Blog
Bot Protection
Every post about Bot Protection, newest first.
-
AI agents and LLM scrapers: what to let in, and where to check
AI crawlers read your pages, and AI agents now fill in forms in real browsers. Which to welcome, which to stop, and why the check belongs at the action, not the page.
-
A CAPTCHA alternative for sign-ups and logins: no puzzle, a decision with reasons
Looking for a reCAPTCHA, Turnstile or hCaptcha alternative? What an invisible check can and cannot do, how a decision with reasons differs from a pass or fail, and when a CAPTCHA is still right.
-
Free trial abuse: how to stop multi-accounting without hurting sign-ups
The same people open account after account to keep using your free trial or free tier. How multi-accounting works, what gives it away, and how to keep trials for prospects.
-
How to stop fake sign-ups without a CAPTCHA
Fake accounts burn free trials, skew your metrics and seed later abuse. How to tell a scripted sign-up from a real one, and what to do with the answer.
-
Credential stuffing: how to spot it at your login
Attackers replay leaked email and password pairs against your login until some work. What the attack looks like in your logs, and how to stop it without locking out your customers.
-
Fail open: why a bot check must never take your site down
A bot check sits in front of your most valuable pages. If it fails closed, its outage is your outage. How to call one so that it can only ever make things better.