For site owners

Goematic's browser visits your site for one of your own users, at their request, with their own login.

What it does

• It signs in with the account owner's login and carries out the steps their AI assistant asks for: reading pages, clicking, filling forms. One owner, one account, one site at a time.
• It does not crawl, index or collect your content, and it sends requests at a person's pace.
• It never solves or bypasses robot checks. When your site asks for one, the account owner passes it.

How to recognise it

Every request carries a Web Bot Auth signature: the header Signature-Agent: "https://goematic.com", with Signature-Input and Signature made with Goematic's key. The public key is at goematic.com/.well-known/http-message-signatures-directory.

Allow or block it

• On Cloudflare: verified bots and signed agents can be allowed or blocked in your security rules.
• Anywhere else: a rule on the Signature-Agent header, after checking the signature with the key above.

Questions or concerns: admin@goematic.com.