Hi @meirk, thanks for your question.
I think the best option for this would be to identify any block that’s taking place when the SEO tool is scanning your site and allow this action rather than fully allowlisting their IPs. The reason I say this is because IPs allowlisted in Wordfence can bypass ALL Wordfence protection, even if they’re reassigned to somebody else in future.
If you try to run the SEO tool, then refer to your Live Traffic immediately afterwards to see if a firewall block is being picked up there. If so, you should be able to see which rule is causing the block by clicking that line (or “eye” icon) to expand it. Sometimes you are presented with a “ADD PARAM TO FIREWALL ALLOWLIST” button here that could solve any problems going forward.
If Live Traffic doesn’t seem to show anything or you don’t see the allowlist button, Learning Mode while logged in as an admin could help, too. You can turn on any time for testing from the Wordfence Dashboard, by clicking on Manage WAF. Then you will see Basic Firewall Options > Web Application Firewall Status. Change the option to Learning Mode. Now perform the actions that you’ve been having problems with. Wordfence may learn that the actions taking place at this time are normal and will allow them in the future. After you have finished testing, make sure to switch the WAF from Learning Mode back to Enabled and Protecting.
Let me know what you find out,
Peter.
