Safe Reported AI & LLM Bots

Devin (Cognition)

Operated by Cognition AI

Quick Facts

User-Agent:
Devin
Category:
AI & LLM Bots
Operator:
Cognition AI
Safety:
Safe
Blocking Impact:
Low - No SEO ranking impact
SEO Impact Score:
2/10
Official docs:
None published by Cognition AI

Reported, not operator documented

Cognition AI has not published a crawler page that names Devin. It is listed here because a credible public source does: ai.robots.txt. Reported Devin agent browser fetches. No vendor UA published.

What that means for you: the robots.txt rule on this page is the best available spelling, and a well-behaved crawler using this string will honour it, but there is no vendor statement of purpose, crawl rate or robots.txt compliance to rely on. Treat a matching request in your logs as a detection clue, not proof of who sent it, and combine the rule with a firewall rule if the traffic matters to you. If the operator publishes documentation, this profile moves to Official docs.

What is Devin (Cognition)?

Devin (Cognition) is an on-demand AI fetcher operated by Cognition AI. It retrieves a page only when a user explicitly asks an AI assistant or agent to read, summarize, or act on a specific URL. Because it is triggered by real user intent rather than bulk crawling, blocking it mainly prevents users from pulling your content into Cognition AI's assistant.

Devin (Cognition) is an on-demand AI fetcher operated by Cognition AI. It retrieves a page only when a user explicitly asks an AI assistant or agent to read, summarize, or act on a specific URL. Because it is triggered by real user intent rather than bulk crawling, blocking it mainly prevents users from pulling your content into Cognition AI's assistant.
Devin (Cognition) uses the user-agent token Devin. You can control it via robots.txt, meta tags (noai), or the emerging llms.txt standard. Robots.txt is voluntary; for hard enforcement, combine it with server-level IP blocking.

What happens if you block Devin (Cognition)?

✅ No SEO Impact - Blocking Devin (Cognition) does not affect your rankings in Google, Bing, or any other search engine. Devin (Cognition) is an AI crawler, not a traditional search indexer. You can freely block it via User-agent / Disallow: / without any SEO penalty.
Generally safe to allow; provides legitimate crawling value.

Want to see whether Devin (Cognition) actually visits you? Read how do I monitor AI bot traffic to my website?

How to block Devin (Cognition) with robots.txt

<code>User-agent: Devin</code> - Matching is case-insensitive. Robots.txt is fetched from the root of each subdomain separately.

Block completely (robots.txt)
User-agent: Devin Disallow: /
Allow all (robots.txt)
User-agent: Devin Allow: /
Block private only (robots.txt)
User-agent: Devin Disallow: /private/ Disallow: /api/ Disallow: /admin/ Allow: /
Nginx server block
# Nginx: Hard-block Devin (Cognition) if ($http_user_agent ~* "Devin") { return 403 "Bot blocked"; }
Apache .htaccess
# Apache: Hard-block Devin (Cognition) SetEnvIfNoCase User-Agent "Devin" bad_bot Order Allow,Deny Allow from all Deny from env=bad_bot
Meta robots tag
<meta name="robots" content="noindex, nofollow">
X-Robots-Tag header
X-Robots-Tag: noindex, nofollow

Is Devin (Cognition) safe to allow?

Devin (Cognition) is rated Safe in this directory, meaning there are no credible public reports of abusive crawling under this name. It is a Reported token: Cognition AI has not published documentation for it, so its purpose, crawl rate and robots.txt behaviour are not confirmed by the operator, and anyone can send the same user-agent string. Allow or block it on its stated purpose, and back the robots.txt rule with a firewall rule if the traffic matters to you.
Cognition AI publishes no IP ranges or reverse-DNS pattern for Devin (Cognition), so the user-agent string cannot be verified. Rate-limit unusual volume instead of trusting the name.

What does Devin (Cognition) do?

Understanding Devin (Cognition)'s purpose helps you decide whether to allow or block it.

  • Fetches a page only when a user asks an AI assistant to read it
  • Summarizes or extracts the URL the user provided
  • Triggered by real user intent, not bulk crawling
  • Low traffic volume compared with training crawlers
  • Blocking it prevents users from pulling your content into the assistant

Frequently Asked Questions

What user-agent string does Devin (Cognition) use?
Devin (Cognition) is reported to identify itself with Devin. That spelling comes from ai.robots.txt, not from Cognition AI, which has not published crawler documentation naming it. Use it in robots.txt as the best available match, and treat a request carrying it as a clue rather than proof of who sent it.
Is Devin (Cognition) safe?
Devin (Cognition) is rated Safe in this directory, meaning there are no credible public reports of abusive crawling under this name. It is a Reported token: Cognition AI has not published documentation for it, so its purpose, crawl rate and robots.txt behaviour are not confirmed by the operator, and anyone can send the same user-agent string. Allow or block it on its stated purpose, and back the robots.txt rule with a firewall rule if the traffic matters to you.
Will blocking Devin (Cognition) hurt my SEO?
✅ No SEO Impact - Blocking Devin (Cognition) does not affect your rankings in Google, Bing, or any other search engine. Devin (Cognition) is an AI crawler, not a traditional search indexer. You can freely block it via User-agent / Disallow: / without any SEO penalty.
How do I block Devin (Cognition) in robots.txt?
Add the following lines to your /robots.txt file:
User-agent: Devin
Disallow: /

This instructs Devin (Cognition) not to crawl any path on your site. To block only specific sections, replace / with the path (e.g., Disallow: /blog/).
Does Devin (Cognition) respect robots.txt?
Not documented. Cognition AI has published no statement that Devin (Cognition) reads robots.txt. A rule for Devin will stop a client that chooses to honour it; for enforcement, add a firewall or CDN rule as well.
How do I verify if Devin (Cognition) is crawling my site?
Search your access logs for Devin (for example grep -i "Devin" /var/log/nginx/access.log). Because the operator publishes no IP ranges or reverse-DNS pattern, a match shows that something used the name, not that Cognition AI sent it.