FAQ
Latency, reliability, data handling, keys, and access and pricing.
How much latency does this add?
Barely any. DNA answers from 300+ locations worldwide, whichever is closest to your site.
- Verification and reporting run after your page is sent.
- You set a hard cutoff for each decision, 2 s by default. Your page never waits longer than that.
- A paid request gets up to 10 s, because the payment settles in that call.
Can DNA take my site down?
Not with the middleware. If a decision doesn't arrive within your cutoff, the request goes through and your site serves it as usual. See Availability for fail-closed and paying requests.
On the nameserver install, DNA also serves your DNS, so your domain and mail resolve through DNA. To keep your current DNS host, use the middleware.
Will you ever block traffic without me asking?
No. There is no default rule.
- Your account starts by only watching.
- A rule stops visits only after you write it under Access and switch it on. A new rule starts in testing.
- With no rule, nothing is blocked.
What data do you collect?
- Each request's path, user agent, signature, and who it was.
- A salted, truncated hash of the visitor's IP address, never the address itself.
- Your page's status code, content type, and size, so the dashboard can show your response times and errors.
- Page content never reaches us.
- On Cloudflare, DNA runs in your own account, and your pages go straight from Cloudflare to your site.
Why does this agent show Name only and not Verified?
Verified means proof: the agent signed the request, or it came from addresses its operator publishes. Name only means it looks like the agent it says it is, but nothing proved it. DNA only says Verified when it has proof, so Verified always means proven. See Who is asking.
Can't a bot just pretend to be Googlebot?
It can use the name. It can't fake the proof.
| Request | Label |
|---|---|
| Uses Googlebot's name, nothing behind it | Name only |
| Uses Googlebot's name from an address Google denies | Impersonator |
An Impersonator row means someone is posing as a known crawler at your site.
I need to revoke a key. How fast does it take effect?
- Revoke it in API keys.
- It stops being accepted everywhere within about two minutes.
The revoked key stays visible in the dashboard, so you can confirm nothing is still presenting it.
What about retention, compliance certifications, and a status page?
Ask us. We'll walk your security review through all three.
Can I charge agents for access?
Yes. A price rule puts a dollar price on one of your paths, and agents pay it per request, by card or in crypto.
- Early access, turned on per organization. An owner or admin clicks Ask D3 to turn them on on the Access page.
- A new price only records what it would have earned until you set its Status to On.
- By default only AI agents pay. People browsing your site never do, unless you choose Everyone, including people.
- Rules apply top to bottom. A Stop the visit rule above a price wins, so nobody pays past it.
Do you support ERC-8004?
Yes. A registered agent that signs its requests with its registered wallet shows as Verified.
My platform isn't Vercel or Cloudflare.
- Point your nameservers at DNA. Nothing is installed on your platform; enforcement runs in front of your site.
- On nginx, use the nginx install.
- Otherwise, tell us what you're running. The platform-specific part of the middleware is small.