See it on a real storeBots, pages and people sent by AI on an example store. No sign-up.AI training, run by ByteDance.
What is Bytespider? ByteDance's crawler that collects AI training data. It can't be verified beyond its name.
Run by ByteDance.
Purpose: AI training. A visit means your content is being collected, possibly for training.
robots.txt name: Bytespider.
Name only: no published list to check a visit against.
At a glance, the facts in one table.
Bytespider at a glance. Taken from SenseGap's open bot directory, the same data that sorts every visit in the dashboard.
All bots| Bytespider | |
|---|---|
| Operator | ByteDance |
| Purpose | AI training |
| User agent contains | Bytespider |
| robots.txt name | Bytespider |
| Verification | Name only |
| Documentation | None listed |
Purpose, what it does and why it came.
What Bytespider does. SenseGap sorts every visit by purpose. Bytespider is in the AI training group.
Bytespider is ByteDance's crawler that collects web content that may be used to train AI models.
What a visit means
A visit means your content is being collected, possibly for training. Nobody asked about you; training crawlers read the web in bulk and don't link back.
Training crawls say nothing about what people ask right now. SenseGap keeps them apart from visits made while answering a person, so a crawl spike never looks like demand.
Detection, the header SenseGap matches.
How SenseGap recognizes Bytespider. By its User-Agent header. A separate check then decides whether the visit is real.
Every request carries a User-Agent header naming the software that sent it. SenseGap counts a request as Bytespider when that header contains Bytespider, in any letter case. The header is plain text, so any script can copy it. Matching the name is where recognition starts, not where trust starts.
/Bytespider/iVerification, how to tell a real visit from a fake.
Bytespider can't be fully verified. SenseGap knows of no published IP ranges or DNS names for it, so the name is all there is.
How we verify botsNot beyond the user agent. SenseGap knows of no published IP ranges or DNS names for Bytespider, so anyone can send its name. SenseGap marks these visits Unverified rather than calling them real.
robots.txt, rules you can copy.
Block or allow Bytespider in robots.txt. Its robots.txt name is Bytespider. Paste a group into the robots.txt at your site's root.
User-agent: Bytespider
Disallow: /User-agent: Bytespider
Allow: /User-agent: Bytespider
Disallow: /private/One rule catches people out. Under the robots.txt standard (RFC 9309), a crawler that finds a group naming it follows only that group and ignores your User-agent: * rules. If you add a Bytespider group, repeat in it anything from the catch-all group you still want applied.
robots.txt is a request, not a lock. To enforce a block, match the User-Agent header at your server or CDN. In nginx:
# nginx, inside a server block
if ($http_user_agent ~* "Bytespider") {
return 403;
}SenseGap reads your robots.txt and shows, bot by bot, what you allow and which bots fetched pages you disallowed. See what you get.
Trade-off, what blocking changes.
Should you block Bytespider? It depends on what you want from ByteDance. Here is what each choice means.
If you allow it
Future models may learn from your content, so they know your products, prices and wording.
If you block it
New content stops reaching that company's training data. It doesn't remove what was already collected, and because training crawlers don't send visitors, it costs no clicks directly.
AI training, other bots with the same job.
Other AI training crawlers. Same purpose, different companies.
Browse the directoryFAQ, Bytespider in short answers.
Bytespider, answered plainly
What is Bytespider?
Bytespider is ByteDance's crawler that collects web content that may be used to train AI models.
Who runs Bytespider?
ByteDance. SenseGap's directory has no documentation link for it yet.
What does a visit from Bytespider mean?
A visit means your content is being collected, possibly for training. Nobody asked about you; training crawlers read the web in bulk and don't link back.
What user agent does Bytespider use?
Its User-Agent header contains "Bytespider". SenseGap matches it regardless of letter case.
How do I block Bytespider?
Add "User-agent: Bytespider" followed by "Disallow: /" to your robots.txt. robots.txt is a request, not a lock; to enforce it, block the user agent at your server or CDN.
Can I verify that a visit is really Bytespider?
Not beyond the user agent. SenseGap knows of no published IP ranges or DNS names for Bytespider, so anyone can send its name. SenseGap marks these visits Unverified rather than calling them real.
Does ByteDance publish IP ranges for Bytespider?
No. SenseGap knows of no published list of addresses for Bytespider.
What happens if I block Bytespider?
New content stops reaching that company's training data. It doesn't remove what was already collected, and because training crawlers don't send visitors, it costs no clicks directly.