PerplexityBot vs Perplexity-User: What Site Owners Control
PerplexityBot automatically discovers pages for Perplexity search and is governed by its own robots.txt token. Perplexity-User fetches a page after a person asks a question; Perplexity says this user-triggered agent generally ignores robots.txt. Use precise crawler rules for search visibility, and use server-side controls when access must be enforced.
Perplexity operates two published user agents that can reach a website for different reasons. PerplexityBot performs automatic discovery for Perplexity search. Perplexity-User makes a request in response to an individual user action. Treating them as interchangeable leads to incorrect robots.txt policies and misleading expectations about enforcement.
PerplexityBot supports search discovery
PerplexityBot is designed to find public pages that may be surfaced and linked in Perplexity search results. Perplexity states that this bot is not used to crawl content for training AI foundation models. If visibility and citations in Perplexity matter to your site, allow this token and ensure your firewall does not block its verified IP ranges.
Blocking PerplexityBot is therefore a search-discovery decision. It can reduce Perplexity’s ability to discover or refresh your pages, but it does not secure the content from browsers, unidentified scrapers, or user-triggered fetchers.
Perplexity-User follows a person’s request
Perplexity-User may visit one page when a person asks Perplexity a question that requires current web content. It is not an automatic indexing crawler and is not used to collect material for foundation-model training. Perplexity’s current documentation says that, because the fetch is user initiated, this agent generally ignores robots.txt rules.
That distinction matters. A Disallow group for Perplexity-User can express a preference, but it should not be treated as reliable access enforcement. If a page must not be fetched, protect it with authentication, authorization, a paywall, or a carefully designed WAF rule.
Choose the policy that matches your goal
For most public editorial and commercial sites, the simplest visibility-first policy is to allow PerplexityBot. You may also allow Perplexity-User, while recognizing that the user agent’s behavior is not equivalent to automatic crawler compliance.
User-agent strings can be spoofed. When configuring a WAF or analyzing logs, compare the source address with Perplexity’s published IP files rather than trusting the header by itself. A WAF can also accidentally block legitimate traffic even when robots.txt says Allow: /, so check both layers.
Perplexity states that PerplexityBot is used to surface and link websites in search results and is not used to crawl content for AI foundation-model training.
Does Perplexity-User obey robots.txt?
Perplexity says the fetch is initiated by a user and therefore Perplexity-User generally ignores robots.txt. Use server-side access controls when a restriction must be enforced.
Can I allow PerplexityBot but block Perplexity-User?
You can publish separate groups, but a Disallow rule for Perplexity-User should be viewed as a preference rather than dependable enforcement because the provider says user-triggered fetches generally ignore robots.txt.
Will blocking PerplexityBot remove my site from every Perplexity answer?
It can prevent automatic discovery and reduce search visibility, but previously known URLs, navigational links, or user-requested access may behave differently. The two agents are controlled independently.
How can I verify a real Perplexity crawler?
Check both the user-agent string and the request source against Perplexity’s officially published IP address files. A user-agent header alone can be spoofed.
We use essential storage for security and core features. With your permission, we may also use analytics and advertising technologies. Rejecting optional technologies does not block access to the site.
Non-essential categories are off unless you choose to enable them. You can return to these settings at any time from the footer.
Global Privacy Control is active.Your browser has requested an opt-out from sale, sharing, and targeted advertising. Advertising remains disabled.
Strictly necessary
Supports security, server sessions, form protection, administrator sign-in, and remembering your privacy choice.
Analytics
Allows Google Analytics to measure visits and interactions so the site can be improved. It is not loaded before permission.
Advertising and cross-site measurement
Allows advertising technologies when they are configured. This may involve ad delivery, fraud prevention, measurement, personalization, or cross-context advertising.
Your choice is stored for 180 days using a first-party preference cookie. A material policy change can ask you to choose again.