Skip to main content

Bot Protection

Plan: Growth and above

Devices the storefront script identified as automated.

How detection works​

The script checks browser characteristics that distinguish real browsers from automation: missing browser runtime objects, absent plugins, software (headless) graphics renderers, inconsistent screen and timezone data, and known automation frameworks. Enough signals together mark the device as a bot with a confidence score.

Verified search-engine crawlers​

Google, Bing, Apple, DuckDuckGo and Yandex crawlers run JavaScript, so they run the storefront script and look like datacenter bots. FlexifyGuard verifies them the way the engines recommend — reverse DNS to an official hostname, then forward DNS back to the same IP — and records them as Verified … search engine crawler with a risk score of 0. They are never auto-blocked, and Bulk Session Response skips them.

Cards and list​

  • Bots Detected — real total for this store (the list shows the latest 100).
  • Risk — Low (0–39), Medium (40–79), High (80+). A verified crawler shows Low.
  • Block — blocks the bot's IP for this store.