single HTML image tag. It requires no JavaScript, no plugin, and no server access. Paste it before </body> on any platform: WordPress, Shopify, Webflow, Squarespace, Wix, Framer, Ghost, Next.js, or raw HTML.

What is revisit tracking and why does it matter?

Revisit tracking records when the same AI bot returns to the same page within a 30-day window and measures days elapsed between visits. If GPTBot returns to your blog post 11 days after you implemented schema markup, that's measurable proof your AEO change triggered a re-crawl. No other tool surfaces this as a primary metric.

What is prompt injection protection on a tracking endpoint?

Adversarial bots sometimes embed instructions in User-Agent strings or request parameters to attempt analytics poisoning — inflating metrics, skewing data, or probing API structure. Our endpoint runs 15 regex-pattern injection detection checks and input sanitization on every request before any data is logged. Malicious requests receive the 1×1 pixel response — so the bot detects nothing — but nothing is stored.

How long does it take to see data after installing?

AI crawlers visit on their own schedule. Most customers see their first AI bot detection within 1–7 days of installing the embed. Active sites with published content and schema markup tend to see GPTBot or Perplexitybot within 48 hours.

Can I upgrade or downgrade my plan later?

Yes. Access, Pro, and Agency are all billed monthly with no contract — change tiers or cancel any time from your dashboard.

Why it matters

You can't fix what you can't see.

Every AEOfix citation implementation starts from the same access data this tracks — which pages AI actually reaches, and whether the crawler reaching them is who it claims to be. If you're already on Visibility or Fix, Access is the log your recommendations get built on.

Start tracking your AI access.

From $39/mo, per site, cancel anytime. Set up takes minutes.

Already have access? Log in