Contents
UptimeObserver is now listed as a verified bot in the Cloudflare Radar Bot Directory, under Monitoring & Operations.
We’ve implemented Web Bot Auth to cryptographically sign our HTTP monitoring requests, allowing Cloudflare to verify that they come from UptimeObserver.
Why this matters
Website security tools can sometimes block or challenge legitimate monitoring requests. When that happens, a check can fail even though the website remains accessible to visitors.
A User-Agent string alone cannot prove who sent a request—it can easily be copied. Web Bot Auth provides a stronger way to establish our bot’s identity.
Our monitoring infrastructure signs outgoing HTTP requests with a private key. Cloudflare can then verify those signatures using our registered public keys, published through our key directory.
What this means for your monitoring
Verified status helps Cloudflare distinguish authenticated UptimeObserver requests from unidentified automated traffic. It also gives website owners a verified bot identity to account for in their security settings.
Verification does not override your website’s access controls. Custom firewall rules and other restrictions can still block monitoring requests.
This is a milestone in making our monitoring traffic transparent and verifiable.
View UptimeObserver’s verified bot listing on Cloudflare Radar.