Track Synthetic Traffic & Trace AI Agents on eCommerce Websites
Paste one snippet before </body>. Detect autonomous AI assistants, get step-by-step session reports of what they read and submit, and audit the data exposures they find.
$9.99 a month or $59.94 a year. No contract. Cancel any time.
One-snippet deployment
Paste one line of HTML right before the closing body tag on every page. It loads asynchronously, after your page, so it does not hold up what real visitors see. Visits that do not look synthetic are never sent to SynthTrail.
Example
<script async src="https://synthtrail.com/api/public/t.js" data-site="YOUR_SITE_KEY"></script>
Your account page shows your own snippet with your personal key already filled in.
Why eCommerce sites need synthetic visitor tracking
Traditional analytics such as GA4 are built to count people. Three things they hide:
- 1
Conversion and cart numbers get distorted
Shopping agents browse products, open carts and submit forms, so conversion rate, bounce rate and abandoned-cart reports stop reflecting real shoppers.
- 2
Prices and catalogues are lifted silently
Assistants and aggregators copy your prices, stock and descriptions to compare you with rivals, usually with no notice.
- 3
Store back-ends can be exposed
Export files, backup archives, admin routes and customer email lists are easy to leave reachable on a shop site.
The three core pillars of SynthTrail
Spot synthetic visitors live
Tell people apart from AI agents and automated browsers by the name they give, automation markers, scripted clicks and typing, speed and missing human activity. Each flag comes with its reasons.
Read the session trail
Review a timeline such as 00:00 landed, 00:21 read pricing, 01:05 submitted a form, with pages, clicks, scrolling and time on site.
Audit what AI sees
Find exposed keys, open admin routes, public backups and readable email lists, with a fix for each and an exposure score from 0 to 100.
Privacy by design
- Human visitors are ignored: only sessions flagged as synthetic are sent and saved.
- No names, accounts or personal details of your visitors are collected, and typed form values are never recorded.
- The snippet sets no tracking cookies, so it adds nothing to a cookie banner.
- SynthTrail is owned and operated by Ramenbox Technologies Ltd. in Saint John, New Brunswick, Canada.
This is designed to fit privacy-first practices, including those of Canadian privacy law, but it is not legal advice. Check your own obligations.
Frequently asked questions
The snippet loads asynchronously, after your page, so it does not hold up what a visitor sees. It checks in the browser for signs of an AI agent: a name that identifies one, automation markers, scripted clicks and typing, speed no person has, and no real mouse, touch or keyboard activity. Visits that do not look synthetic are not sent to SynthTrail.
Each flagged visit is saved as a timestamped trail: the agent name when it gives one, where it landed, each page it opened, clicks, scrolling, forms it submitted (field names only, never typed values), time on site, a risk rating and the plain-language reasons it was flagged.
It looks for open admin routes, downloadable export and backup files, keys in page source, and pages that list customer email addresses. Each finding shows how serious it is and how to fix it, and findings feed an exposure score from 0 to 100. Checks run from visitors' browsers, at most once a day per browser.
Add ?synthtrail_test=1 to the end of any page address on your site, for example yoursite.com/?synthtrail_test=1. That visit is treated as an AI agent, runs a security check straight away and appears in your dashboard after about ten seconds, so you can see the whole flow on your own site.