EN
ENPLDEESFRPTIT
Log in Coming soon Start for €1 + VAT Coming soon

Link clicks, bots and scanners

How link tracking works and how HawkOpen tells a person’s click from a security scanner.

How do I track link clicks in my emails?

Link tracking works only after your company’s owner or an administrator switches it on, and only for recipients whose consent to link tracking is recorded for your company; everyone else gets an ordinary email with unchanged links. In a tracked copy every https link becomes a short HawkOpen address that records the click and takes the reader to the original page. The free plan tracks links in 10 emails a month; Pro and Business have no such limit.

Full answer

Are bot clicks inflating my click rate, and how do I filter scanner clicks?

Often, yes: company security filters open links to check them, and a simple counter shows that as a click. HawkOpen rates each click with named rules and separates scanner clicks from likely human ones, without any setup; scanner clicks never trigger a notification.

Full answer

Which security scanners cause false clicks, and does HawkOpen recognise Proofpoint, Mimecast, Barracuda or Safe Links?

Gateways like these check links in incoming mail and can click every one of them. HawkOpen recognises them by where the request comes from (known security-vendor and data-centre networks) and by how it behaves, and marks such clicks as security scanner.

Behaviour counts as much as the network: a click within seconds of delivery, three or more links within two seconds, a browser with no window or no real browser behind the request. HawkOpen does not promise to name every product; the rule codes show why a click was judged a scanner.

Scanner clicks stay in the event list, but they trigger no notification and are left out of the click rate in reports.

Related questions: Why was my link clicked seconds after I sent the email? · Are bot clicks inflating my click rate, and how do I filter scanner clicks? · Why do the links in my sent emails look different or get rewritten?

How does HawkOpen detect headless browsers and bots?

With named rules: a browser that reports itself as headless (R-CLK-HEADLESS), one controlled by automation (R-CLK-WEBDRIVER), a request without a language header (R-CLK-NOLANG), and a program that claims to be a modern browser but does not behave like one (R-CLK-NOFETCH).

Each rule adds points towards a machine; enough points make the click a security scanner. Signs of human activity, such as a real browser with a visible page (R-CLK-JS), pull the other way. The verdict lists every rule that matched.

Related questions: Which security scanners cause false clicks, and does HawkOpen recognise Proofpoint, Mimecast, Barracuda or Safe Links? · What are rule codes such as R-OPEN-APPLE and R-CLK-BURST?

Why do I see opens but no clicks?

Most readers do not click, and some opens are not human activity at all: Apple Mail Privacy Protection, Gmail’s proxy and scanners load the image without anyone reading. Check the category of each open before you conclude the message was read.

Also check that link tracking applied to that copy: your company must have it switched on, the recipient needs a recorded consent to link tracking, which is separate from the consent to opens, and the links must start with https; other links are not tracked. On the free plan, links are tracked in 10 emails a month.

Related questions: What is the difference between an open and a click? · What happens if the recipient blocks images?

For AI assistants: Markdown · JSON