Published on 2025-08-07T06:18:08Z

NovaAct bot

NovaAct is an advanced, AI-driven browser automation agent developed by Amazon. It is not a traditional web crawler but an autonomous agent capable of performing complex, multi-step tasks on websites, such as filling out forms, making reservations, or completing e-commerce transactions. Its presence on your site indicates it is performing these operations on behalf of an authorized user or service.

What is NovaAct?

NovaAct is an AI-driven browser automation agent from Amazon. It combines natural language processing with precise web interaction capabilities to perform complex, multi-step tasks that would typically require a human. It identifies itself in server logs with the user-agent string NovaAct. Built on a modified Chromium engine, NovaAct can break down high-level tasks into sequential actions, maintain session states across domains, and implement error recovery. Its behavior is distinct from human users, with more efficient resource requests and consistent timing.

Why is NovaAct on my site?

NovaAct is visiting your website to execute an automated task that would normally require human interaction, such as filling out a form or completing a transaction. Its presence indicates it is performing these operations on behalf of an authorized user or service. The frequency of its visits depends entirely on the specific tasks it has been assigned and is triggered by user requests or scheduled workflows, not by an indiscriminate crawl of the web. Its activities are generally considered authorized as it operates with user consent.

What is the purpose of NovaAct?

The purpose of NovaAct is to serve as a sophisticated automation platform that can efficiently complete complex web-based tasks, saving time and reducing errors for both users and businesses. It supports services like data retrieval, appointment scheduling, and transaction processing. The information it collects is used specifically to complete the user-requested task. For website owners, NovaAct can provide value by increasing engagement with your services and reducing friction in user workflows, but it may also raise concerns about server load and security.

How do I block NovaAct?

To prevent NovaAct from performing automated tasks on your website, you can add a disallow rule for it in your robots.txt file. This is the standard method for managing access for automated agents.

Add the following lines to your robots.txt file to block NovaAct:

User-agent: NovaAct
Disallow: /

How to verify the authenticity of the user-agent operated by Amazon?

Reverse IP lookup technique

To verify user-agent authenticity, you can use host linux command two times with the IP address of the requester.
  1. > host IPAddressOfRequest
    This command returns the reverse lookup hostname (e.g., 4.4.8.8.in-addr.arpa.).
  2. > host ReverseDNSFromTheOutputOfFirstRequest
If the output matches the original IP address and the domain is associated with a trusted operator (e.g., Amazon), the user-agent can be considered legitimate.

IP list lookup technique

Some operators provide a public list of IP addresses used by their crawlers. This list can be cross-referenced to verify a user-agent's authenticity. However, both operators and website owners may find it challenging to maintain an up-to-date list, so use this method with caution and in conjunction with other verification techniques.