Sozo Agent

1. What Sozo Agent is

Sozo Agent is the browser that runs Sozo procedures. It visits websites on behalf of Sozo's customers and carries out the steps of a procedure, such as searching a people-search site for a customer's records and submitting the site's opt-out request. It acts only when a customer starts a task. It does not crawl, index sites, or collect content to train AI models.

2. How it identifies itself

Sozo Agent signs its HTTP requests with Web Bot Auth (HTTP Message Signatures, RFC 9421). Each signed request carries these headers:

• Signature-Agent: "https://trysozo.ai"
• Signature-Input: the signed components and parameters, with tag="web-bot-auth"
• Signature: the Ed25519 signature

Our public keys are in the key directory at https://trysozo.ai/.well-known/http-message-signatures-directory. A request that claims to be Sozo Agent but does not carry a valid signature from a key in that directory does not come from us.

3. Operator and access type

Sozo operates Sozo Agent. It is an intermediary agent: Sozo runs the software, and each task is started by one of Sozo's customers.

4. Controlling access

If your site uses Cloudflare, you can allow or block Sozo Agent with your bot settings. Otherwise, you can match the Signature-Agent header above. To report a problem or ask us to stop visiting your site, please reach out through our website.