Skip to content
WH

WHITEHAT

GoodBotVerifiedBOT

Bot utilized for scanning for security vulerabilities Operated by Synopsys (formerly WhiteHat Security).

GoodBot
Assessment
Security
Category
BOT
Kind
1
Data sources
AI-generated summary, drawn from Cloudflare, operator docs, and community data

What is WHITEHAT?

WHITEHAT is the automated scanning agent for the Sentinel platform, now part of the Synopsys security portfolio. It is designed to integrate into the software development lifecycle by analyzing source code and third-party components for security flaws, CVEs, and licensing issues. The bot operates as part of a professional security service, helping organizations proactively identify and remediate vulnerabilities before code reaches production environments.

Helpful — This bot is a legitimate security tool used by website owners and developers to identify vulnerabilities and secure their own applications.

Identification

Bot name
WHITEHAT
Operator
Synopsys (formerly WhiteHat Security)
Category
Security
Kind
BOT
Verification
Verified bot
Cloudflare slug
whitehat
User-agent patterns
WHITEHAT
User-agent string
397868 - WHITEHAT-US-PROD-2
Main use cases
Static Application Security Testing (SAST)Software Composition Analysis (SCA)Vulnerability assessment and remediation
Rated Sep 23, 2026 from public evidence

How we rated this bot

Verified by Cloudflare, which confirms who runs it, with no widespread reports of abuse.

Names itself honestly
Yes
Verified by Cloudflare
Yes
Says it follows robots.txt and opt-outs
Not stated
Ignores site rules
None found
Disguises itself or evades blocks
None found
Overloads sites
None found
How widely people complain
No complaint about this bot in the evidence
Reddit discussion
There is no Reddit discussion of this bot in the evidence

What we read

Why it crawls your site

The bot crawls and analyzes web-accessible repositories and application endpoints to perform deep security inspections. It identifies potential security weaknesses, such as insecure configurations or vulnerable library versions, and reports these findings back to the platform's user interface or integrated bug-tracking systems. Verification can be performed by checking the source IP against Synopsys/WhiteHat's published infrastructure ranges or by confirming the user-agent string matches authorized scanning activity within your organization's security dashboard.

Block or allow WHITEHAT

Block it

Add a Disallow rule for WHITEHAT in your robots.txt file. You can also block at the server level using your web server configuration or CDN firewall rules to filter requests matching the user-agent string.

# Block WHITEHAT from crawling your entire site
User-agent: WHITEHAT
Disallow: /

# Allow WHITEHAT full access
User-agent: WHITEHAT
Allow: /
Allow & verify

Ensure your robots.txt allows WHITEHAT. Verify requests by checking the user-agent string.

Traffic & trends

Cloudflare Radar traffic

No Cloudflare traffic data available.

Google Trends interest

Loading trend data…

Data sources

This profile is compiled from the following sources.

CloudflareRadar
Last updated October 25, 2026

Something wrong with this entry? Suggest a correction