ShopcheckBot

What ShopcheckBot is

ShopcheckBot is the automated checker behind Shopcheck, a Shopify app that tells store owners when their storefront stops working. It visits only the stores whose owners have installed Shopcheck and set up checks, and it loads only the pages those checks name — typically the home page, a product page, a collection, the cart, and the steps of a buying journey the owner asked it to walk through.

What it does on a store

Each check is configured by the store owner. On its schedule, ShopcheckBot:

• Loads a page over HTTP from Cloudflare Workers or, for journey checks, in headless Chrome on Cloudflare Browser Rendering, and records the status, timing and whether the content the owner expects is there.
• Runs only the steps the store owner wrote, and adds none of its own. A journey can add to cart and open checkout; whether it goes further — a test order or booking — is the owner's choice for their own store.
• Sends one request at a time to a store, at most once every 15 minutes per check. A network or server error is retried once; a refusal (429, 430 or a bot challenge) is never retried.
• Keeps the results — status codes, timings, the page content it judged and screenshots from browser checks — for the store owner. They are not sold, shared or used for anything else.

How to recognise it

ShopcheckBot runs on Cloudflare's network, so it has no fixed IP addresses. Every request carries a Web Bot Auth signature, verifiable against a public key directory. HTTP checks also send the User-Agent below; browser checks use an ordinary browser User-Agent so the page renders as it would for a customer, and are identified by the signature.

User-Agent: ShopcheckBot/1.0 (+https://getshopcheck.com/bot)
User-Agent: ShopcheckBot-Mobile/1.0 (+https://getshopcheck.com/bot)
Signature-Agent: "https://getshopcheck.com"
Key directory: https://getshopcheck.com/.well-known/http-message-signatures-directory

How to stop it

If a store you own is being checked, the owner of the Shopcheck installation controls it: pausing or deleting the check in Shopcheck, or uninstalling the app, stops the visits. If ShopcheckBot is reaching a site that has not installed Shopcheck — a check can be pointed at any URL — add a robots.txt rule and it will stop:

User-agent: ShopcheckBot
Disallow: /

Contact

Questions about ShopcheckBot, or a visit you did not expect? Email hello@getshopcheck.com with the User-Agent and the time, and we will look it up. ShopcheckBot is operated by Digitally Crafted, Australia.