Google Documents Google-CloudVertexBot: Audit Logs and robots.txt
Google now documents Google-CloudVertexBot as a distinct common crawler used for site-owner-requested crawling when building Vertex AI Agents. The documentation update matters mainly to WordPress owners, developers, and hosting teams reviewing server logs.
Requests associated with this crawler can now be identified separately from ordinary Google Search crawling. Its appearance is not evidence of a Search ranking change, a Search Console problem, or a new Search visibility requirement.
Need help checking this on your WordPress, Google Ads, Analytics, local SEO, or website setup? Splinternet Marketing can review the issue and help you prioritize the next fix.
How Google-CloudVertexBot differs from other Google identifiers
The documented HTTP user-agent substring is:
Google-CloudVertexBot
The same identifier can be used as the robots.txt token:
User-agent: Google-CloudVertexBot
This makes it different from Googlebot, whose crawling behavior is associated with Google Search. A robots.txt rule aimed specifically at Google-CloudVertexBot is not the same as a rule aimed at Googlebot.
It is also different from Google-Extended. Google-Extended is a robots.txt control token and does not identify a separate HTTP user-agent string. It is used to manage how content Google crawls may be used for certain Gemini and Vertex AI purposes. Google-CloudVertexBot, by contrast, identifies a crawler request associated with owner-requested Vertex AI Agent crawling.
Google warns that HTTP user-agent strings can be spoofed. Treat the string as an initial classification, not proof of identity. Do not automatically trust every request that claims to be Google-CloudVertexBot or assume that an IP address alone establishes that a request is Google Search crawling.
What to do next
- Search your logs. Review web server, CDN, Cloudflare, WAF, and hosting logs for
Google-CloudVertexBot. Record request volume, requested paths, response codes, user-agent values, source IPs, and timestamps. Pay particular attention to expensive WordPress endpoints, internal search pages, product filters, login paths, and uncached resources. - Verify suspicious requests. Follow Google’s documented verification process: perform reverse DNS on the source IP, confirm that the hostname is in an appropriate Google domain, and then perform forward DNS to verify that the hostname resolves back to the same IP. Published Google IP-range information can provide an additional check.
- Review infrastructure controls before editing robots.txt. Cloudflare rules, hosting firewalls, rate limits, bot-management settings, security plugins, and origin-server policies may block or challenge requests independently of robots.txt. A WordPress robots.txt change will not override those controls.
- Choose the narrowest control. If an organization does not want to permit owner-requested Vertex AI Agent crawling, Google documents a crawler-specific group such as:
User-agent: Google-CloudVertexBot
Disallow: /
This is an optional control, not a default recommendation. Do not use User-agent: * when the goal is only to control Google-CloudVertexBot, because a broad rule can affect other crawlers. Keep Googlebot rules separate and test the publicly served robots.txt file after deployment.
Remember that robots.txt manages crawling; it is not access control or a confidentiality mechanism. Do not use it to protect private customer data, administration areas, credentials, or unpublished business information. Google also notes that robots.txt behavior may be cached, so a rule change may not take effect immediately.
For most small businesses, the right first action is identification and verification—not blocking. Add the identifier to log monitoring, confirm whether the traffic is expected, and base any control decision on server load, content sensitivity, and the organization’s use of Vertex AI Agents. The crawler’s appearance alone does not indicate a Google Search visibility problem.
Sources
Need help checking this on your WordPress, Google Ads, Analytics, local SEO, or website setup? Splinternet Marketing can review the issue and help you prioritize the next fix.
This article is for informational purposes only and reflects general marketing, technology, website, and small-business guidance. Platform features, policies, search behavior, pricing, and security conditions can change. Verify current requirements with the relevant platform, provider, or professional advisor before acting. Nothing in this article should be treated as legal, tax, financial, cybersecurity, or other professional advice.
Editorial note: Splinternet Marketing articles are researched from cited platform, documentation, regulatory, and industry sources. AI may assist with drafting and review; final content is checked for source support, practical usefulness, and platform/date accuracy before publication.