---
schema_version: "newruntime-reader-dossiers-v1"
type: "reader_dossier"
slug: "cyberconvoyscout"
kind: "scanner"
operator: "CyberConvoy"
researched_at: "2026-10-23"
confidence: "low"
json_url: "https://newruntime.com/readers/cyberconvoyscout.json"
canonical_url: "https://newruntime.com/readers/cyberconvoyscout/"
---

# CyberConvoyScout

> Internet-wide scanner (single SYN probes and light banner grabs on a few ports) collecting banners, HTTP headers and TLS certificates for threat intelligence, per a third-party catalog.

## Dossier

- Kind: Scanners & probes
- Operator: CyberConvoy (https://cyberconvoy.com/)
- Documentation: none found
- robots.txt tokens: none documented
- Feeds: security scan
- Respects robots.txt: Not documented. Third-party catalog mentions a self-service opt-out form and RFC 9511 probing.txt; not verified on operator site.
- Verification: Unknown
- Labels matched in our logs: cyberconvoyscout

## Why it matters to New Runtime (our interpretation)

Infrastructure scanning, not readership; exclude from audience counts.

## Observed behaviour

- Baseline 2026-10-24 (94-day window): 75 requests on 55 days; first seen 2026-07-23, last seen 2026-10-22; Regular.
- Live numbers: https://newruntime.com/bot-traffic-history.json and https://newruntime.com/crawler-journeys.json

## Sources

- https://docs.centinelanalytica.com/crawlers/cyberconvoy-scout

Identity: A family name is what a client claims in its user agent. It is verified only when its request came from the operator's published IP ranges or passed forward-confirmed reverse DNS, as reported per family in /crawler-journeys.json. Anyone can claim any name.

All dossiers: https://newruntime.com/readers.md