Skip to content
CCN-CERT (Centro Criptológico Nacional) logo

ELSA CCN-CERT

GoodBotVerifiedBOT

CCN-CERT authorized security assessment bot monitoring Internet-facing attack surface for external exposure. Operated by CCN-CERT (Centro Criptológico Nacional).

GoodBot
Assessment
Security
Category
BOT
Kind
1
Data sources
AI-generated summary, drawn from Cloudflare, operator docs, and community data

What is ELSA CCN-CERT?

ELSA (Entorno de Lanzamiento de Servicios de Análisis) is a specialized security scanning platform developed by the Spanish CCN-CERT. It functions as an automated auditing tool that probes web assets to detect misconfigurations, outdated software, and potential security vulnerabilities. By identifying these risks, the tool assists public and private sector organizations in hardening their digital infrastructure against cyber threats.

Helpful — It is a legitimate security auditing tool operated by a government agency to help organizations identify and remediate security weaknesses.

Identification

Bot name
ELSA CCN-CERT
Operator
CCN-CERT (Centro Criptológico Nacional)
Category
Security
Kind
BOT
Verification
Verified bot
Cloudflare slug
elsa-ccn-cert
User-agent patterns
ELSA-CCNCERT-scanner
User-agent string
ELSA-CCNCERT-scanner/1.4 (+https://www.ccn-cert.cni.es/es/soluciones-seguridad/elsa.html; [email protected])
Main use cases
Vulnerability assessmentSecurity posture monitoringAttack surface analysis
Rated Sep 23, 2026 from public evidence

How we rated this bot

Verified by Cloudflare, which confirms who runs it, with no widespread reports of abuse.

Names itself honestly
Yes
Verified by Cloudflare
Yes
Says it follows robots.txt and opt-outs
Not stated
Ignores site rules
None found
Disguises itself or evades blocks
None found
Overloads sites
None found
How widely people complain
No complaint about this bot in the evidence
Reddit discussion
There is no Reddit discussion of this bot in the evidence

What we read

Why it crawls your site

The bot crawls the internet to perform proactive security assessments on behalf of the Spanish government's cybersecurity arm. It analyzes web services to provide visibility into the security status of national assets, allowing administrators to address vulnerabilities before they can be exploited by malicious actors. Operators can verify the bot's legitimacy by checking the provided contact email or the official CCN-CERT documentation.

Block or allow ELSA CCN-CERT

Block it

Add a Disallow rule for ELSA-CCNCERT-scanner in your robots.txt file. You can also block at the server level using your web server configuration or CDN firewall rules to filter requests matching the user-agent string.

# Block ELSA CCN-CERT from crawling your entire site
User-agent: ELSA-CCNCERT-scanner
Disallow: /

# Allow ELSA CCN-CERT full access
User-agent: ELSA-CCNCERT-scanner
Allow: /
Allow & verify

Ensure your robots.txt allows ELSA-CCNCERT-scanner. Verify requests by checking the user-agent string.

Traffic & trends

Cloudflare Radar traffic

No Cloudflare traffic data available.

Google Trends interest

Loading trend data…

Data sources

This profile is compiled from the following sources.

CloudflareRadar
Last updated October 25, 2026

Something wrong with this entry? Suggest a correction