What is ProjectShield-UrlCheck?
ProjectShield-UrlCheck is a security scanner that monitors websites protected by Google's Project Shield service, checking for malicious traffic and DDoS attacks to ensure continuous protection. You can set up Agent Analytics to see when ProjectShield-UrlCheck visits your website.
Overview
| Operated By | |
| Source | Official Website |
| Expected To Follow Robots.txt | Yes |
| Insights Last Updated | September 14, 2026 |
Do you operate this agent? Contact us to suggest an update.
Category
Expected Behavior
ProjectShield-UrlCheck's cadence depends on how the scan is configured. Continuous monitoring may run daily or hourly, while a one-time or internet-wide scan may sweep once and disappear.
ProjectShield-UrlCheck's User Agent
| User Agent | Mozilla/5.0 (compatible; ProjectShield-UrlCheck; +http://g.co/projectshield) |
How To Block ProjectShield-UrlCheck With Robots.txt
Add this rule to your robots.txt file to block ProjectShield-UrlCheck from accessing your website, or use Automatic Robots.txt to block all security scanners at once. You can customize which pages are blocked by swapping out / for a different path.
User-agent: ProjectShield-UrlCheck # https://knownagents.com/agents/projectshield-urlcheck
Disallow: /Insights for ProjectShield-UrlCheck
As of September 14, 2026, this data reflects agent visits measured across thousands of websites using Agent Analytics, combined with daily scans of the top 1000 websites and their robots.txt files.
Robots.txt Blocked Percentage
Country of Origin
Robots.txt Blocking Trend
6% of top websites block ProjectShield-UrlCheck in their robots.txts.
Overall Security Scanner Traffic
0.0% of all web traffic came from security scanners.
Frequently Asked Questions
Should I Block ProjectShield-UrlCheck?
Usually not, unless you already run your own security scans and want cleaner logs. ProjectShield-UrlCheck checks for exposed vulnerabilities, and some services report their findings to site owners at no cost. For context, 6% of the top websites we track currently have robots.txt rules for ProjectShield-UrlCheck.
Does ProjectShield-UrlCheck Follow Robots.txt Rules?
Yes. ProjectShield-UrlCheck is expected to follow robots.txt rules, so a disallow rule is the appropriate first step. Automatic Robots.txt can add and maintain that rule, while Agent Analytics lets you verify whether ProjectShield-UrlCheck respects it.
Does ProjectShield-UrlCheck Access Private Content?
It deliberately looks for exposed private content. ProjectShield-UrlCheck tests login pages, admin panels, and API endpoints for vulnerabilities. Probing does not mean it gained access, but you should expect requests to sensitive paths in your logs.
How Can I Tell if ProjectShield-UrlCheck Is Visiting My Website?
Agent Analytics tracks ProjectShield-UrlCheck visits in real time. You can also check your server logs for requests whose user-agent string contains "ProjectShield-UrlCheck". Look for bursts of requests to uncommon paths that ordinary visitors rarely access. Because ProjectShield-UrlCheck does not publish a verification method, any client can claim its identity and a log match is only a clue.
Why Is ProjectShield-UrlCheck Visiting My Website?
ProjectShield-UrlCheck is scanning your site for vulnerabilities, either as part of an internet-wide sweep or because someone requested an assessment of your domain. Recurring visits often indicate that a monitoring service has added your site to its checks.