Functionize test automation bot
Requests signed by bot.functionize.com come from the browsers that run
Functionize automated tests. A Functionize
customer writes and schedules these tests to exercise their own web applications, for
example to check that sign-up or checkout still works after a release.
How to recognise it
The bot identifies itself with Web Bot Auth (HTTP Message Signatures, RFC 9421). Signed requests carry these headers:
Signature-Agent: "https://bot.functionize.com"Signature-Inputwithtag="web-bot-auth", covering@authorityandsignature-agentSignature, an Ed25519 signature
The public keys are published at
https://bot.functionize.com/.well-known/http-message-signatures-directory.
A request claiming to be this bot without a valid signature from one of those keys is not from Functionize.
What it does
- It runs a real browser (Chrome, Edge or Firefox) and loads the pages and resources a person using the site would load.
- It visits only the sites a customer has configured in their tests. It does not crawl, index or scrape.
- Its traffic volume follows the customer's test schedule.
Controlling access
If you use Cloudflare, you can allow or block this bot by its verified-bot identity. If these tests target a site you operate and you did not expect them, contact the Functionize customer who set them up, or contact us below.