> ## Documentation Index
> Fetch the complete documentation index at: https://docs.qa.tech/llms.txt
> Use this file to discover all available pages before exploring further.

# Environment access

> Reach a site the agent cannot load: identify the bot, allowlist IPs, or open a private network.

If a test cannot load the environment, match the symptom to a fix. Each row is a different blocker.

| Symptom | Solution | Guide |
| :- | :- | :- |
| Logs or a WAF need to recognize QA.tech traffic | Identify the bot by its User-Agent suffix | [QA.tech Bot](/bot) |
| A firewall, CDN, or CAPTCHA blocks the test by IP | Allowlist the outbound IPs | [IP Access](/configuration/ip-access-control) |
| Vercel Firewall returns a block before the app loads | Bypass remaining rules when the User-Agent contains `QATechBot` | [Vercel Firewall](/configuration/vercel-firewall) |
| A Vercel preview is behind deployment protection or trusted IPs | Send the Protection Bypass for Automation secret | [Vercel Preview](/configuration/vercel-preview-protection) |
| Cloudflare returns 403, 1020, or a challenge page, or a Turnstile widget stops a form | Allow the bot at the edge, or change how the app loads Turnstile | [Cloudflare WAF and Turnstile](/configuration/cloudflare-waf-turnstile) |
| The app is on a private network or behind a jump host | Route the browser through an SSH tunnel | [SSH Tunnel](/configuration/ssh-tunnel) |
| The app is only on your machine | Expose local ports with `qatech tunnel` | [`qatech tunnel`](/cli/commands/tunnel) |

<CardGroup cols={2}>
  <Card title="QA.tech Bot" icon="robot" href="/bot">
    User-Agent suffix `QATechBot/1.0` for logs and WAF rules.
  </Card>

  <Card title="IP Access" icon="globe" href="/configuration/ip-access-control">
    Allowlist the current outbound IPs from Settings → Network.
  </Card>

  <Card title="Vercel Firewall" icon="shield" href="/configuration/vercel-firewall">
    Custom rule: User-Agent contains `QATechBot`, then Bypass.
  </Card>

  <Card title="Vercel Preview" icon="shield-check" href="/configuration/vercel-preview-protection">
    Protection Bypass for Automation on a protected preview URL.
  </Card>

  <Card title="Cloudflare" icon="cloud" href="/configuration/cloudflare-waf-turnstile">
    Edge WAF and in-app Turnstile are different fixes.
  </Card>

  <Card title="SSH Tunnel" icon="shield-keyhole" href="/configuration/ssh-tunnel">
    SOCKS proxy through your jump host for private apps.
  </Card>

  <Card title="Localhost" icon="link" href="/cli/commands/tunnel">
    `qatech tunnel` exposes a dev server to the agent.
  </Card>
</CardGroup>