Loading…
SeeTheStackSeeTheStackLoading…
Ranked by how many scanned sites use each. Once we see sites drop Imperva (Incapsula) WAF, where they go next ranks first.
Cloud and on-premises web application firewall from Imperva, with managed rules from its threat researchers.
Growth is sites that added it minus confirmed removals in the last 90 days.
Paid bot management for Cloudflare Enterprise zones that puts a bot score on each request, for firewall rules or Workers to act on.
A web application firewall at Cloudflare's edge, counted here only when a visitor gets challenged or blocked.
Email obfuscation setting in Cloudflare's Scrape Shield, on by default, that hides a page's addresses from scrapers.
Google's CAPTCHA service, run from Google Cloud as part of Fraud Defense.
Cloudflare's CAPTCHA alternative, a standalone widget that says it can check visitors without a puzzle.
Invisible reCAPTCHA that scores each interaction for bot risk and leaves the response to the site.
Top tier of Google's reCAPTCHA bot and fraud protection, sold as a subscription with account and transaction defences.
Ad fraud and bot defence platform whose advertising side covers click fraud and malvertising.
Independent CAPTCHA and bot detection service from Intuition Machines, which says reCAPTCHA sites can switch in two lines of code.
Behavioural bot detection from Akamai for login, signup and checkout endpoints defined as API resources.
Industries named by this bot defence platform include airlines, retail and financial services.
Fraud prevention and payment optimisation for online merchants, extended to purchases made by AI agents.
Bot protection service for websites, mobile apps and APIs that connects to the CDN or gateway a site already runs.
Managed web application firewall that Amazon runs in front of its own cloud resources.
Fortinet's web application firewall, sold as hardware, virtual machines or SaaS and in public cloud marketplaces.