Integration
Closed-Loop Bot Enforcement in Your Cloudflare & AWS WAF
WebDecoy closes the loop from detection to enforcement—pushing composite, auto-expiring rules to your Cloudflare or AWS WAF. Challenge first, block last.
integrationBlog
Insights and updates on AI bot detection, web security, and digital threat mitigation. Discover best practices for protecting your online properties from automated threats and malicious bots.
Post 1 through 6 of 53 total posts
- Security
Defeat IP Rotation: Block Bots by JA4 at the WAF
WebDecoy now tracks bots as persistent actors and pushes a JA4 rule to your AWS WAF or Cloudflare, blocking rotating scrapers across every IP they use.
security - Bot Detection
Tripwires: Catch the Scrapers Fingerprinting Misses
A deterministic, zero-false-positive way to stop stealth scrapers, built into the WebDecoy Node SDK. Runs entirely in your app, no account required.
bot-detection - Bot Detection
Signed Agents and the Coming Web Identity Schism
Signed agents, web bot auth, and agent.json are splitting the web into sites that demand cryptographic AI identity and sites that hide it. A forward look.
bot-detection - Bot Detection
FCaptcha v1.12: Catching AI Agents That Drive Real Browsers
How FCaptcha v1.11 and v1.12 detect AI agents that drive real browsers, using CDP input forensics, think-time cadence, and declared-agent matching.
bot-detection - Bot Detection
Self-Hosted Captcha for Node.js: WebDecoy SDK v0.3.0
WebDecoy Node SDK v0.3.0 ships a self-hosted proof-of-work captcha and an in-process detection engine that scores ~40 signals with no third-party calls.
bot-detection