RabbitproofBack to Rabbitproof
Bot and Spam Protection

Stop bots and spam on any website.

One line in your website's header. Rabbitproof spots the spam bots among your visitors and holds their forms, on any website you can add a line to, except WordPress websites. Nothing for your visitors to click.

Choose Bot and Spam ProtectionHow it connects
The Rabbitproof bunny knight

What it does

Each visitor is checked quietly in the background while they read your page. When a form is sent, a spam bot's form is held and a real person's goes straight through.

BROWSERS

Automated browser detection

Spots automated and headless browsers, the kind spam bots run.

CONNECTIONS

Multi-connection device detection

Spots the same machine arriving from different internet connections within seconds.

REPEATS

Repeat offender blocking

A connection blocked twice in a day is kept out for 24 hours.

PROXIES

Proxy and VPN detection

Spots bots that come through home connections, proxies and VPNs.

NETWORK

Shared bot blocklist

Machines already caught as bots on other websites Rabbitproof protects are blocked on yours too.

PASS

Returning visitor pass

A real visitor is not checked again for 7 days. You can make it 1 or 30.

FORMS

Form spam protection

A spam bot's form is not sent. The visitor sees why, with a reference you can unblock in one click.

SIGN-INS

Brute force login protection

Bots guessing passwords on your sign-in page are refused.

ACCOUNTS

Fake account protection

Bots opening accounts or using your password reset page are refused.

FILES

Private file blocking

Optional lines for your own server turn away bots hunting for the files that hold your settings and passwords.

ALLOW

Allow list

Your office, your developer or your monitoring go straight through. Keep a customer you unblocked for as long as you like.

ANYWHERE

Works on any website

One line in the header of any website you can add a line to. No change to your domain. WordPress websites use the WordPress Plugin instead.

WHERE

Bot location reporting

See which countries your bots connect from, and the top reasons they were blocked.

Your dashboard

Everything Rabbitproof sees on your website, in plain words.

How it connects

One line in your website's header. No change to your domain, nothing to install.

  1. Add your websiteIn your Rabbitproof account, add your website and choose Bot and Spam Protection.
  2. Paste one lineCopy your line from the dashboard into your website's header, so it is on every page.
  3. That's itRabbitproof finds the line on your home page, which proves the website is yours, and starts checking.

What it is, and what it is not

It is

  • Spam bot protection for the forms on any website not built with WordPress, decided while the visitor reads your page.
  • Clear to your visitors: a refused visitor sees why, with a reference, and you can unblock them in one click.

It is not

  • In front of your whole website. A bot that sends a form straight to your website, without opening a page, isn't checked unless you add the optional lines for your own server. For every page, use Bot Management.
  • A filter for spam a person types in by hand. Keep your spam filter for that.
Bot and Spam Protection
A$14a month · stop any time
Choose Bot and Spam ProtectionPricing information
Requests included
100,000each month
Extra requests
A$4per 100,000

Questions

Will my visitors notice?

No. The check runs in the background while they read your page. There are no puzzles or ticks. Only a spam bot sees anything: its form is held, with the reason.

What happens if Rabbitproof is down?

Forms go through as normal after a few seconds, and your website keeps working.

Does it work with page caching?

Yes. The check runs in the visitor's browser, so cached pages are fine.

What if a real person is refused?

Unblock them on your dashboard's Requests tab, by the reference they were shown, and they go straight through for 7 days. Your Allow list can keep them for longer.