Track Synthetic Traffic & Trace AI Agents on United States Websites
Paste one snippet before </body>. Detect autonomous AI assistants, get step-by-step session reports of what they read and submit, and audit the data exposures they find.
$9.99 a month or $59.94 a year. No contract. Cancel any time.
One-snippet deployment
Paste one line of HTML right before the closing body tag on every page. It loads asynchronously, after your page, so it does not hold up what real visitors see. Visits that do not look synthetic are never sent to SynthTrail.
Example
<script async src="https://synthtrail.com/api/public/t.js" data-site="YOUR_SITE_KEY"></script>
Your account page shows your own snippet with your personal key already filled in.
A Canadian company, global by design
SynthTrail is built and run by Ramenbox Technologies Ltd. in Saint John, New Brunswick, and works for any website anywhere, including yours in the United States. We bring Canadian values to it: privacy first, plain pricing in US dollars, no contracts, and respect for the people who visit your site. Visitors who are not synthetic are never recorded.
The product is designed around data-minimising practice, which is also the spirit of US state privacy laws such as California's. It is not legal advice, so check your own obligations.
Why websites in United States need synthetic visitor tracking
Traditional analytics such as GA4 are built to count people. Three things they hide:
- 1
AI agents skew your local numbers
Visits, enquiries and sign-ups from AI agents sit in your reports beside real customers in the United States, so you cannot trust conversion and bounce figures.
- 2
Your content travels further than you know
AI vendors read your pricing, services and local details and repeat them to people searching in the United States, usually with no notice to you.
- 3
Leftovers are public
Backups, admin routes and keys in page source are the same risk on a site in the United States as anywhere, and agents find them first.
The three core pillars of SynthTrail
Spot synthetic visitors live
Tell people apart from AI agents and automated browsers by the name they give, automation markers, scripted clicks and typing, speed and missing human activity. Each flag comes with its reasons.
Read the session trail
Review a timeline such as 00:00 landed, 00:21 read pricing, 01:05 submitted a form, with pages, clicks, scrolling and time on site.
Audit what AI sees
Find exposed keys, open admin routes, public backups and readable email lists, with a fix for each and an exposure score from 0 to 100.
Privacy by design
- Human visitors are ignored: only sessions flagged as synthetic are sent and saved.
- No names, accounts or personal details of your visitors are collected, and typed form values are never recorded.
- The snippet sets no tracking cookies, so it adds nothing to a cookie banner.
- SynthTrail is owned and operated by Ramenbox Technologies Ltd. in Saint John, New Brunswick, Canada.
This is designed to fit privacy-first practices, including those of Canadian privacy law, but it is not legal advice. Check your own obligations.
Frequently asked questions
The snippet loads asynchronously, after your page, so it does not hold up what a visitor sees. It checks in the browser for signs of an AI agent: a name that identifies one, automation markers, scripted clicks and typing, speed no person has, and no real mouse, touch or keyboard activity. Visits that do not look synthetic are not sent to SynthTrail.
Each flagged visit is saved as a timestamped trail: the agent name when it gives one, where it landed, each page it opened, clicks, scrolling, forms it submitted (field names only, never typed values), time on site, a risk rating and the plain-language reasons it was flagged.
It looks for exposed API keys in page source, unprotected admin routes, public backup and environment files, and pages that list customer email addresses. Each finding shows how serious it is and how to fix it, and findings feed an exposure score from 0 to 100. Checks run from visitors' browsers, at most once a day per browser.
Add ?synthtrail_test=1 to the end of any page address on your site, for example yoursite.com/?synthtrail_test=1. That visit is treated as an AI agent, runs a security check straight away and appears in your dashboard after about ten seconds, so you can see the whole flow on your own site.