WebDecoy
The bot detection layer your stack is missing.
WebDecoy launched on December 22, 2025 with 5 votes, #2,550 of 11,628 launches that month.
What it does
WebDecoy: Multi-Layer Bot Detection & Response Single-layer detection is broken. WebDecoy combines multiple layers so bypassing one triggers another. Client-side fingerprinting catches headless browsers. Server-side SDKs verify tokens and analyze TLS fingerprints. Honeypot traps catch what bots touch and humans don't. Every request gets scored. You decide: log, block, challenge, or redirect with integrations for WAFs, SIEMs, and webhooks. Try it now.
Stop AI scrapers with honeypot decoys, behavioral analysis, and an edge sensor that catches crawlers JavaScript can
Deception catches the bots your analytics miss. One actor identity follows them across every IP they rotate to. Invisible decoy links and fake API endpoints that no real visitor can reach. When one is touched you have a confirmed bot: not a score, not a guess. Zero false positives, by construction. Bot Scanner detects headless browsers, automation frameworks, and sophisticated bots that evade traditional detection: mouse entropy, interaction timing, canvas and WebGL signals. A one-click Cloudflare Worker that catches the crawl pass itself: Googlebot, GPTBot, ClaudeBot, and curl. The clients that never run JavaScript, and so were never visible to a page tag. JA4 TLS and device fingerprints…from webdecoy.com
Does a similar job
all alternatives →
IPDetective – An API for IP bot detection2022 · ipdetective.io · ▲68IPDetective collects data from about 60+ different sources such as official cloud provider endpoints and public VPN/Proxy/Tor/Bot net lists. Then aggregates this data into a fast and easy to use API that can be integrated into applications or scripts easily. IPDetective started as a hobby project for my other hobby projects :) and I decided to wrap a simple website around and offer it as a service. Let me know what your thoughts, if you find value in this service or if you have any feature requests.
Detecting adblock, without JavaScript, by abusing HTTP 103 responses2024 · github.com · ▲108Detect adblockers without Javascript by abusing early hints - Mechazawa/103-early-anti-adblock
An open source access logs analytics script to block bot attacks2025 · github.com · ▲37This is a small PoC Python project for web server access logs analyzing to classify and dynamically block bad bots, such as L7 (application-level) DDoS bots, web scrappers and so on. We'll be happy to gather initial feedback on usability and features, especialy from people having good or bad experience wit bots. *Requirements* The analyzer relies on 3 Tempesta FW specific features which you still can get with other HTTP servers or accelerators: 1. JA5 client fingerprinting (https://tempesta-tech.com/knowledge-base/Traffic-Filtering-b...). This is a HTTP and TLS layers…
Fingerprinting browser-impersonating bots w/o JavaScript (open spec)Mar 2026 · github.com · ▲6I've published an open specification for a detection method I'm calling RQ4 (Request Context Fingerprinting). It analyzes whether HTTP request headers are logically consistent with real browser behavior - not just what headers are present, but whether they make sense together given the request context.
I built an HTTP client that perfectly mimics Chrome 142Nov 2025 · github.com · ▲39BoringSSL and nghttp2. Matches JA3N, JA4, and JA4_R fingerprints. Supports HTTP/2, async/await, and works with Cloudflare-protected sites. Not trying to compete with curl_cffi - just a learning project that turned into something functional.
DetectZeStack — Tech Stack Detection APIFeb 2026 · detectzestack.com · ▲2Detect any website's tech stack with a single API call
More ai this month
the category →



Paintings by AI models: programs run through a simulation of oil paint.
AI · 20d ago · stillwet.art
PixVerse R2▲381A real-time world model you can explore and change
AI · 29d ago · world.pixverse.video

Source: Product Hunt launch ↗
Launched alongside, December 2025
the whole month →- GP
Life & fun · Dec 2025 · dosaygo-studio.github.io

Hi everyone! My name's Luke and I made the original Jmail here alongside Riley Walz. We had a ton of friends collaborate on building out more of the app suite last night in lieue of DOJ's "Epstein files" release. Please AMA!
Life & fun · Dec 2025 · jmail.world

PlanEat AI▲733AI turns your health goals into a 7-day menu & grocery list
AI · Dec 2025 · planeatai.com

Community, All the HN belong to you. This is an archive of hacker news that fits in your browser. When I made HN Made of Primes I realized I could probably do this offline sqlite/wasm thing with the whole GBs of archive. The whole dataset. So I tried it, and this is it. Have Hacker News on your device. Go to this repo (https://github.com/DOSAYGO-STUDIO/HackerBook): you can download it. Big Query -> ETL -> npx serve docs - that's it. 20 years of HN arguments and beauty, can be yours forever. So they'll never die. Ever. It's the unkillable static archive of HN and it's…
Dev tools · Dec 2025 · hackerbook.dosaygo.com
