Skip to main content

Boteraser | Website and Server Security Solutions

sitesucker

Bot User-Agent: sitesucker

🤖 Overview

SiteSucker is a macOS application developed by Rick Cranisky (formerly Richard Cranisky) that downloads entire websites for offline browsing. Originally released in 2001, it is designed for personal use, allowing users to archive web pages, images, and linked files to their local disk. Unlike search engine bots or AI crawlers, SiteSucker is not operated by a corporation; it is a standalone desktop tool intended for legitimate archival and research purposes. Its official website is sitesucker.us, and it is distributed through the Mac App Store and the developer’s site.

🌐 Technical Behavior

SiteSucker works by recursively following HTML links within a specified domain, downloading resources such as CSS, JavaScript, images, and videos. The user can configure the maximum depth of recursion, the number of concurrent connections (default is 10), and whether to download linked files from external domains. It uses standard HTTP/HTTPS requests with a configurable User-Agent string—the default is “SiteSucker/5.0” (where 5.0 reflects the application version). The bot respects robots.txt if the user enables the option in Preferences; this is documented in the official user guide. IP addresses are those of the user’s machine, not a centralized pool, as it is a client-side agent. Request frequency depends entirely on the user’s concurrency and delay settings—by default it sends bursts of up to 10 requests simultaneously, which can appear aggressive to server logs.

📋 robots.txt Compliance

According to the official SiteSucker documentation (available on sitesucker.us), the application honors robots.txt when the “Obey robots.txt” checkbox is selected in the application’s preferences. This setting is disabled by default, meaning a typical installation will ignore robots.txt directives unless the user specifically enables compliance. Documentation states that if enabled, SiteSucker will parse the robots.txt file and avoid URLs listed under User-agent directives that match its User-Agent string or the wildcard (*). This behavior is verified by the developer’s release notes and the application’s help file.

🔍 Detection Indicators

The most reliable detection indicator is the User-Agent string, which takes the format “SiteSucker/5.0” (or “SiteSucker/5.0.3”, etc.). Some users may customize this, but the default is consistent. Additionally, the application sends a Referer header equal to the URL of the page being crawled, and the Accept header is typically “*/*”. Behavioral fingerprints include a pattern of rapid sequential requests for images, CSS, and scripts from the same domain within seconds, often with a fixed concurrency level. The X-Forwarded-For header, if present, will originate from the user’s own IP address rather than a cloud provider range.

📊 Data Usage

SiteSucker does not upload collected data to any central server; all downloaded content is stored locally on the user’s hard drive. The data is used exclusively for personal offline viewing, archiving, or research. No data is sold, shared, or used for AI training or indexing. The application itself has no telemetry or analytics features, as confirmed by the developer’s privacy policy. This makes SiteSucker fundamentally different from corporate crawlers that aggregate data for commercial purposes.

⚙️ Rate Limiting Policy

Because SiteSucker can generate a high volume of requests in a short time (especially with the default 10 concurrent threads), it is often rate-limited by web servers to prevent resource exhaustion. Administrators should apply threshold-based blocking that triggers when an IP issues more than 100 requests per minute with the “SiteSucker” User-Agent, while still allowing legitimate personal browsing. The rationale is to protect server availability without blocking the tool entirely, as it is a legitimate agent when used responsibly.

⚠️

Your Site May Be Hemorrhaging Revenue to Bots

Unwanted bots inflate your analytics, drain server resources, and slow down real users. Check if your site is affected — completely free.

Check My Site for Free

Free to start  ·  Cancel anytime

ⓘ Data Notice: The information presented above has been compiled from publicly available internet sources. Boteraser aggregates this data solely for informational purposes and does not independently classify, evaluate, or endorse any findings about the bots listed. The accuracy and completeness of this information is the sole responsibility of the original publishers. Boteraser and its operators accept no liability for any decisions made based on this data.

✓