Anti-bot
for websites

We block bots, scrapers and behavioural-factor manipulation in real time. Connect via DNS or PHP agent — works with any stack. 99.9% accuracy, no CAPTCHA.

Get started freeHow it works
Works with any CMS, framework or custom site
WordPress
Битрикс
Tilda
Next.js
React
Vue.js
Django
PHP
OpenCart
WordPress
Битрикс
Tilda
Next.js
React
Vue.js
Django
PHP
OpenCart
WordPress
Битрикс
Tilda
Next.js
React
Vue.js
Django
PHP
OpenCart

What the anti-bot
blocks

Six main categories of automated threats — all blocked transparently for the end user.

Behavioural bots

Imitate real visitors: click, scroll, fill in forms. They damage behavioural factors and drag down search rankings.

Behavioural bots

Scrapers and parsers

Copy product catalogues, prices, contacts and unique content. They load up the server and feed competitors.

Scrapers and parsers

Spam bots

Flood contact forms, comments and sign-ups with junk submissions.

Brute force and exploits

Try admin passwords, scan for CMS and plugin vulnerabilities.

Junk traffic

Bots flood the server with parasite requests, slow the site down and burn through plan limits.

Bad IPs and proxies

Datacenters, VPNs, bot farms and anonymous proxies — the source of 90% of malicious traffic.

How it works

Three steps to clean traffic

A request comes in

The user request hits the BotHunt edge proxy or the PHP agent on your site. Analysis starts instantly.

BotHunt request received
Time
4-12 ms

40+ signals analysed

The anti-bot inspects TLS signature, ASN reputation, fingerprinting and behavioural patterns. 99.9% accuracy.

BotHunt signal analysis
Accuracy
99.9%

Decision is instant

Bots get HTTP 403 or a challenge. Real users pass through with no delay and no CAPTCHA.

BotHunt blocks a bot
Bot traffic
−94%

Set up protection in 5 minutes

Sign up, add your site, install the script — and get 14 days of free bot protection

Start for free
14 days free
Connection methods

Two equal options

Method 1 / DNS

DNS integration

A single A record in DNS routes traffic through the BotHunt edge proxy. Works with any stack: Tilda, Bitrix, WordPress, Next.js, static sites, Node.js, Python.

  • No code changes required
  • TLS termination and automatic Let's Encrypt
  • Hides origin IP from direct attacks
Method 2 / Agent

PHP agent

Server-side agent via require_once or auto_prepend_file.

  • Works with WordPress, Bitrix, Laravel, MODX
  • Access to server variables
  • Ready-made WordPress plugin
Technology

Detection
pipeline

40+ signals checked in cascade within 4-12 milliseconds. If a bot is identified at an early stage, the remaining steps are skipped.

012 МС

TLS / TCP

Handshake analysis before the server starts serving the page. Headless clusters get exposed at the network layer.

  • JA3 / JA4
  • TCP-fingerprint
  • TLS-cipher
021 МС

IP / ASN

Subnet reputation, AS type and membership in anonymiser pools. 90% of bot traffic comes from datacenters.

  • ASN-репутация
  • Datacenter
  • VPN
  • Proxy
033 МС

Fingerprint

Technical browser and device fingerprints. Impossible to forge without a full real-Chrome emulator.

  • Canvas
  • WebGL
  • Audio
  • Hardware
  • Fonts
044 МС

Behaviour

Mouse curves, click timings and event order. Stronger than any fingerprint — humans move along Bezier curves, bots in straight lines.

  • Bezier curve
  • Timings
  • Scroll
  • Order
051 МС

Headless

Signatures of popular automation tools: specific APIs, navigator flags and characteristic CDP-protocol behaviour.

  • Puppeteer
  • Playwright
  • BAS
  • Zenno
  • CDP
Early exitIf a bot gets caught at TLS, stages 02-05 are skipped. Real average: 4-6 ms.
Σ time≤ 12 MS
Comparison

BotHunt vs alternatives

ParameterBotHuntCAPTCHACloudflareDataDome
Transparent for usersYesNoYesYes
Behavioural-factor protectionYesNoPartialYes
Russian jurisdictionYesDependsNoNo
Billing in rublesYesDependsNo (USD)No (USD)
Starting price$9/monthFree$20/monthfrom $3000/month
DNS connectionYes—YesYes
PHP agentYes—NoNo
Minimum contractMonthly—YearlyYearly
Blog

Deep dives and guideson bot protection

All articles
Парсинг
11.06.2026
Как обнаружить парсер на своём сайте: 7 рабочих способов
10 мин.
17
Парсинг
08.06.2026
robots.txt для защиты от ботов: мифы и реальные возможности
10 мин.
40
Скрейпинг AI-ботами (GPTBot, ClaudeBot, PerplexityBot): как заблокировать в 2026
Парсинг
05.06.2026
Скрейпинг AI-ботами (GPTBot, ClaudeBot, PerplexityBot): как заблокировать в 2026
9 мин.
91
FAQ

Frequently asked
questions

Answers to the most common questions about setup and operation of the anti-bot service.

An anti-bot is a service that analyses website traffic in real time and blocks automated bots: scrapers, spammers, brute-force attempts and behavioural-factor manipulation. Without an anti-bot, malicious traffic burns server resources, distorts analytics, hurts your search rankings and exposes your forms.
CAPTCHA puts friction on real users and lowers conversion: every extra action is a lost lead. BotHunt works transparently — legitimate visitors don't notice the protection at all, while bots get blocked at the TCP/HTTP layer. On top of that, modern AI bots have learned to solve reCAPTCHA, while behavioural signals and fingerprinting are far harder to fake.
BotHunt supports two equal methods: 1) DNS integration via the edge proxy — one A record in DNS, works with any stack (Tilda, Bitrix, WordPress, Next.js, static sites); 2) PHP agent — included via require_once or auto_prepend_file, gives deeper access to server variables. Both methods are managed from a single dashboard.
No. YandexBot, Googlebot, Bingbot, Mail.ru, Apple Bot, ChatGPT-User, GPTBot, ClaudeBot, PerplexityBot and other legitimate crawlers are whitelisted by ASN and user agent. The site stays indexable.
A decision takes 4-12 milliseconds. The script agent weighs less than 5 KB, the edge mode adds no client-side latency at all. BotHunt does not affect LCP or Core Web Vitals.
The Site plan is $9/month for 1 site, Studio — $29/month for 5 sites, Agency — $79/month for 20 sites, Pro — $149/month for 100 sites. 14-day free trial, no credit card required.
Bots are blocked instantly from the moment of activation. Recovery of search rankings after behavioural-factor protection typically takes 2-4 weeks, once the search algorithm stops seeing fake bounces from bots.
Yes. In PHP-agent mode BotHunt works behind any CDN. In DNS mode Cloudflare and BotHunt are alternatives (traffic flows through one edge network), but many clients move from Cloudflare due to sanction risks and USD billing.

Didn't find
your answer?

Message us on Telegram or email — we usually reply within an hour.

support@bothunt.ru