What SenrikoMonitor is
If you found this address in your logs, somebody is monitoring a website you run - most likely its owner, or an agency working for them. Our checks identify themselves, and this page says exactly how and what they do.
Three kinds of request, each one introduces itself
HTTP checks
Our HTTP checks - availability, SSL, page and SEO checks - carry this User-Agent:
SenrikoMonitor/1.0 (+https://senriko.com/bot; website monitoring)
Browser checks
Our browser checks run a real Chrome browser with its standard User-Agent, and carry a header naming the account the check belongs to:
X-Senriko-Monitor: <workspace token>
The comparison check
One comparison check fetches a page the way a search crawler or a mobile phone would, with their User-Agent, to catch a site that serves them something different from what it serves everybody else. It comes from the same addresses as every other check.
Our address for your exceptions
Allowlist these if your firewall, WAF or rate limiter is in the way:
To let us past a CAPTCHA, match both the address and the header’s token: the token can leave your site with a redirect, the address cannot.
Nothing a visitor could not do, and nothing a visitor would not do.
Read the page
Most checks fetch one page and read the HTML. They follow redirects and take no more than a page or two at a time. The exception is Deep Audit, which looks for broken pages on the schedule the site's plan sets: it follows the site's own links up to a plan limit and respects robots.txt.
Submit the form
A form check fills in and submits a form, because that is the only way to prove a form still sends. It submits under a made-up identity that says so in plain text, and its owner agreed to it when they set the check up.
On a schedule
Checks run on a schedule the site's owner chose, from once a week to once an hour. We do not retry aggressively and we do not run several checks at once against one page.
Three more names: any visitor to our site can start them
Three more names come from the free tools anyone can use on our site. They mean somebody typed a page of your website into one of them, and not necessarily you or your agency.
Opens one page once, in a clean browser in Germany, to see which tags load and what they send. Clicks nothing and submits no form.
Opens the page three times and answers the cookie banner in two of them: once accepting, once declining.
Opens one page with the test campaign tag utm_source=senriko-scan, follows its redirects and reads the form fields. Blocks the page’s analytics and advertising requests, clicks and submits nothing, and obeys robots.txt.
None of them runs on a schedule: every visit is one check a person started, and one site is checked no more than a few times in a quarter of an hour.
Three ways, quickest first
- Quickest
Ask the site’s owner
They can pause or delete any check in their account. Ask whoever asked us to watch the site.
- Keep the monitoring, lose the enquiries
Discard our submissions
Your site can recognise our header and discard the test enquiries, and the check keeps working.
How to discard our form submissions - The free tools
Remove a result about your site
There is no account to pause these from. If you want a result about your website removed, tell us and we will delete it.