HUMAN IS KEY
Your content. Your rules. Your revenue.
Know Your
AI Traffic
See exactly which AI crawlers visit your site — GPTBot, ClaudeBot, Perplexity and 20+ more. Block bad bots. Protect pricing data. Prove human traffic quality to advertisers.
Built for EU Publishers
AI Analytics + Bot Protection
Know who crawls your site. Block what you don't want. Prove human traffic to advertisers.Click any card to learn more.
AI Crawler Analytics
See exactly which AI systems crawl your site — GPTBot, ClaudeBot, PerplexityBot and 20+ more, identified by name, company, and purpose.
Bot Detection
Block scrapers, credential stuffers, and fake traffic with behavioral biometrics, IP reputation, and advanced heuristic analysis.
GDPR-Native
No raw IPs stored. No fingerprinting. EU data residency. Built for GDPR compliance from day one — not bolted on.
WordPress-First
Official WordPress plugin — install in 60 seconds. Or paste 1 line of JS to any site. No developer required.
Quick Setup
3 Minutes to Go Live
Install Plugin
Add our WordPress plugin or paste 1 line of JavaScript to any site.
View documentation →Identify AI Crawlers
HumanKey classifies every bot by name and company in real-time — GPTBot, ClaudeBot, Perplexity and more.
See all features →Protect & Prove
Block bad bots automatically. Certify human traffic quality to advertisers.
Try live demo →FAQ
Frequently Asked Questions
Everything you need to know about HumanKey — AI analytics, bot protection, GDPR compliance, and setup.
AI Crawler Analytics identifies every AI bot visiting your website — GPTBot (OpenAI), ClaudeBot (Anthropic), PerplexityBot, Googlebot-Extended, and 20+ others. You see who crawls, which pages they target, and how often. This data helps you understand whether your content trains AI models, set appropriate robots.txt rules, or negotiate AI licensing deals.
We track 20+ AI crawlers including GPTBot (OpenAI), ClaudeBot (Anthropic), PerplexityBot (Perplexity AI), Googlebot-Extended (Google AI), Meta-External-Agent (Meta), YouBot (You.com), Common Crawl, and more. Our bot taxonomy is updated continuously as new AI systems appear.
Yes — GDPR compliance is core to our architecture, not an afterthought. We never store raw IP addresses (only SHA-256 hashed with a daily-rotating salt), use no fingerprinting, keep all data in EU data centers (Frankfurt + Amsterdam), and support all GDPR rights: access (Art. 15), deletion (Art. 17), and portability (Art. 20). DPA documentation is available on request.
Install the official HumanKey plugin from the WordPress plugin directory. Enter your site key (found in your dashboard), and the plugin automatically adds the tracking snippet to every page. A lightweight panel in WP Admin shows your traffic stats without leaving WordPress. Setup takes under 60 seconds.
Add one line of JavaScript to your site's <head> section. It works with any platform — Shopify, Webflow, Squarespace, custom HTML, React, Next.js, or any framework that allows custom HTML injection. Advanced users can also use our REST API directly for server-side integration.
Free: 1,000 verifications/month, 1 site, AI crawler report + certified badge — forever free. Pro ($29/month): 100,000 verifications/month, 3 sites, full AI analytics dashboard, bot detection API, and WordPress plugin. Business ($99/month): 1,000,000 verifications/month, 10 sites, data export, webhooks, team accounts, and priority support.
No to both. IP addresses are immediately SHA-256 hashed with a daily-rotating salt before any storage — the original IP never touches our database. We also use no canvas, WebGL, audio, or font fingerprinting. Bot detection is based on behavioral signals and request patterns only.
The badge is a publicly verifiable certificate displaying the percentage of human traffic on your site, updated regularly. Display it to advertisers and ad networks to prove your traffic quality and justify premium CPM rates. The badge is cryptographically signed by HumanKey (HMAC-SHA256) and cannot be forged or replicated.
Yes. Using the HumanKey API, you can configure per-crawler policies: allow, monitor-only, or block. When blocking is active, crawlers receive a 429 Too Many Requests response from your server. You can also use our AI Magnet feature to generate a tailored robots.txt snippet for your site.
All data is stored exclusively in the European Union: the database in Frankfurt, Germany (Neon / AWS EU-Central-1) and application servers in Amsterdam, Netherlands (Railway / EU-West). Data never leaves the EU. No Schrems II transfer concerns.
Still have questions? Contact us or start your free trial.
Start Today — Free
Know Your AI Traffic.
Block the Rest.
14-day free trial. No credit card required. GDPR-native. Setup in under 5 minutes.