Search field note
August 14, 2026

AI bots are crawling your website. Most SEO teams still can't see it.

A useful observation from server logs: AI systems are already fetching product, pricing, documentation, and crawler-facing files. The answer is not a new GEO checklist. It is better crawl hygiene.

8 min readUpdated August 14, 2026

Key takeaways

  • AI bots have different jobs: search/indexing, training, and user-triggered retrieval. They should not share one blanket robots.txt rule.
  • Server-side logs matter because many crawlers never execute browser analytics JavaScript.
  • A clean sitemap and server-rendered answers are more important than an llms.txt file. Publish one only if you can keep it accurate.
  • Private content needs authentication. A robots.txt rule is a crawler preference, not access control.

Marc Lou recently shared a useful signal from TrustMRR's server-side logs: in 30 days, the product recorded more than one million requests from identified AI bots. The pages that kept surfacing were not a random set of blog posts. They included /llms.txt, Markdown pages, MCP documentation, and product information.

That does not make llms.txt a ranking trick. A request in a log proves a bot fetched a file; it does not prove that file changed a ranking, a citation, or a training decision. But it does expose a blind spot in how most teams measure AI visibility. Browser analytics miss a large share of crawler activity because bots often request raw HTML and never execute a JavaScript tracking script.

The useful question is not “How do I optimize for every AI bot?” It is “Can a legitimate AI system find, understand, and accurately describe the public truth about this business?”

AI bots are not one thing

The phrase “AI crawler” hides three different jobs. Treating all of them as one group is how teams accidentally block useful search visibility or make private pages easier to discover.

The three jobs AI bots perform on a websiteA diagram with a website in the center. Search and indexing bots crawl public pages to make them eligible for AI search answers. Training crawlers collect public content for model development. User-triggered fetchers retrieve a page because someone asked an AI assistant a live question.AI bots are three different systemsThey should not share one blanket policy.Your public sitepages, docs, pricingSEARCH / INDEXINGOAI-SearchBotClaude-SearchBot, PerplexityBotMakes public pages discoverableTRAININGGPTBot, ClaudeBotCCBot and similar crawlersA separate business decisionUSER-TRIGGERED FETCHA live visit after a user asks a question

Search and indexing

Bots such as OAI-SearchBot, Claude-SearchBot, and PerplexityBot crawl public pages to improve AI search results. Blocking them can reduce answer visibility.

Training collection

Bots such as GPTBot, ClaudeBot, and CCBot may collect public material for training or public datasets. That is a separate policy choice.

Live user fetches

A user asks a question about your product, and an assistant fetches a relevant page. This is why pricing, privacy, and product pages need to stand on their own.

The crawl-readiness stack

Before adding another “AI visibility” plugin, fix the system the crawler encounters. The order matters.

Four parts of an AI crawl readiness systemA four-step sequence: set intentional robots.txt rules, publish a curated sitemap, make essential answers available in server-rendered HTML, and observe verified bot traffic in server or edge logs. The sequence leads to pages that can be found and understood.Crawl readiness is a system, not a fileFix this sequence before chasing an AI visibility score.1Intentional policyrobots.txt separates searchfrom training2Curated discoverysitemap contains onlypublic canonical pages3Readable answersimportant facts live ininitial HTML4Observed realityserver logs verify botrequests and outcomes
  1. Set a deliberate bot policy. Allow or block search bots and training bots separately. OpenAI, Anthropic, and Perplexity all document separate agents for search, training, and user-triggered retrieval.
  2. Curate the sitemap. Include public, canonical, indexable pages only. Login, checkout, internal search, dashboards, API-key pages, and URLs blocked by robots.txt do not belong there.
  3. Make the answer available in initial HTML. A product's core claim, platform support, pricing path, privacy policy, and limits should not require a modal, a JavaScript tab, or an authenticated app session to discover.
  4. Observe what really happens. Track requests at the CDN, edge, proxy, or server. Keep the requested URL, claimed user agent, source IP, status code, and a verification signal. A user-agent string by itself is easy to spoof.

Where llms.txt fits

An llms.txt file can be useful as a curated map of your best product, documentation, and policy pages. It is especially sensible for developer docs, API products, and complex sites where an agent benefits from being pointed to the canonical material.

But it is not access control, a substitute for a sitemap, or evidence that a site is “AI optimized.” Google's Search guidance is clear that new AI-specific text files are not required to appear in its generative search features. The more useful distinction is between search ranking and agent readiness.

A practical rule: publish llms.txt when you can keep it factual, curated, and current. If it will become a stale list of old URLs and product claims, a clean 404 is better.

What an SEO team should do this week

Audit the public boundary

Compare your sitemap against robots.txt, canonicals, and authentication. Every sitemap URL should be one you would be comfortable seeing in a search result or an AI answer.

Fix the five answer pages

Start with homepage, product, pricing, privacy, and a top comparison or use-case page. Write the plain answer before the marketing copy.

Turn on server-side observation

You cannot improve a crawler path you never see. Log verified bot requests separately from ordinary sessions and inspect the pages they repeatedly fetch.

Keep private means private

Robots.txt is voluntary crawler guidance. Authentication, authorization, and no public links are the controls that protect private dashboards and customer data.

The useful standard

A strong public website does not need to win every new AI-SEO checklist. It needs to be coherent. The important pages must be crawlable by the bots you choose to allow, readable without fragile front-end behavior, current enough to trust, and specific enough that an assistant does not need to guess.

That is not a new discipline. It is technical SEO, content design, and product truth meeting a new audience.

Sources and further reading

Frequently asked questions

Related PikaSEO resources