Let the AI crawlers in.
Keep the bad bots out.
Scout Guardian is a managed defence team for your site. AEO means opening your site to AI crawlers, and that lets bad bots in too. We keep the real crawlers welcome, block the fake ones, the scanners and the copiers, trace what got through, and keep a record of every action that cannot be quietly changed. It is the same protection that runs on our own sites every hour.
Getting found by AI means letting robots in.
Every AEO service tells you to open your site to the AI crawlers. They are right: an engine cannot recommend a page it cannot read. But the same open door lets in scrapers copying your content and prices, scanners hunting for secret files, and bots that call themselves GPTBot or Googlebot and are neither. Most AEO work stops at opening the door. We watch it.
Let in
Google, Bing, ChatGPT, Perplexity, Claude and the other real crawlers, confirmed as genuine by their verified signatures or published addresses. They are never blocked.
Kept out
Fake crawlers using a real crawler's name, scanners probing for configuration files and keys, and scripts reading your pages or data in bulk.
Scanners are already at the door. We have seen it on our own sites.
On 17 October 2026, one address sent 474 requests to one of our sites in 24 hours. It called itself by 15 different crawler names, and 308 of those requests were hunting for secret files. We blocked it the same day. Scout Guardian now blocks scanners like it automatically on every one of our sites, checks every hour that each block still holds, and keeps the record.
Five roles, one job: keep your site yours.
Scout Guardian works like a small security team that never sleeps. Each role runs on fixed, tested rules, so the protection keeps working even if an AI service is down, and anything disruptive comes to you first.
Scout
Watches every visit to your site, every hour, and tells real crawlers from impostors.
Shield
Blocks scanners, copiers and fake crawlers, and lifts each block on its own after 30 days.
Hunter
Traces what got through: every page an intruder asked for, in order, across your sites.
Commander
Brings you the events that matter on WhatsApp and email, and waits for your yes on anything disruptive.
Engineer In build
Prepares fixes for the weak spots the team finds, for your approval before anything changes.
Protection that never costs you visibility.
Real crawlers checked
We read who actually got your pages to confirm Google and the AI crawlers were served, and tell you if a setting starts turning them away.
Fake crawlers caught
Bots borrowing the name GPTBot or Googlebot without being them, and scanners probing for secret files, are blocked automatically.
Copying stopped
Scripts reading your pages, prices or data in bulk are spotted and blocked, so the work you published stays yours.
Secret files shielded
A firewall rule turns away requests for the files that should never be public: configuration, backups and keys.
Proof you wrote it
Your pages are fingerprinted and timestamped on Bitcoin, with copies in the Wayback Machine, so you can show what you published and when.
Access rules
Visitors hiding behind VPNs and Tor, or arriving from countries you choose, see a notice instead of your site. Search and AI crawlers still get in.
What got through, traced
When someone slips past, we follow every page they asked for, in order, across your sites, and keep it as evidence.
Told, not buried
Serious events reach you on WhatsApp and email. Everything else is in a short daily summary.
Start with an audit: how exposed is your site today?
Before we protect a site, we check it. The audit is a one-off review with a written report: every finding with what we saw, how serious it is, and how to fix it. It is the same review we run on our own sites. We change nothing on your site without your approval, and we only test sites you own or are authorised to have tested, with your written permission first.
Exposed files
Configuration files, backups, keys and code history that can be downloaded from the web.
Forgotten copies
Old deployments, test sites and subdomains still online, often unprotected.
Outdated software
Your CMS, plugins and themes checked against known vulnerabilities.
Headers and HTTPS
Secure connections everywhere, and the browser protections that stop framing and data leaks.
Email spoofing
SPF, DKIM and DMARC on your domain, so nobody can send email pretending to be you.
Bots and crawlers
Whether bad bots get in, and whether your security settings are quietly turning away Google and the AI crawlers.
Available on its own or as the first step of Scout Guardian. Priced per site and quoted on the call.
Set up once, checked every hour.
01
Call
A 30-minute call to understand your system: how your site is built and hosted, what protects it today, and what needs protecting.
02
Connect
You give us access to your site only, with the narrowest permissions the work needs. You can revoke it at any time.
03
Protect
Checks run every hour. Blocks lift on their own after 30 days, and we unblock any address you ask us to.
04
Report
Every block, unblock and alert is kept in a tamper-evident log, and you get a monthly summary of what we stopped.
How we work
- Blocks follow fixed rules: an AI never decides to block anyone on its own
- Verified search and AI crawlers are never blocked
- Anything disruptive, like blocking a whole network, waits for your approval
- Our access is scoped to your site and never shared
- Blocks are applied at the edge in front of your site: Cloudflare today, other set-ups assessed on the call
- Priced per site and quoted on the call
An add-on to the managed AEO/GEO service, or on its own. See pricing for the monthly program.
Book a call
30 minutes. We look at who is reading your site today, good bots and bad, and say plainly whether the add-on fits.
Book a call