← Back to blog

Published

What Is Google SearchGuard? The Bot Blocker Behind the SerpApi Lawsuit

SearchGuard is the name Google uses for the system that protects Google Search from automated access. Almost nobody outside Google had heard of it until December 2025, when Google sued SerpApi and said the company had gotten around it.

Google has published very little about how SearchGuard works, and this article doesn't speculate about its internals. This article covers what is on the public record, what the court has said so far, and what it means if you depend on Google search data.

What Google says SearchGuard is

According to Google's complaint, as reported by IPWatchdog and Search Engine Journal, Google deployed SearchGuard in January 2025 to block bots from accessing Search. The timing lines up with another change. In the same month, Google began requiring JavaScript for Search and told TechCrunch that JavaScript helps it protect users "from bots and evolving forms of abuse and spam." Google hasn't said publicly how the two relate.

Why SearchGuard matters legally

Most scraping disputes involve contracts, computer access laws, or copyright in the scraped content. Google's case against SerpApi took a different route. It relied on the DMCA's anti-circumvention provision, which prohibits getting around a technical measure that controls access to a copyrighted work.

That is why SearchGuard sits at the center of the case. Google's argument has three parts:

  1. Search results pages include copyrighted material, some of it licensed from third parties.
  2. SearchGuard controls access to those pages.
  3. SerpApi built ways around SearchGuard, which Google says counts as circumvention under the DMCA.

Google's announcement framed the suit as protecting that content. Google also pointed to a SerpApi blog post from January 17, 2025 about dealing with SearchGuard. SerpApi disputed the claims and argued that the DMCA protects copyrighted works and doesn't cover access to public web pages.

What the court said

On July 20, 2026, the court dismissed Google's original complaint. Search Engine Land reported that the judge rejected the idea that the DMCA covers ordinary Google results when those pages contain no protected copyrighted material. Google was allowed to amend a narrower claim tied to copyrighted content in Knowledge Panels, and it filed an amended complaint in August. SerpApi moved to dismiss the amended claims.

As of November 2026 there is no final decision on the merits. Our post on the lawsuit and Google's double standard covers the case in more detail.

What SearchGuard means for search data

Regardless of the outcome in court, SearchGuard is part of why collecting Google results got harder and more expensive in 2025 and 2026:

  • More requests fail or get challenged. Every request that doesn't pass has to be retried, which raises cost per successful result.
  • Failures got quieter. Since September 2026, Google answers some suspected bots with poisoned SERPs and partial query results rather than an error. Nothing public ties these to SearchGuard by name, but they have the same aim: making automated collection less useful. Cloudflare uses a similar tactic with decoy pages for crawlers.
  • Legal questions moved to circumvention. The case shifted the legal debate from what data is collected to how it is accessed.

None of this is legal advice. Our guide to web scraping law explains the main considerations, and the right answer for your use depends on your jurisdiction and facts.

Questions to ask a SERP data provider

If you buy Google results rather than collecting them yourself, these questions are fair to ask:

  1. How does the provider handle blocks, challenges, and CAPTCHAs, and does any of that reach your requests?
  2. How does it detect and handle poisoned or partial results?
  3. What happens to your service if a court rules against a provider in a case like this one?
  4. Can you get the raw HTML for any result, so you can verify what was collected?

Our overview of how anti-bot detection works explains the general techniques sites use to tell people from automated traffic.

Frequently asked questions

What is Google SearchGuard?

SearchGuard is the name Google uses for a system it says it deployed in January 2025 to block automated access to Google Search. Google has not published technical details. It became widely known through Google's December 2025 lawsuit against SerpApi.

Why did Google sue SerpApi over SearchGuard?

Google alleged that SerpApi got around SearchGuard, and that doing so violated the DMCA's anti-circumvention provision because search results pages include copyrighted content. SerpApi disputed the claims.

Did Google win its lawsuit against SerpApi?

Not so far. On July 20, 2026, the court dismissed Google's original complaint, rejecting the idea that the DMCA covers ordinary search results without protected copyrighted material. Google filed an amended complaint focused on Knowledge Panel content, and SerpApi moved to dismiss it. As of November 2026 there is no final decision.

Is SearchGuard the same as Google's JavaScript requirement?

Google hasn't said. Both appeared in January 2025, and Google described the JavaScript requirement as a way to protect its services from bots, but it hasn't published how the two relate.