NovaAct
NovaAct is an autonomous browser agent operated by Amazon. Instead of scraping content, it actually uses your site, clicking buttons, filling forms, completing checkouts, doing what a human user would do.
Traffic looks closer to a real user session than to a crawler. Pages are fully rendered, JavaScript runs, and interactions are sequential. The agent often runs on behalf of a paying customer who wants a specific outcome.
This is the leading edge of agentic commerce. The agents that buy your product, book your hotel room, or fill out your lead form on behalf of a human will live in this category.
See NovaAct on your own site
Match the User-Agent header on incoming requests against the pattern below.
regex
Verify by IP
For higher confidence, also verify the source IP against the operator's published ranges. UA strings can be spoofed; IP ownership is harder to fake.
Renders JavaScript
Yes
IP verification
Published IP ranges
Crawl frequency
Burst, user-driven
Honors robots.txt
Yes
Honors Crawl-delay
Varies
Amazon runs 38 bots in total. Each one is a separate user-agent so you can allow or block them independently.
Live-Fetch AI
11- Amzn-User
- Amazon Bedrock AgentCore Browser (AP Northeast)
- Amazon Bedrock AgentCore Browser (AP South)
- Amazon Bedrock AgentCore Browser (AP Southeast 1)
- Amazon Bedrock AgentCore Browser (AP Southeast)
- Amazon Bedrock AgentCore Browser (EU Central 1)
- Amazon Bedrock AgentCore Browser (EU West 1)
- Amazon Bedrock AgentCore Browser (US East 1)
- Amazon Bedrock AgentCore Browser (US East 2)
- Amazon Bedrock AgentCore Browser (US West 2)
- Amazon Buy For Me
Training Crawler
7Brand Intelligence
3Agentic Browser
3- AmazonBuyForMe
- NovaActYou are here
- Amazon-Bedrock-AgentCore
AI Search Index
2Generic Crawler
2DevOps & Monitoring
2Shopping Bot
2Search Engine
1Task Automation
1Ad Verification
1Ads Network Bot
1Link Unfurler
1AI Coding Tool
1Should I let NovaAct through?
In most cases, yes. Agentic commerce is growing fast. Blocking these agents means losing the customers they act on behalf of. If volume gets noisy, rate-limit it before you block it outright.
Does blocking NovaAct affect my Google rankings?
No. NovaAct acts on behalf of one specific user at a time, not on behalf of a search index. Classical SEO is unaffected. The trade is whether you want users delegating tasks to Amazon to be able to reach your site.
How do I confirm a request is really from NovaAct?
Two checks. The User-Agent header should match a known NovaAct string, and the request's source IP should fall inside Amazon's published ranges. The User-Agent alone is trivially spoofable, so the IP check is what gives you confidence. Amazon publishes the ranges so you can validate at the CDN or edge.
Can NovaAct take actions on my site, like buying or signing up?
In principle yes. Agentic browsers can fill forms, click buttons, and complete transactions. That is the entire point. If your site leans on automation detection to prevent bots from acting, NovaAct is a different threat model from a passive crawler and you should think about it separately.
How is NovaAct different from Amazon's other bots?
Amazon splits work across multiple user-agents so site owners can decide on each one independently. Training crawlers, live-fetch agents, search indexers, and agentic browsers each get their own name. Worth scanning the rest of the Amazon family above to see which ones actually matter for your site.
What's the cleanest way to control NovaAct?
Two layers. Robots.txt for the polite crawlers that read it, and rules at your CDN or edge for the ones that don't. Rankly's Agent Experience handles both from a single config, so you can allow, block, rate-limit, or serve a stripped-down version per bot. Agent Analytics handles the observation half so you know which bots are actually worth a rule.
Verify everything above against the operator's own documentation.