STATE OF BOT CONDUCT

April 2026

Published April 14, 2026 — First edition

This is the first State of Bot Conduct report. Over 3 days, we observed and tested 30 bots and AI agents against the Bot Conduct Standard — 10 measurable behavioral criteria covering identification, compliance, rate limiting, data protection, and transparency.

Key Numbers

30
Bots scored
14
Operators identified
7
Official tests completed
57%
Score 70+ (acceptable)
30%
Score below 50 (hostile)
13%
Non-compliant (50-69)

Who Passed

Major search engines, social media crawlers, and AI agents demonstrated strong behavioral conduct. These bots identify themselves, respect site rules, and maintain reasonable request patterns.

BotOperatorScore
AhrefsBotAhrefs100/100
ChatGPT-UserOpenAI100/100
GPTBotOpenAI100/100
ApplebotApple100/100
BingbotMicrosoft100/100
GooglebotGoogle97/100
LinkedInBotLinkedIn97/100

Who Didn't

Several bots demonstrated behavioral patterns that fall below BCS standards. Common issues include missing identification, non-compliance with site rules, and aggressive access patterns.

BotOperatorScore
libredtail-httpUnknown35/100
QuickScan ProRapidData LLC34/100
DataHarvester v2.1QuickData Inc23/100
ShadowFetchUnknown20/100
Tencent Cloud CrawlerUnknown12/100
Keydrop Scanneronlyscans.com8/100
zgrab ScannerUnknown5/100
WordPress ScannerUnknown0/100
L9ExploreLeakIX0/100

AI Agents

AI agents are a growing presence on the web. In this report, we observed agents from OpenAI (ChatGPT-User, GPTBot) and ByteDance (Bytespider). All demonstrated responsible behavior in initial observations.

As AI agents take on more autonomous tasks — browsing, purchasing, filling forms, extracting data — behavioral certification becomes critical. Enterprise buyers need assurance that an agent won't cause damage. BCS provides that signal.

The gap is real.

57% of bots we observed meet acceptable behavioral standards. 30% are hostile. The difference isn't intelligence — it's conduct. BCS makes that difference measurable.

Methodology

Bots are evaluated through two methods: official tests (voluntary, 15 adversarial scenarios) and passive observation (automatic, based on real-world behavior on botconduct.org). Both methods score against the same 10 BCS criteria. Observed scores may be partial due to limited data.

This report does not disclose specific test scenarios or detection methods.

What's Next

The May 2026 report will include more bots, deeper analysis of AI agent behavior patterns, and the first renewal data from certified bots. We expect the registry to grow as more operators discover their bots are already being scored.

Test Your Bot or AI Agent

Full registry: 28 bot profiles · API: /api/registry · Standard: BCS v0.1