WebDecoy
Catch AI scrapers and bots with deception, not friction
Start new thread

WebDecoy for Netlify - See which bots hit your Netlify site, then stop the fakes

by
•
A Netlify extension that watches automated traffic at the edge: AI crawlers, CLI tools, scrapers. It verifies real crawlers with reverse DNS and Web Bot Auth, then protects paths like /account/* with signed clearance. Opt-in, monitor first, fails open.

Add a comment

Replies

Best
Maker
📌
Hi PH, Chris here, maker of WebDecoy. Most bot tools start by blocking. We start by showing you what is actually there. Install the extension, add three env vars, and your Netlify site reports every AI crawler, curl script, and scraper that reaches it, including the ones that never run JavaScript. New this week: enforcement. Set WEBDECOY_ENFORCEMENT=on, pick the paths that matter (say /account/* or /search/*), and browsers get a signed clearance cookie while unverified automation gets a challenge or a 403. Your public pages stay crawlable, and verified crawlers pass on your terms. Three things we cared about: installing never blocks anything by itself, you review everything in Monitor mode before switching to Enforce, and the function fails open so our outage is never your outage. One honest caveat for Next.js users: middleware runs before our function, so responses returned directly from middleware skip validation. The docs cover it. I would love feedback on the rollout flow. What would you want to see before you trusted a tool to enforce?