See every bot, stop the ones that matter.
A real dashboard, a real API, and a real SDK — the score, the signals behind it, and full control over what happens next.
Requests scored
1.24M
Bots blocked
8,402
p99 latency
47ms
Band split
- 64% likely human
- 18% likely automated
- 9% definite · 9% verified
Everything in one place.
Overview
KPIs at a glance — requests scored, bots blocked, p99 latency — with the band split and a live feed of recent verdicts.
Sessions
Every scored visitor session with its score, band, and the exact detections behind it. Search, filter, and drill into one.
Blocks
What got stopped and why — the rule or band that triggered it. Spot false positives before your users feel them.
Rules
Activate a ready-made rule or write your own expression over the signal fields. Live validation, observe-first by default.
Verified bots
The crawlers you want — Googlebot, Bingbot, Applebot — matched against a maintained directory and allowed through.
Settings
Protection guards, the likely-bot threshold, your site and private keys, and the install snippets — all in one place.
Rules that read like rules.
Start with the ready-made rules. When you need more, write expressions over the same signal fields — compiled to an AST, never eval. Validated live as you type, and observe-only until you flip it on.
score < 30
and not verified
and path matches "/checkout/*"
→ challengeObserve before you block
Enforcement is off by default. Watch real scores against your own traffic, tune the threshold, and turn blocking on only when you trust it. No surprise walls on day one.
Fast and fail-open
Scoring runs off the request path; verdict reads hit a cache at <50ms p99. If Botect ever degrades, you get an allow — your site never goes down because ours did.
See it against your own traffic.
Sign up, drop in the SDK, and watch the dashboard fill with real scores — blocking stays off until you say so.