3 ms·
Hi, More than 50% of web traffic is bots. There is no behavioral standard. Cloudflare Web Bot Auth (now at IETF) proves WHO a bot is. But identity alone doesn
by botconduct 7mo ago
Hi,
More than 50% of web traffic is bots. There is no behavioral standard.
Cloudflare Web Bot Auth (now at IETF) proves WHO a bot is. But identity alone doesnt help. A verified bot can still ignore robots.txt, burst at 100 req/sec, or scrape PII.
BCS (Bot Conduct Standard) proves HOW a bot behaves.
The test: 20+ pages, 15 adversarial traps (honeypots, hidden links, PII bait, timing traps, redirect chains, opt-out signals). Your bot crawls naturally. Gets scored 0-100.
Live results:
- Uncertified bot: 19/100
- Certified bot: 77/100
Output:
X-Bot-Conduct: score=92; version=0.1; signature=xyz
A simple header any WAF or CDN can read.
Classification:
90+ Trusted / 70-89 Acceptable / under 70 High Risk
Identity = passport.
BCS = background check.
Open source. Free. Live now.
https://botconduct.org https://botconduct.org
https://github.com/alemizrahi1/botconduct-obcs https://github.com/alemizrahi1/botconduct-obcs