WTotem
recommended: allowis a security monitoring bot that scans websites and web applications to detect malware, vulnerabilities, and other security threats. Security Scanner Scans websites for security vulnerabilities, threats, and configuration weaknesses
What it does
Security scanners probe websites for vulnerabilities, malware, configuration issues, and other threats. Scan frequency varies widely. Some services run continuous monitoring with daily or hourly checks, while others perform one-time or periodic assessments. Scans may target specific endpoints or comprehensively test multiple pages and functionalities depending on what exactly is being scanned and the site's risk profile.
How to identify it
User-agent contains any of:
WTotem
Example user-agent string:
Mozilla/5.0 (compatible; WTotem; +https://www.webtotem.com/)robots.txt
Well-behaved crawlers honor robots.txt. To control WTotem:
Allow full access
User-agent: WTotem
Allow: /Block entirely
User-agent: WTotem
Disallow: /
Grey-area scrapers ignore robots.txt. Botscope enforces your policy at the edge or origin regardless —
see how →
FAQ
Should I Block WTotem?
Generally no. Security scanners help identify vulnerabilities and protect the broader web ecosystem. Many scanners report findings directly to website owners, providing free security assessments. Only block them if they're too aggressive or you already have comprehensive security monitoring.
How Do I Block WTotem?
If you want to, you can block or limit WTotem's access by configuring user agent token rules in your robots.txt file. The best way to do this is using Automatic Robots.txt, which update automatically as new agents are discovered. While the vast majority of agents operated by reputable companies honor these robots.txt directives, bad actors may choose to ignore them entirely. In that case, you'll need to implement alternative blocking methods such as firewall rules or server-level restrictions. You can verify whether WTotem is respecting your rules by setting up Agent Analytics to monitor its visits to your website.
Will Blocking WTotem Hurt My SEO?
Blocking security scanners won't directly affect SEO rankings, but it could indirectly impact your site's security posture. Compromised websites often face search engine penalties or warnings. Security scanners help identify vulnerabilities, so blocking them might increase your risk exposure.
Does WTotem Access Private Content?
Security scanners may probe both public and private areas to identify vulnerabilities. Some focus only on publicly accessible pages, while others may attempt to access login pages, administrative interfaces, API endpoints, and other potentially sensitive areas. The scope depends on the scanner's configuration and whether it's been authorized to test protected resources.
How Can I Tell if WTotem Is Visiting My Website?
Setting up Agent Analytics will give you realtime visibility into WTotem visiting your website, along with hundreds of other AI agents, crawlers, and scrapers. This will also let you measure human traffic to your website coming from AI search and chat LLM platforms like ChatGPT, Perplexity, and Gemini.
Why Is WTotem Visiting My Website?
WTotem may have targeted your site as part of internet-wide security scanning, through automated discovery of your domain, or because your site was specifically submitted for security assessment. Your site could also be included in regular monitoring if you use their security services.
How Can I Authenticate Visits From WTotem?
Agent Analytics authenticates agent visits from many agents, letting you know whether each one was actually from that agent, or spoofed by a bad actor. This helps you identify suspicious traffic patterns and make informed decisions about blocking or allowing specific user agents.
References
See WTotem on your own site
Botscope shows every bot and AI agent hitting your site — and lets you allow, challenge, or block each one. Observe first, enforce when you're ready.
Start free — connect in minutes