AgentHarborEvidenceBot

Last updated: 31 October 2026. Plain language, not legal advice.

Status. This scanner is not yet scanning customer sites. Scanning of live sites is switched off until our safety checks are finished, and some of the limits below are still being built into the software. This page describes how it will behave when scanning starts.

AgentHarborEvidenceBot is the name Agent Harbor LLC's website-evidence scanners use when they visit a web page. If you found this address in your server logs, this page explains who we are, what the visit was for, and how to stop it. Agent Harbor LLC is a Washington (USA) limited liability company.

How to recognise it

The browser it uses identifies itself with a normal Chrome-style user agent that ends with:

AgentHarborEvidenceBot/1.0 (+https://agentharbor.agency/bot)

Its requests come from Agent Harbor's own infrastructure through a single outbound proxy, not from a distributed network.

What it is for

Agent Harbor sells small website-evidence tools: for example a check of which scripts load on a payment page, or what a cookie banner and the Global Privacy Control signal do on a page. A scan is started only by the site's owner, or by a person who has confirmed in writing, at the time of the request, that they own or are authorised to test that site. We record that confirmation with the time of the request.

How it will behave

  • Public pages only. It visits the page it was asked to test, logged out. It does not sign in, does not solve CAPTCHAs or other bot checks (if it meets one, it stops), and does not submit forms.
  • Gentle. It will make at most one request per second to your host, with at most four scans running at once across all customers, and at most one scan of a site every ten minutes.
  • robots.txt. It reads your robots.txt and records what it found. We honour AgentHarborEvidenceBot rules and, while older versions of the software are still in use, the earlier name AgentHarbor-ComplianceSignals too.
  • No cookie values. It records the names and domains of cookies a page sets, never their values, and it redacts personal data patterns from the request records it keeps.
  • Retention. Raw scan artifacts will be deleted after 7 days on the free plan and 90 days on paid plans. Only file hashes will be kept after that.
  • What a report says. A report is technical evidence of what was observed on one date from one location. It is not a legal determination.

Opt out

To stop all scans of your domain, email brian@agentharbor.agency with the domain name (and "opt out of AgentHarborEvidenceBot" in the subject). We add the domain to a block list that is checked before every scan, whoever asks for it, and we reply to confirm. You can also disallow it in robots.txt (if you also list the earlier name, AgentHarbor-ComplianceSignals, it is honoured the same way):

User-agent: AgentHarborEvidenceBot
Disallow: /

If you believe a scan of your site was started without authorisation, write to the same address with the time and the address scanned; we will look into it and tell you what we find.

Technical evidence of observed behavior on the date tested. Not legal advice and not a certification of compliance.