A crawler can miss a page even when its URL is correct and its content appears in a browser. The cause may be an access rule, a security control, an authentication failure, JavaScript-dependent content, a response-size cutoff, or a limitation in the crawler itself. Diagnose these layers separately: a robots.txt allowance, for example, does not guarantee that a WAF will let a request through, and JavaScript rendering does not mean a crawler can click through a site.
1. Access rules: robots.txt
A robots.txt file tells crawlers which URLs a site asks them to access or avoid. Google says its crawlers honor these rules, but other crawlers may not. It is an instruction for compliant crawlers, not a universal access-control mechanism or proof that a disallowed URL is inaccessible.
As an Amazon Associate I earn from qualifying purchases.
Check the rule group that applies to the crawler’s identity and the specific path it requested. Keep this check distinct from authorization: robots.txt does not grant access to protected content, and it does not override a separate network security policy. Google’s robots.txt guide explains how the file works.
2. Network defenses: WAFs, challenges, and rate limits
A web application firewall (WAF) or content delivery network (CDN) can independently monitor, throttle, challenge, or block a request. AWS WAF Bot Control documents controls for automated traffic, including crawlers, scrapers, and search engines. Cloudflare documents challenge pages that can be triggered by WAF, rate-limiting, or IP-access rules. A permissive robots.txt file does not guarantee passage through these controls.
#1 Best Overall
- Wire-o bound with high visibility yellow cover
- Wire-o 4 ⅞ x 7 ¼
- Ruled light blue with red vertical lines
- Six vertical columns left page and 8x4 to the inch right page
- Inside quality white ledger paper is special formulated for maximum archival service with material that is 50 percent cotton and water resistant
Compare the crawler’s actual response with the CDN/WAF and origin logs for the same request and time. Look for a block, challenge page, CAPTCHA, rate limit, IP or geographic rule, or throttling event. Do not diagnose the cause from a user-agent string or from what a browser displays: a browser session and a crawler request may encounter different rules.
- AWS WAF Bot Control describes automated-traffic controls.
- Cloudflare’s explanation of how challenges work describes challenge behavior and possible triggering rules.
- OpenAI’s crawler guidance recommends checking firewall/CDN logs, bot mitigation, throttling, challenges, authentication, and geographic rules when diagnosing crawler access.
3. Authentication and HTTP failures
The response may be a login page, redirect, error, or rate-limit message rather than the requested content. Check the HTTP status, the full redirect chain, and whether the URL requires credentials, cookies, or a live session. A crawler may lack a session that a browser has already established, or a session may expire before the request completes.
AWS Bedrock’s crawler documentation lists HTTP 401 and 403 responses, login redirect loops, and session timeouts as authentication-related failure examples; it identifies HTTP 429 rate limiting as a possible sync failure. These are examples for that service, not a guarantee that every crawler handles those responses in the same way. OpenAI’s crawler guidance also calls out authentication and 429 responses as items to inspect.
Recommended Free Tools
Rank #2
- Bright yellow extra stiff casebound covers
- Standard size 4 ⅝ x 7 ¼
- Ruled light blue with red vertical lines
- Six vertical columns left page and 8x4 to the inch right page
- Outside cover is waterproof and inside quality white ledger paper is special formulated for maximum archival service with material that is 50 percent cotton and water resistant
4. JavaScript rendering—and the separate problem of interaction
Some pages return an initial HTML document with little visible content, then populate it with JavaScript. Compare the raw response HTML with the rendered page to see whether essential text, data, or links appear only after scripts run.
Rendering is not the same as interacting with the page. AWS Bedrock says its web crawler renders JavaScript but does not simulate user interactions, so it may not discover links that require a click or other interaction. If important content depends on clicking, submitting a form, or navigating an interface, determine whether your crawler can perform that action; a rendered screenshot or DOM alone does not establish that it can.
AWS Bedrock’s web crawler documentation describes its rendering behavior and interaction limitation.
5. Response size and page weight
Large initial documents can put useful content beyond a crawler’s processing limit. Google Search Central’s article published March 31, 2026, says Google’s initial HTML handling has a 2 MB document cap. It also gives a 15 MB default for other crawlers that specify no limit. These are Google-published figures and must not be treated as universal limits for all crawler products.
The Tool Desk
Outbyte PC Repair FREERepair Windows errors before they cause bigger problemsFix Now →Outbyte Driver Updater FREEScan for outdated or missing drivers - takes under a minuteDriver Scan →Google says the portion it downloads within its initial-document limit is passed to indexing systems and the Web Rendering Service as if it were the complete file. Large inline base64 images, CSS, or JavaScript can therefore push text or structured data beyond that cutoff. External scripts and stylesheets are fetched separately under their own limits.
When size is a suspect, check the response body and where the important content appears in it. The relevant question is not just whether the page is large, but whether the crawler’s own limit leaves the content you need outside the portion it processes. Google Search Central’s explanation of crawling and bytes gives the Google-specific details.
Independent reader supportYour contribution helps us test, update, and keep practical guides available for everyone.6. Crawler capability and configuration
A crawler can reach a page yet fail to collect the desired data because it lacks the required configuration or capability. Confirm whether it supports the page’s needs: robots.txt handling, crawl-depth limits, cookies, authentication, JavaScript rendering, interaction, and the extraction or export format you require.
Scrapy is an open-source framework for web crawling and extraction. Its official overview lists support for robots.txt, crawl-depth restrictions, cookies, authentication, and feed exports. The project also points to ecosystem extensions for browser rendering and monitoring. Extensions can address particular implementation needs, but using a framework does not authorize access to restricted content or guarantee that every server will return the same result to every client.
Consult Scrapy’s project overview and the Scrapy 2.19.0 documentation overview to match its features to the job.
Best Value
- 4-1/2 x 7-1/4" Page size
- Ruled light blue with red vertical lines
- Number of pages: 160 pages (80 sheets)
- 16 pages of curve tables and other practical information at the end of the book
Diagnose the failure in layers
Capture one reproducible request before changing settings: record the exact URL, time, crawler identity or user agent, status, and response. Then work through the relevant layers in order. This sequence is a practical approach based on the documentation cited above, not a guarantee that every site has the same failure path.
- Confirm the request. Record the exact URL, time, user agent, response status, and response body seen by the crawler.
- Check robots.txt. Apply the rule group for that crawler identity to the requested path; treat this as an access-policy check, not a security test.
- Inspect security logs. Check CDN/WAF and origin logs for a block, challenge, IP or geographic rule, or rate limit at the time of the request.
- Trace HTTP and session behavior. Review status codes, redirect chains, credentials, cookies, and session expiry.
- Compare static and rendered results. Inspect the initial HTML and the rendered page, then determine whether essential content or links require an interaction.
- Check document size and content position. Establish what the crawler actually processes, and apply Google’s published limits only when diagnosing Google’s crawler behavior.
- Verify crawler settings. Confirm the crawler supports the rendering, interaction, authentication, and extraction steps the page requires.
One symptom can have several explanations. For example, a denial could come from authentication or a security rule, and a rendered page may still omit links that require interaction. Use the response and server-side logs to distinguish causes rather than relying on appearance alone.
Quick Recap
Product prices and availability are accurate as of the date/time indicated and are subject to change. Any price and availability information displayed on Amazon at the time of purchase will apply.
Free tools Windows power users keep installed
One-click scans. No signup required.




