What is Web Bot Auth?
Updated By Akkrev
Web Bot Auth is a proposed standard that lets AI agents and bots sign their web requests cryptographically, so websites can tell a real agent from an impostor.
Web Bot Auth is a way for bots and AI agents to prove who they are. Each request carries a cryptographic signature tied to the agent’s operator, which a website or its security provider can check. Anyone can fake a user-agent name; they can’t fake the signature.
The IETF published its first working group draft in September 2026. Major agents including Claude, ChatGPT and Perplexity already sign their requests, and big CDNs verify them.
Why hotels should know about it
Many hotel websites sit behind bot management that challenges or blocks anything automated. That stops scrapers, but it also stops guests’ agents. Signed agents give security tools a reliable way to tell “a real guest’s agent trying to book” from “a scraper copying our rates”.
Whether a hotel’s website lets verified agents through usually depends on settings at its host or CDN, which many hotels have never looked at.
Why it matters for AI visibility
Web Bot Auth lets trusted bots and agents identify themselves, which makes it easier to let good AI traffic in.