Detectify

Verifiable

Detectify's external attack-surface and vulnerability scanner, which probes customer-configured assets from a documented set of AWS-hosted source IPs. The operator publishes both the source IPs and the scanner's user-agent strings.

Operated by Detectify · Official documentation

User agents

Patterns this directory matches, with real observed strings.

regexDetectify
observedDetectify
observedMozilla/5.0 (compatible; Detectify)

How to verify

Documented static ranges: 52.17.98.131/32, 52.17.9.21/32, 107.20.158.220/32, 3.234.180.95/32, 34.234.177.119/32, 13.126.5.12/32, 3.7.157.159/32, 3.7.173.162/32, 63.32.130.39/32, 54.73.182.190/32, 52.208.235.127/32

IP ranges (11)

Refreshed daily from the operator's feed. Also available as /data/ips/detectify.ips and /data/bots/detectify.json.

107.20.158.220/32
13.126.5.12/32
3.234.180.95/32
3.7.157.159/32
3.7.173.162/32
34.234.177.119/32
52.17.9.21/32
52.17.98.131/32
52.208.235.127/32
54.73.182.190/32
63.32.130.39/32

Good Bot Practices scorecard

Identifies honestly
Stable UA token documented (1 pattern)
Verifiable
Verifiable
Respects robots.txt
Does not honor robots.txt
Behaves
Crawl-rate behavior is operator-declared; not machine-verifiable from this dataset
Reachable operator
Operator and documentation published

Measured against the Good Bot Practices.