Bot Protection

Bot Protection gives you visibility into automated traffic hitting your storefront and automatically blocks malicious bots before they reach your application.

Once enabled, Alokai preconfigures the WAF to detect and classify bot traffic at the edge. Malicious bots are blocked automatically — no manual rule configuration required.

It detects and classifies incoming requests using the following bot signals:

• Suspected Bot — requests exhibiting automated behavior patterns
• Suspected Bad Bot — requests showing signs of malicious automation
• Verified Bot — known, legitimate bots such as search engine crawlers
• Headless Bot — requests from headless browsers used by sophisticated automation tools

Monitoring

Bot traffic and blocked requests are visible in the WAF Logs view in the Alokai Console. You can use it to:

• See which requests were identified as bot traffic
• Review which requests were blocked
• Filter by time range, status, or other request attributes to investigate specific incidents