Is my website blocking ChatGPT and other AI crawlers?

Updated 12 October 202610 sources, each openedNo paid placements

The short answer

Possibly, and you can check it yourself. Three layers can block an AI crawler: your robots.txt file, your CDN or firewall, and how the page is built. Cloudflare changed its default to block AI crawlers in July 20251, so a site can be open in robots.txt and still shut at the edge. Read all three layers before you conclude anything.

Key facts

  1. OpenAI documents separate crawlers for ChatGPT search (OAI-SearchBot), model training (GPTBot) and user-initiated visits (ChatGPT-User)2.
  2. OpenAI recommends allowing OAI-SearchBot in robots.txt, says sites that opt out are not shown in ChatGPT search answers, and says search-related robots.txt changes can take about 24 hours to take effect2.
  3. On 1 July 2025 Cloudflare announced it was changing its default to block AI crawlers, and asked every new domain whether to allow or block them13.
  4. From 15 September 2026, Cloudflare's new defaults for new domains block Training and Agent crawlers on pages that display ads, while Search crawlers stay allowed4.
  5. Google tells site owners to confirm that crawling is allowed in robots.txt and by any CDN or hosting infrastructure5.
  6. Perplexity says sites behind a web application firewall may need to allow its bots explicitly, matching both the user-agent and its published IP ranges6.

Which AI crawlers should I know by name?

Each company runs more than one crawler, and each has a different job. Blocking a training crawler is not the same as blocking a search crawler.

  • OpenAI. OAI-SearchBot surfaces sites in ChatGPT search. GPTBot crawls content that may be used for training. ChatGPT-User visits a page when a person asks ChatGPT a question, and OpenAI says robots.txt rules may not apply to it2.
  • Anthropic. ClaudeBot collects content that may be used for training. Claude-User fetches pages when someone asks Claude a question. Claude-SearchBot supports search quality. Anthropic says blocking the last two may reduce your visibility in user search results7.
  • Perplexity. PerplexityBot surfaces sites in Perplexity search and is not used to train models. Perplexity-User fetches a page for a person's question and generally ignores robots.txt6.
  • Google. AI Overviews and AI Mode draw on Search, so normal Search crawling and indexing rules apply5. Google-Extended is a separate robots.txt token for Gemini training and grounding, and it does not affect inclusion in Google Search8.

Where can the block happen?

Layer 1, robots.txt. Open yourdomain.com/robots.txt and look for Disallow rules under each bot's name or under a broad User-agent: * group. A blanket Disallow: / blocks every crawler that does not have its own group.

Layer 2, the CDN or firewall. This is where a clean robots.txt gets overruled. A bot rule, a managed challenge or a default setting can return an error to a crawler before robots.txt is even read. The next section covers Cloudflare, because its defaults have changed more than once.

Layer 3, the page. A crawler that does not run scripts sees only the raw HTML. View the page source, or fetch it with curl, and check that your key text, prices and contact details are in it. If they appear only after scripts run, some crawlers will see an empty shell. AirOps lists JavaScript-heavy pages among the factors that slow results9.

What did Cloudflare change, and does it affect me?

On 1 July 2025 Cloudflare announced it was changing its default to block AI crawlers, and CNBC reported that every new domain signing up would be asked whether to allow or block them13.

In July 2026 Cloudflare split its controls into three categories, Search, Agent and Training, available on all plans including Free. For new domains from 15 September 2026, Training and Agent crawlers are blocked by default on pages that display ads, and Search crawlers stay allowed. The same report says multi-purpose crawlers such as Googlebot, Applebot and Bingbot are blocked if Training crawlers are blocked4.

Write-ups differ on who is covered. One agency guide says the new defaults also reach existing free-plan sites and zones that never saved an explicit AI bot preference, and advises saving explicit choices and adding explicit allow rules for Googlebot and Bingbot10. We could not confirm from Cloudflare's own pages how the rollout went in practice, so read your own dashboard. In Cloudflare the setting sits under Security, Settings, AI bot policies10. On another CDN or a host with bot protection, look for the equivalent bot or AI crawler setting.

How do I check, step by step?

Six steps, in this order:

  • Open yourdomain.com/robots.txt. Look for OAI-SearchBot, GPTBot, ChatGPT-User, ClaudeBot, Claude-SearchBot, Claude-User, PerplexityBot, Perplexity-User and Google-Extended, plus any broad User-agent: * group. Note which are disallowed.
  • Open your CDN or firewall bot settings. In Cloudflare, check the AI bot policies10 and any custom rules that challenge or block unknown bots.
  • Search your server or CDN logs for those bot names. A run of 403 or 429 responses to them points to a block.
  • Test with a request that sends a bot's user-agent, for example curl -I -A OAI-SearchBot on your home page. Treat the result as a hint. Firewalls that verify bots by IP range treat your laptop differently from the real crawler. Perplexity advises matching both the user-agent and its published IP ranges6, and OpenAI publishes IP ranges and recommends allowing them for search2. Real crawler visits in your logs are the proof.
  • View the raw HTML of your key pages and confirm the important text is there without scripts.
  • Change what you want to change, then wait. OpenAI says search-related robots.txt changes can take about 24 hours to take effect2, and Perplexity says up to 24 hours6. Re-check after any CDN or plan change.

Should I allow all of them?

Allowing search and user-initiated crawlers is what lets assistants show your site. OpenAI recommends allowing OAI-SearchBot to help your site appear2, and Anthropic says blocking Claude-User or Claude-SearchBot may reduce visibility in search results7. Training crawlers are a business choice. Disallowing GPTBot signals that your content should not be used for training2, and blocking ClaudeBot signals the same to Anthropic7. Decide per bot and write the decision down.

Access is only the first step. Allowing a crawler makes you reachable. It does not by itself put you in an answer.

Our side, stated plainly

What KanavuLab does

Access is the first thing we check before any other AI SEO work: robots.txt, the CDN and firewall layer, and whether key text is in the raw HTML. Projects are led by Avinash S, an engineer with 8+ years across cloud, security and full stack, so the edge settings are checked by someone who works with them.

Changes happen in accounts and a domain in your name, scope changes are priced in writing first, and we tell you what we changed. We do not guarantee placement: access makes you reachable, not named. After access, we ask the AI assistants your buyers use the same buyer questions, logged out, every day, and report named, cited and missed every week.

Follow-up questions

Does blocking GPTBot hide me from ChatGPT answers?

Not by itself. OpenAI says each robots.txt setting is independent: GPTBot relates to training, while OAI-SearchBot decides whether a site is shown in ChatGPT search answers2.

Will blocking Google-Extended hurt my Google rankings?

Google says Google-Extended does not impact a site's inclusion in Google Search8. It is a robots.txt control token for Gemini training and grounding, separate from the crawling that Search uses.

Why does ChatGPT-User ignore my robots.txt?

Because a person triggers the visit. OpenAI says robots.txt rules may not apply to those requests, and Perplexity says its Perplexity-User fetcher generally ignores robots.txt for the same reason26. If a page must stay private, protect it with access controls rather than a robots.txt line.

How long until a fix shows up?

OpenAI says about 24 hours for search-related robots.txt changes2. Being named is a separate matter that depends on your content, your outside mentions and the assistant.

Can KanavuLab check this for me?

Yes, as part of AI SEO work, scoped and quoted after a 20-minute call. You can also do the six steps above yourself.

Sources

Every source was opened before this page was published. Figures from vendors who sell in this market are labelled as such in the text.

  1. Cloudflare Blog Content Independence Day: no AI crawl without compensation, 1 July 2025. Opened 12 October 2026
  2. OpenAI Overview of OpenAI crawlers, 2026. Opened 12 October 2026
  3. NBC New York (CNBC) Web giant Cloudflare to block AI bots from scraping content by default, 1 July 2025. Opened 12 October 2026
  4. Help Net Security Cloudflare changes AI crawler access rules, 2 July 2026. Opened 12 October 2026
  5. Google Search Central AI features and your website, 2026. Opened 12 October 2026
  6. Perplexity Perplexity crawlers, 2026. Opened 12 October 2026
  7. Anthropic Does Anthropic crawl data from the web, and how can site owners block the crawler?, 2026. Opened 12 October 2026
  8. Google Search Central Google's common crawlers, 2026. Opened 12 October 2026
  9. AirOps How long does it take to see results from AEO?, 11 May 2026. Opened 12 October 2026
  10. Blaze Commerce What changes in Cloudflare on September 15, 2026, and can it block Googlebot?, 28 August 2026. Opened 12 October 2026

Ask us this on a 20-minute call.

Scoped and quoted after the call. Not the right fit? We will say so.