WebDecoy

Catch AI scrapers and bots with deception, not friction

15 followers

Catch AI scrapers and bots with deception, not friction

15 followers

Visit website

Website analytics

•

Authentication & identity tools

•

Observability tools

WebDecoy is deception-based bot detection for the AI crawler era. Honeypot decoys catch what bots touch and humans never see. An edge sensor on Cloudflare catches crawlers that never run JavaScript. Behavioral and TLS fingerprinting gives every visitor one persistent actor identity across IPs. Verified crawlers (Web Bot Auth) get through, impersonators get flagged. You approve enforcement. SDKs for Node, PHP, WordPress, Shopify. Open source FCaptcha included.

This is the 3rd launch from WebDecoy. View more

WebDecoy for Vercel

Launching today

Know which crawlers hit your Vercel app, and which are fake

Connect a project and WebDecoy reads your Vercel log drain. No code changes. It identifies crawler traffic per request, verifies real crawlers against published IP ranges, and flags forged user agents. Monitoring only: it never blocks, never reports humans.

Launch tags:Analytics•Developer Tools•Security

Launch Team

WebDecoy

Maker

📌

Hi PH, Chris here. WebDecoy is now on the Vercel Marketplace. Anyone can put "Googlebot" or "GPTBot" in a User-Agent header. WebDecoy checks each request against the crawler's published IP ranges and tells you which ones were real and which were forged. Setup is one click: connect a project and we configure a log drain. No code, no deploy. On Hobby, where drains are not available, one line of @webdecoy/next middleware does the same job. It is deliberately monitoring only. It never blocks or challenges a request, and human visitors are never reported. You get the answer to "who is actually crawling me?" with zero risk to production. Curious what you find. The share of forged crawler traffic tends to surprise people.

Report