Agent identity
Is this alt.qa on your site? Here is how to know, and how to stop it.
Our agents identify themselves honestly on every request. Paste this page into a WAF ticket.
What every request carries
| Signal | Value |
|---|---|
| User-Agent | altqa-agent/1.0 (+https://alt.qa/bot) |
| Web Bot Auth | HTTP Message Signatures (Ed25519), Signature-Agent: "https://alt.qa" |
| Key directory | https://alt.qa/.well-known/http-message-signatures-directory |
| Test header | X-Alt-Test: true (customer runs) |
| robots.txt token | altqa-agent |
| Concurrency | ≤ 2 sessions per origin (customers); 1 (benchmark) |
| Abuse contact | [email protected], a person replies within one business day |
Cloudflare verified-bot application: planned before the first benchmark crawl. We follow Cloudflare’s verified-bots policy, which delists operators that impersonate other agents.
Customer runs
Full funnels, only with consent
Only on properties whose owner signed a Test Authorization. Stops before payment. Honours 429 and Retry-After.
Alt Benchmark
Read-only, logged-out
Discovery and qualification tasks only. Respects robots.txt. Never creates accounts, submits forms, checks out, or bypasses a CAPTCHA or bot wall.
Opt a domain out →robots.txt
User-agent: altqa-agent Disallow: /
Site owners ask
Is alt.qa pretending to be ChatGPT, Gemini or Perplexity?
No. We run real vendor models (for example Claude computer use and Gemini computer use) but every request is signed with alt.qa’s own identity. We never copy a consumer agent’s user agent, headers or fingerprint.
Why is alt.qa visiting my site if I am not a customer?
Only for the public Alt Benchmark: logged-out, read-only discovery tasks (find a product, read a policy), respecting robots.txt, at most one session at a time. No accounts, no forms, no checkout. You can opt out.
How do I block you?
Disallow
altqa-agent in robots.txt, block the user agent at your WAF, or use the opt-out form. We honour all three.How do I allow you for my own testing?
Verify our Web Bot Auth signature at your WAF, or allow-list the user agent plus the
X-Alt-Test header. Step-by-step: WAF allow-listing.