Skip to main content
For developers, SEO teams & site owners

You can't see 60% of what's happening on your site

Botscope is the only platform that actively blocks malicious bots while giving you deep analytics into AI agents like GPTBot, ClaudeBot, and Gemini.

Pricing →
✓ no card required ✓ 7-day Pro trial ✓ cancel any time
live-traffic · botscope live
requestlayerverdict
45.153.●●.94 Tor Exit Node L1 BLOCK
66.249.●●.77 Googlebot ✓ L1 PASS
192.168.●●.1 Browser / PoW ✓ L3 PASS
91.108.●●.12 Fake Crawler L1 BLOCK
35.173.●●.55 AWS Datacenter L3 CHALLENGE
104.21.●●.199 GPTBot ✓ L1 PASS
154.21.●●.33 Headless Browser L3 BLOCK
71.234.●●.8 Mobile Browser ✓ L2 PASS
5.188.●●.71 Botnet Node L1 BLOCK
199.167.●●.52 ClaudeBot ✓ L1 PASS
217.23.●●.40 Proxy / VPN L3 CHALLENGE
23.94.●●.101 Scraper (honeypot) L4 BAN
45.153.●●.94 Tor Exit Node L1 BLOCK
66.249.●●.77 Googlebot ✓ L1 PASS
192.168.●●.1 Browser / PoW ✓ L3 PASS
91.108.●●.12 Fake Crawler L1 BLOCK
35.173.●●.55 AWS Datacenter L3 CHALLENGE
104.21.●●.199 GPTBot ✓ L1 PASS
154.21.●●.33 Headless Browser L3 BLOCK
71.234.●●.8 Mobile Browser ✓ L2 PASS
5.188.●●.71 Botnet Node L1 BLOCK
199.167.●●.52 ClaudeBot ✓ L1 PASS
217.23.●●.40 Proxy / VPN L3 CHALLENGE
23.94.●●.101 Scraper (honeypot) L4 BAN
● pass● block● challenge < 5ms avg

D01

40+

detection signals per request

D02

4

protection layers

D03

< 5ms

latency, returning visitors

D04

1,876+

known bots & AI agents tracked

works with any cms, framework, or custom stack

WordPress WordPress
Laravel Laravel
PHP PHP
React React
Vue.js Vue.js
Next.js Next.js
Django Django
Node.js Node.js
Shopify Shopify
Nuxt Nuxt
TypeScript TypeScript
Drupal Drupal
WordPress WordPress
Laravel Laravel
PHP PHP
React React
Vue.js Vue.js
Next.js Next.js
Django Django
Node.js Node.js
Shopify Shopify
Nuxt Nuxt
TypeScript TypeScript
Drupal Drupal

01 · The blind spot

Two traffic problems. Both invisible to GA4.

Traditional analytics only show you human traffic. The rest is quietly consuming your resources.

Bad bots — block them

Bots are corrupting your data

Scrapers, headless browsers, and botnets inflate your sessions, poison your SEO signals, and eat your ad budget. GA4 cannot tell you they're there.

  • ✕Fake conversions in your analytics
  • ✕Ad clicks that cost you real money
  • ✕Behavior signals that drag your rankings down
AI agents — track them

AI agents are your next traffic source

GPTBot, ClaudeBot, Gemini — they're crawling your pages right now. When they cite you, you get traffic. But you can't optimize what you can't see.

  • ✓Which pages ChatGPT and Claude reference
  • ✓How often AI-cited pages convert
  • ✓Which AI operators send you real visitors

02 · What you get

One platform, dual visibility

Block the malicious, track the curious, let the humans through.

AI Analytics

LLM Citations

See when ChatGPT, Claude, or Perplexity references your pages — and measure the click-throughs that follow.

  • →Mentions per AI provider
  • →Click-through from AI platforms
  • →Top cited pages
AI Analytics

AI Agent Catalog

Identify every AI bot visiting your site — GPTBot, ClaudeBot, Gemini, and 1,876+ others — with trends and categories.

  • →1,876+ known AI bots
  • →Traffic breakdown by category
  • →Verified vs unverified
Bot Protection

Bot Blocking

Real-time feed of every blocked request — headless browsers, scrapers, and botnets stopped before they reach your app.

  • →Block / challenge / observe per request
  • →Headless & JS-deaf detection
  • →SoftwareID fingerprinting
Analytics

Traffic Overview

One dashboard for humans, bots, and AI agents. Clean traffic, blocked volume, and bot share at a glance.

  • →Human vs bot breakdown
  • →Protection timeline
  • →Bandwidth savings
app.botscope.io / agents/citations
LLM Citations
AI Agent Catalog
Bot Blocking
Traffic Overview

03 · under the hood

Four layers of defense

Every request runs the full stack in under 5 ms — zero impact on real users.

L1

Network & Crawlers

  • ·IP reputation & threat feeds
  • ·Verified crawler bypass (Googlebot, GPTBot…)
  • ·Fake-crawler detection via rDNS mismatch
L2

Session Validation

  • ·HMAC-signed shield session cookie
  • ·TLS / JA4 fingerprint continuity check
  • ·Silent re-vouch on IP change (150 ms)
L3

Challenge Barrier

  • ·Invisible Proof-of-Work (browser-only)
  • ·Adaptive difficulty by risk score 0–100
  • ·Custom rule engine — block / challenge / observe
L4

Behavioural Traps

  • ·Invisible honeypot links in HTML
  • ·Stateless pixel tracks static-asset loading
  • ·Token-copier & HTML-only scraper detection

What gets stopped?

Everything that shouldn't be there.

HB

Headless browsers

Puppeteer, Playwright, Selenium — detected via JS environment probes.

SP

Scrapers & parsers

HTML-only scrapers, API harvesters, price and content bots.

FC

Fake crawlers

Bots spoofing Googlebot — exposed by rDNS / forward-DNS mismatch.

DC

Datacenter & proxy

AWS, Azure, GCP ranges; residential proxies and Tor exit nodes.

AI

AI training scrapers

Unverified or policy-violating LLM data harvesters.

HP

Honeypot triggers

Any client clicking invisible trap links gets an instant permanent ban.

Ways to connect

Pick what fits your stack. Switch modes without reinstalling.

DNS

Protect DNS

Edge proxy on our infra

Point your domain's A record to our edge. All L1–L4 layers run on our proxy — zero load on your server.

Any CMS or language HTML rewrite included Zero server load
PHP

Protect Agent

auto_prepend_file on your server

One line in php.ini or .htaccess. Runs before your app, sends telemetry asynchronously after the response.

PHP 8.1+ Laravel / WP / custom Async telemetry
JS

Observe JS

Passive analytics snippet

Paste one script tag — no server change, no blocking. Streams browser signals and AI-citation tracking; add DNS or the Agent later for enforcement.

No blocking Zero server changes LLM referral tracking

Want DNS's zero-load edge and a second, HMAC-verified layer of defense in case DNS is ever bypassed? That's not a fourth mode to set up — just also install the Agent on a site already running DNS. Botscope enables the extra layer automatically.

04 · pricing

Simple, usage-based pricing

7-day Pro trial on every new account. No card required.

RECOMMENDED

Pro

$0 for 7 days

then $29/mo ·

  • ✓3 sites included
  • ✓500K events/mo included
  • ✓Full enforce mode + honeypots
  • ✓Session protection (L2)
  • ✓AI citation & crawler analytics
  • ✓REST API access
  • ✓30-day data retention
  • ✓Email support
FOR LARGE TEAMS

Enterprise

Custom

Flat monthly fee — no per-event billing

Contact us
  • ✓Unlimited sites
  • ✓Custom event volume — predictable cost
  • ✓1-year data retention
  • ✓Unlimited team members + SSO
  • ✓Dedicated Slack channel support
  • ✓SLA available on request
  • ✓Audit logs
  • ✓Custom rule templates by Botscope

One billable event = one telemetry record stored (typically one protected HTTP request).

$ botscope --enable

See what's really on your site — free, in under 5 minutes

No credit card required. 7-day Pro trial on every new account. Connect via JS snippet or PHP agent — downgrade to Free any time.

Book a demo →