WPScan
recommended: challenge
Operated by WPScan LLC
security
WPScan — WordPress vulnerability scanner that enumerates plugins, themes, and users for security testing.
How to identify it
User-agent contains any of:
WPScanwpscan
Example user-agent string:
WPScan v3.8.22 (https://wpscan.com/wordpress-security-scanner)robots.txt
Well-behaved crawlers honor robots.txt. To control WPScan:
Allow full access
User-agent: WPScan
Allow: /Block entirely
User-agent: WPScan
Disallow: /
Grey-area scrapers ignore robots.txt. Botscope enforces your policy at the edge or origin regardless —
see how →
References
See WPScan on your own site
Botscope shows every bot and AI agent hitting your site — and lets you allow, challenge, or block each one. Observe first, enforce when you're ready.
Start free — connect in minutes