Enterprise AI Bot Protection

Your website wasn't built
for AI scraping.

CrawlGuard detects, blocks, and monetizes every AI crawler touching your content — across every channel, in real time.

Free tier included · No credit card required · Production-ready in 2 min

index.html30 sec setup
<!-- One line. That's it. -->
<script
  src="https://crawlguard.vercel.app/api/script/YOUR_SITE_KEY"
  defer
></script>

Works with any website. No backend required.

0%
of internet traffic is bots
0.0x
AI bot growth in 2025
0%
ClaudeBot surge in early 2026
0+
AI crawlers we detect
Firewall rules5 active
Block datacenter IPsBLOCK2,847
Challenge suspicious (>0.6)CHALLENGE1,203
Block AI training crawlersBLOCK4,521
Rate limit: 60 req/minTHROTTLE892
Allow Googlebot (verified)ALLOW3,102
12,565 requests evaluated today8,570 blocked
Enterprise blocking

Block bots before they
reach your content

Create firewall rules that block, challenge, or throttle traffic before it touches your server. Block entire ASNs, datacenter IPs, specific crawlers, or traffic from certain countries. All configurable from the dashboard with zero code changes.

  • Block by IP, ASN, country, UA, score, or bot category
  • Challenge suspicious visitors with proof-of-work
  • Rate limiting with auto-block on threshold breach
  • Tarpit mode: slow down scrapers without revealing detection
Stealth traps

Invisible honeypots that
catch every scraper

Deploy CSS-hidden trap links that only bots can find. When a crawler follows a honeypot link, it's instantly flagged with a score of 1.0. Dynamic per-session traps make it impossible for scrapers to build a filter list. Combined with content watermarking, you can trace stolen content back to the exact scraping session.

  • Static honeypots: invisible to CSS-rendering browsers
  • Dynamic traps: unique per session, HMAC-signed URLs
  • Content watermarking: invisible Unicode markers survive copy-paste
  • Stealth mode: zero identifiable keywords in trap URLs
Honeypot triggers
/api/t/c?s=a8f2...
54.23.x.x · dynamic
3m ago
/api/t/d?s=7b1e...
35.180.x.x · dynamic
12m ago
/sitemap-hidden.xml
104.21.x.x · static
28m ago
/api/t/c?s=e4c9...
52.94.x.x · dynamic
1h ago
72% trap coverage
Live activityLive
/blog/ai-trendsGPTBotblockedUS2s
/pricinghumanallowedDE5s
/api/productsScrapychallengedCN8s
/humanthrottledRU12s
/docs/apiBytespiderblockedUS15s
/abouthumanallowedGB18s
Live activity feed

Watch your protection
work in real-time

A live stream of every request hitting your site, classified and scored in milliseconds. Filter by bots, blocked requests, honeypot triggers, or suspicious visitors. See exactly which rules fired, what the ML engines detected, and what action was taken.

  • Real-time event stream with 5-second refresh
  • Advanced filters: IP type, country, score range, bot category
  • Click to expand: full request details, matched rules, signals
  • Export evidence for DMCA takedowns and legal action
Platform

Everything you need to understand your bot traffic.

From detection to dashboards — complete visibility without the enterprise price tag.

One script tag

Add a single line of code. Works with WordPress, Shopify, Next.js, Wix, Squarespace, or any HTML site. No server access required.

AI crawler identification

Automatically detects GPTBot, ClaudeBot, Bytespider, PerplexityBot, and 20+ known AI crawlers by user-agent, IP verification, and behavioral signals.

Real-time dashboard

See exactly how much of your traffic is AI, which companies crawl you, what pages they target, and how it changes over time.

Multi-site management

Monitor all your websites from a single dashboard. Add sites in seconds, switch between them instantly. Built for agencies and multi-brand teams.

Privacy-first design

No cookies, no PII storage. IPs are hashed with daily rotating salts. Fully GDPR-compatible. We are a security tool, not a tracker.

Bot scoring engine

Every visitor gets a bot score from 0 to 1 based on 9+ detection rules. user-agent analysis, browser fingerprinting, header inspection, and more.

Onboarding

Up and running in under 2 minutes.

No server configuration. No DNS changes. No reverse proxy.

Step 01

Create your account

Sign up with email, add your domain. Your unique site key is generated instantly.

No credit card required
Step 02

Add one line of code

Drop in the script tag or install the SDK for your framework. Works everywhere.

9 SDKs available
Step 03

Bots blocked automatically

Traffic is analyzed in real-time. Configure rules from the dashboard. Protection starts immediately.

< 50ms latency

53% of internet traffic is automated.
How much of yours?

Most site owners have no idea. Find out in under 2 minutes — free.