Verifying Googlebot and other Google crawlers

Google's documented method for checking that a request really comes from its crawlers.

A user agent is a claim. Forward-confirmed reverse DNS is the check, and it's what my crawler alerts use now.

Anyone whose analytics, alerts or rate limits trust a bot's user agent.