Forum Discussion
Managing Googlebot/Bingbot Exclusions in Security JavaScript without Impacting SEO
I need to add an important security related javascript on my HTML pages that detects a few signals like presence of selenium variables in widnow/document objects. Once something is detected, a reques...
Not the same as cloaking cloaking means serving different content to bots vs. users, and a background security script isn't visible/indexable content.
Key caveat: don't rely on the UA string alone (easily spoofed). Verify Googlebot/Bingbot by IP (reverse DNS + forward-confirm against their published ranges), not just the header. Skip the script only for verified IPs; run it normally for everyone else.
Companies like HUMAN/PerimeterX do the same IP-verified allowlists, not UA-based letting confirmed crawlers skip the heavy detection pipeline.
As long as your actual page content stays identical for bots and users, you're safe.