Get started
Tracking synthetic visitors, live

Every synthetic visitor leaves a trail. We follow it.

Paste one snippet on every page. SynthTrail spots synthetic traffic from AI agents and assistants, records the trail each one leaves as a session report, and checks what they could see that you can't.

Get started for $9.99 a monthSee the dashboard preview

No contract. Cancel any time.

GPTBot
Unknown agent
ClaudeBot
GPTBot Operator opened /pricing ClaudeBot read /docs/setup Unknown agent probed /admin Perplexity Assistant requested /api/export Agent submitted /contact form Browser agent read /config.js Trail S-48213 saved as a report

From one line of code to a saved synthetic trail

  1. Step 1

    Paste the snippet

    One line of HTML5 goes before the closing body tag on every page. No server changes.

  2. Step 2

    Synthetic visitors are spotted

    Timing, pointer movement, request patterns and known agent names tell synthetic visitors from people.

  3. Step 3

    Every trail becomes a report

    Every page, click and form a synthetic visitor touched is logged and saved as a readable trail.

Follow the trail, step by step

Every synthetic session leaves a trail: where it landed, what it read, which forms it sent and when it left. Saved, searchable, shareable.

GPTBot Operator

S-48213 · 3m 12s · 14 pages

high risk
  1. 00:00

    Landed on /

    Identified as an AI agent by browser fingerprint and request pattern.

  2. 00:21

    Read /pricing

    Scrolled the full page and copied the plan table.

  3. 01:05

    Opened /account

    Reached a page that lists customer email addresses.

  4. 02:10

    Submitted /contact

    Filled in and sent the contact form.

  5. 03:12

    Left the site

    Session closed after the second form submission.

See what your synthetic visitors can see that you can't

Synthetic visitors read everything your pages send, and the trail they leave shows where. SynthTrail checks the same view and flags it before someone else uses it.

Exposure score
62out of 100 at risk
0100
  • critical

    API key visible in a public script

    /config.js — Move the key to your server and rotate the exposed one today.

  • critical

    Admin route answers without a login

    /admin — Require sign-in on every admin path and return 403 for everyone else.

  • high

    Customer emails listed on a page agents can read

    /account — Show only the signed-in person's own details.

  • high

    Contact form accepts automated submissions

    /contact — Add rate limits and a challenge for non-human traffic.

  • medium

    Unlisted API route returns data

    /api/export — Protect it with authentication or remove it.

  • low

    Backup file reachable by guessing the name

    /backup.zip — Delete it from the public folder.

12.4k

Agent sessions logged

38

Agent types recognised

6

Security checks per scan

One snippet. Every page. Every trail.

It loads after your page, weighs almost nothing and never slows a visitor down. Your personal snippet is waiting in your dashboard as soon as you sign up, ready to catch the trail of every synthetic visitor.

before </body>
<script async src="https://cdn.synthtrail.io/t.js" data-site="st_live_8f21c4a9"></script>

One plan, everything included

One simple price

$9.99 / month

  • Your own tracking snippet
  • Unlimited agent sessions
  • A saved report for every session
  • Overview of all your data
  • Security checks on what agents see
  • Cancel any time
Get started for $9.99 a month

Questions

It combines known agent names, request patterns, scripted pointer and typing behaviour, and timing that people don't produce. Together they mark a visitor as synthetic.

Synthetic visitors are already reading your site. They are leaving a trail.

Follow every trail from today for $9.99 a month.

Create your account

Takes about two minutes to install.