Google-CloudVertexBot
Crawls sites for owners building Vertex AI agents.
When you see it: Someone is building a Vertex AI agent over your content.
How we check it is really Google
- 01
The user agent has to contain Google-CloudVertexBot.
- 02
The address is compared against Google's published ranges, which we refetch every six hours.
- 03
If the ranges do not settle it, the address's reverse DNS record is resolved and then resolved forward again, so a faked record cannot pass.
A visit that matches neither is recorded as unverified, not as a forgery. A range list can be incomplete, and an accusation needs evidence.
What each result means
- verified
- The address matched Google's own published records. This really was them.
- unverified
- We could not confirm it, and that is all it means. The operator may publish nothing to check against, a published list may be behind the addresses actually in use, or DNS may simply have been slow. It is not an accusation.
- spoofed
- The address belongs to somebody else — its own reverse DNS record resolves to a different owner. That is positive evidence of a forgery rather than a failure to find evidence, which is why it is reported as its own result and never folded into the row above.
The distinction costs nothing to make and is the reason these numbers can be shown to someone who will ask where they came from. A report that cannot separate “we do not know” from “this was faked” invites exactly one question it cannot answer.
The lists this is checked against
Published by Google and refetched every six hours. Open them; they are the same files we read.
- https://developers.google.com/static/crawling/ipranges/common-crawlers.json
- https://developers.google.com/static/crawling/ipranges/special-crawlers.json
- https://developers.google.com/static/crawling/ipranges/user-triggered-fetchers.json
- https://developers.google.com/static/crawling/ipranges/user-triggered-fetchers-google.json
- https://developers.google.com/static/crawling/ipranges/user-triggered-agents.json
- Operator
- Token
- Google-CloudVertexBot
- Counted as
- AI training
- Verification
- IP ranges + reverse DNS
- Runs JavaScript
- No
- Operator docs
- Published
User agent
Google-CloudVertexBotMatched as a token, not as a full browser string. Google adds and changes the version and product text around it without notice, so a filter pinned to the whole header stops working the first time they bump a version while one matching Google-CloudVertexBot keeps working. The same string is what Google names in robots.txt.
Google's other crawlers
Google sends 7 crawlers, each with its own token and its own job. They are counted separately for that reason — the tokens differ by a few characters and what the fetch means does not, so folding them into one operator row would let indexing look like AI interest.
| Token | Counted as | Verification | What it fetches for |
|---|---|---|---|
Google-CloudVertexBotthis page | Training | IP ranges + reverse DNS | Crawls sites for owners building Vertex AI agents. |
| Google-NotebookLM | AI answers | IP ranges + reverse DNS | Fetches a page a person added to a NotebookLM notebook. |
| Google-Agent | AI answers | IP ranges + reverse DNS | A Google agent fetching on a person's behalf. |
| Gemini-Deep-Research | AI answers | IP ranges + reverse DNS | Gemini's deep research mode gathering sources. |
| Google-Read-Aloud | AI answers | IP ranges + reverse DNS | Fetches a page so it can be read out loud. |
| Googlebot | Indexing | IP ranges + reverse DNS | Google's search crawler, and the input to AI Overviews. |
| GoogleOther | Training | IP ranges + reverse DNS | Google product teams fetching public content, including research. |
Your analytics never mentioned Google-CloudVertexBot because it cannot see it.
This crawler takes your HTML and leaves without running a line of JavaScript, so a browser tag records nothing. TrueStat reads it server-side, checks the address, and shows you which pages it fetched — including the ones that returned a 404.