Honeylog Review: Server-Log AI Bot Tracking, Priced as a Lifetime Deal

If you run a content site or an online shop, you’ve probably started wondering what ChatGPT, Perplexity and the rest are doing with your pages. Are they crawling you? Are they sending anyone back? Your regular analytics tool is built around human visitors running JavaScript, so it mostly can’t answer that. Honeylog is aimed at exactly this gap.

The approach is different from most analytics tools. Instead of a tracking script, Honeylog reads your server or CDN logs. According to the listing, that means no JavaScript tag, no SDK and no code changes, and most setups take under 30 minutes. It supports Nginx, Apache and Caddy logs, plus Cloudflare, Fastly, AWS CloudFront and Akamai. WordPress also appears in the integrations list.

That design has a catch we’ll come back to. If you’re on a locked-down host and can’t get at logs or a CDN, this gets harder.

What the dashboard is meant to show you

The core view tracks Googlebot, AI crawlers and other search bots by visits, unique URLs and growth over time. The listing names GPTBot, ClaudeBot, PerplexityBot, Google-Extended, Bytespider, CCBot, Meta-ExternalAgent, Applebot-Extended and Amazonbot, and says the list is updated as new crawlers appear. It also claims to separate AI citation bots from training bots and from ordinary search crawlers. That distinction is useful, because you may want to welcome one kind and block another.

You can mark each frequent bot as allowed, blocked or not managed. Honeylog then flags bypasses and behavior changes against that decision. It also shows robots.txt compliance, so you can see who ignores your rules.

The listing doesn’t say how that compliance check works. It reads like a summary view, not a detailed audit.

Spoofed bots and the sitemap view

Two features stand out as more concrete than the usual marketing language.

The first is spoofing detection. Honeylog compares the user agent a request claims against the IP ranges published by vendors such as OpenAI, Anthropic, Perplexity and Google. If something says it’s a known crawler but comes from outside those ranges, it gets flagged. That’s a sensible method. It only works for vendors who publish their ranges, though, and the listing doesn’t say which ones are covered beyond that short list.

The second is sitemap intelligence. You add your sitemap URLs, Honeylog scans them straight away and then roughly every hour. It cross-references those URLs with real traffic, so you can see which declared pages bots fetch and which get zero attention. For a shop with thousands of product pages, a list of pages no crawler visits is a handy thing to have. What you do about it is still up to you, since the tool shows the gap but the listing doesn’t mention any fix.

The AI referral claim needs a careful read

The most ambitious pitch is proving which AI platforms drive real visitors. Honeylog says it connects bot crawls to human visits by producer and source, using UTM tags and referrers, and avoids double counting. The listing also mentions exportable data.

This is the claim to be most skeptical about. AI chat tools often send visitors with no referrer at all, so attribution depends on what shows up in your logs. The listing doesn’t explain how Honeylog handles missing referrers or what accuracy to expect. Treat the “defensible data” language as a goal, not a guarantee. Every tier includes bot conversions analysis, so you can check it yourself on the entry plan before relying on it.

Alerts and notifications

Alerts measure a metric over a trailing window and can check anywhere from every 5 minutes to once a day. Notifications go by email to up to 10 recipients, with a cap of 10 alert emails per site per day. Extra triggers are recorded but suppressed. Slack, Telegram and Google Chat integrations are also listed, and the listing says they require an active subscription.

Here’s an inconsistency. The feature copy promises automated alerts, yet the plan table lists custom alerts as N/A on tiers 1 and 2. Alerts show up as 15, 20 and 50 on tiers 3 to 5. If alerts matter to you, confirm what the cheaper tiers include before buying.

The five tiers and what the caps mean

All tiers are one-time payments and include future updates within their plan family. Here’s how they compare:

• Tier 1, $59 (list $129): 150,000 monthly events, 1 user, 1 website, 6 months of data, standard CSV reports.
• Tier 2, $149 (list $349): 300,000 events, 5 users, 5 websites, 1 year of data.
• Tier 3, $249 (list $789): 1,000,000 events, 10 users, 10 websites, 5 networks, complete CSV reports, 1,000 API calls a minute, 15 alerts.
• Tier 4, $459 (list $1,259): 2,000,000 events, 20 users, 20 websites, 10 networks, 1.5 years of data, 5,000 API calls a minute, 20 alerts.
• Tier 5, $799 (list $1,899): 4,000,000 events, 50 users, 50 websites, 25 networks, 2 years of data, 10,000 API calls a minute, 50 alerts, dedicated support for complex installs and historical data import.

The listing never defines what counts as an event. If it means every logged request, a busy site could blow through 150,000 a month quickly, since bots alone can generate a lot of hits. Ask the vendor before you pick a tier, because the cap is the number that decides whether this works for you.

The $59 tier is a fair way to find out. But with one site and six months of retention, it’s an experiment, not a long-term archive.

Who should buy, and who should pass

Buy if you publish content or sell online, you can reach your server or CDN logs, and you want to see AI crawler behavior and bot-versus-human patterns. Agencies with several client sites should look at tiers 2 and 3, where the site and user counts make sense.

Pass if you want a replacement for Google Analytics. The listing lists it as an alternative, but nothing in the feature copy describes standard human-visitor reporting like funnels or goals. Pass too if you’re on shared hosting without log access.

The product is also young. AppSumo shows 3 reviews averaging 4.67 out of 5, which is a nice number from a very small sample, and there’s no demo video in the listing. The deal is only open to brand-new Honeylog users, you must activate within 60 days, and it ends November 10, 2026. Those are the dates to plan around.