Information for developers

What we do when
we visit your website

If you run a website and have seen requests from Wakaris in your logs, or someone has shared a report with you, here’s what we do, how to identify us and how to ask us not to analyze a domain.

This is how you’ll see us

WakarisChecker/2026.09 (+https://wakaris.com/para-desarrolladores)

Source IP5.196.64.157

And this is how you stop us

User-agent: WakarisChecker
Disallow: /

In yourrobots.txt

What Wakaris does

Wakaris analyzes public web pages and explains what it observes across nine areas. An analysis is requested by a person entering a URL; Wakaris doesn’t crawl the internet on its own or build an index.

Each analysis fetches the page just like a browser would, renders it and runs a set of read-only checks: HTTP headers, HTML, loaded resources, load times, markup, visible text and public files such as robots.txt, sitemap.xml and llms.txt. The result is a report of findings, each with the evidence that backs it up.

  • Security
  • Performance
  • Online presence
  • SEO
  • Accessibility
  • Legal
  • User experience
  • AI visibility
  • Marketing

What it doesn’t do

  • It doesn’t submit forms, create accounts, log in or interact with anything that requires credentials.
  • It doesn’t try passwords, inject code or attempt to exploit vulnerabilities. Security checks are passive: they read what the page already exposes.
  • It doesn’t download the whole site in the free analysis: it analyzes the given URL and the resources that page loads.
  • It doesn’t change anything. There are no POST, PUT or DELETE requests.
  • It doesn’t sell or share the data from the analysis. The report belongs to whoever requested it.

How to identify our requests

The user-agent and IP are shown above. If they change, they are updated here before they go into use.

If you see that user-agent in your logs, someone has asked Wakaris to analyze that page. We don’t know or share who, unless that person decides to share the report.

There’s one honest exception: measuring cookies and trackers needs a real browser, so that specific part runs in Chrome and identifies itself as such. If your website saw us as an automated agent, it wouldn’t fire its own cookies and the report would say less than there is.

Load on your server

In terms of requests, analyzing one page is the same as one visit with a browser: the page and the resources it loads, plus the public files that get checked.

If the page doesn’t respond or returns an error, the analysis stops and the report marks it as “no pulse”.

24 hbefore the same URL is analyzed again: the report already calculated is served instead, and it’s the same period the re-analyze button stays disabled.

robots.txt

Wakaris reads your robots.txt and follows what it says for WakarisChecker, and also the * group if you don’t name us.

With one nuance worth knowing, because it’s where we differ from a crawler: the specific address a person pastes to analyze is fetched anyway, because they asked for it —the same approach as PageSpeed—. What robots.txt stops is us looking for other pages on your site. If you want to cut it off completely, block the user-agent on your server or firewall, or ask us to exclude you.

User-agent: WakarisChecker
Disallow: /

Meta tag

If you can’t edit robots.txt, or you want to exclude one specific page rather than the whole domain, add this tag to the page’s <head>:

When the analysis finds it, it stops and doesn’t produce a report for that page. It only affects the page that carries it; to exclude the whole domain, use robots.txt or the contact form.

<meta name="wakaris" content="no-analysis">

If the tag is added after a report already exists, that report is kept for whoever requested it; later re-analyses respect the tag.

Excluding a domain

If you’d rather your website couldn’t be analyzed on Wakaris, you have three options, from fastest to slowest:

  1. The meta tag above, on each page you want to exclude. Immediate, and no server access needed.
  2. The robots.txt rule, for the whole domain. Immediate.
  3. The contact form, if you can’t do either, giving the domain and a way to check that you manage it. We’ll confirm with your reference number once it’s done.

Exclusion prevents new analyses. Reports already generated still exist for whoever requested them; if you need one removed, say so in the same request and we’ll tell you what we can do.

What we store

For each analysis we store what’s needed to show the report to whoever requested it: the URL, the date, the HTTP response, the rendered page, the loaded resources and the results of the checks. We don’t store form content or any data the page doesn’t expose publicly. Details on retention and processing are in the .

Analyzed domains may appear on the Wakaris home page as recent activity, with no reference to who requested the analysis. You can ask for yours not to appear through the contact form.

What someone receiving a report sees

If a client shares a Wakaris report with you, you’ll see each finding with its evidence: what was measured, the value obtained and the reference value. Wakaris explains; it doesn’t dictate how you should work. Findings are observations about what the page exposes at the time of the analysis, and you can mark any that don’t apply as a false positive.

The list of checks we run, with what each one looks at, is in the guides.

Changes

This document is updated whenever the user-agent, the IP or the behavior of the analysis changes.

  • September 17, 2026 · First version.

For any technical question, use the contact form: it’s logged with a reference and we reply in writing.

Get started

Your website has a lot
to tell you, and
And you’ll finally understand it

135 checksNo account or cardResults in ~30 seconds
PerformanceHow fast your website loads. If it’s slow, you lose visits and sales before anyone sees you.SEOWhether Google understands your website and shows you when someone searches for what you offer.SecurityWhether your website is protected. A flaw here scares off customers and Google alike.Online presenceHow you show up on Google, social media and maps. It’s the first impression you make before anyone contacts you.MarketingHow you look to someone comparing before deciding, and where your competitors get ahead of you.AI visibilityWhether ChatGPT, Gemini and other AIs recommend you when someone asks about what you do.User experienceThe user experience (UX): whether it’s clear at first glance and people get where they want. A confusing website gets abandoned even if it loads fast.AccessibilityWhether anyone can use your website without barriers and whether you follow the WCAG 2.2 guidelines. A wider audience that understands you.LegalWhether you comply with cookie and data protection rules. Avoid penalties and fines that hurt.