RabbitproofBack to Rabbitproof
Bot Management

Serious bot management, priced for small business.

Protects your whole website: checks every visitor before they reach it. Nothing for your visitors to click.

What it does

For your whole website.

EVERY PAGE

Every page protection

Visitors are checked before they reach your server. Bots that post straight to your forms are blocked.

PROXIES

Proxy and VPN detection

Spots bots that come through home connections, proxies and VPNs.

BROWSERS

Automated browser detection

Spots automated and headless browsers, the kind spam bots run.

CONNECTIONS

Multi-connection device detection

Spots the same machine arriving from different internet connections within seconds.

NETWORK

Shared bot blocklist

Machines already caught as bots on other websites Rabbitproof protects are blocked on yours too.

SCRAPING

Content scraping protection

Bots that jump through your page numbers are sent back to page 1.

HONEYPOT

Honeypot protection

A hidden link real visitors never see. Bots that follow it are blocked.

PAGES

Page rules

Choose which pages are checked.

LOCATION

Geoblocking

Blocks visitors from the places you choose.

SCANNERS

Scanner blocking

Bots asking for your secret files, known weak spots and unsecured ways into your server are refused before your server, and blocked on their next visit.

SIGN-INS

Brute force login protection

Bots guessing passwords on your sign-in page are refused.

ACCOUNTS

Fake account protection

Bots opening accounts or using your password reset page are refused.

ALLOW

Allow list

Your office, your developer or your monitoring go straight through. Keep a customer you unblocked for as long as you like.

LOCK

Bypass protection

Five lines on your server make sure visitors come through Rabbitproof, not around it.

SEARCH

Verified bot rules

Search engines and link previews in. AI crawlers and SEO tools only if you say so.

REPEATS

Repeat offender blocking

A connection blocked twice in a day is kept out for 24 hours.

PASS

Returning visitor pass

A real visitor is not checked again for 7 days. You can make it 1 or 30.

WHERE

Bot location reporting

See which countries your bots connect from, and the top reasons they were blocked.

Screenshots

How it connects

Two records where you manage your domain. Your website stays where it is.

  1. Prove it's yoursA TXT record called _rabbitproof, with your own value from the dashboard.
  2. Point www at usA CNAME for www to your own address from the dashboard. The secure padlock is set up for you. A step-by-step guide that works with any domain provider.
  3. Lock the back doorOptional. Five lines on your server, copied from the dashboard, so visitors come through Rabbitproof and not around it.

What it is, and what it is not

It is

  • Bot management: checking visitors on every page, and blocking the unwanted bots it finds.
  • In front of your whole website, set up with two records where you manage your domain.

It is not

  • For websites hosted on Wix, Squarespace or Shopify. Those need your www record pointed at them, so use Bot and Spam Protection.
  • A filter for spam a person types in by hand. Keep your spam filter for that.
Bot Management
A$39a month · stop any time
Requests included
1,000,000each month
Extra requests
A$10per 1,000,000

Questions

Will my visitors notice?

A new visitor may see a quick device check, for about a second, then we remember them for 7 days (or 1 or 30, if you choose). Nobody ticks boxes or picks out pictures.

Does it change my hosting or email?

No. Your website stays on your own server and your email isn't touched. Only your www record changes, so visitors reach your website through Rabbitproof.

What happens if Rabbitproof has a problem?

Your website keeps opening. Visitors go straight to your server, unchecked, until it's fixed.

Do search engines still get in?

Yes. Search engines and link previews are let in without a check. AI crawlers and SEO tools stay out unless you let them in, on your Allow list.