Bot Detection
Tell automated traffic from real people in one call.
About this API
Classify a request as human, benign crawler, or malicious automation using device fingerprinting, behavioural signals, network reputation, and headless-browser detection. Returns a score with reason codes rather than an opaque verdict.
Common use cases
Quickstart
Every Zephiel API uses the same base URL, the same key header, and the same error envelope.
curl -X GET "https://zephiel.com/api/v1/bot-detection/classify" \
-H "X-Zephiel-Key: $ZEPHIEL_API_KEY" \
-H "Accept: application/json"Example response
{
"verdict": "automated",
"score": 91,
"reasons": ["headless_browser_signature", "datacentre_asn", "impossible_mouse_path"],
"crawler": null,
"latency_ms": 34
}/v1/bot-detection/classifyScore a single request/v1/bot-detection/reputation/{ip}Network reputation for an address/v1/bot-detection/feedbackReport the true outcome to retrainAll endpoints return JSON and accept the X-Zephiel-Key header. Rate limits are enforced per plan and reported in X-RateLimit-Remaining.
Plans can be changed or cancelled at any time. Overage is charged per 1,000 requests rather than hard-blocking your traffic.
Free
100 requests/mo
5 req/min
Free
- JSON output format — included
- HTTPS encryption — included
- API key authentication — included
- Standard endpoints — included
- Community support — included
- CSV output format — not included
- Email support — not included
- Usage analytics and alerts — not included
- 99.9% uptime SLA — not included
- Webhooks — not included
- Priority support — not included
- Custom rate limits — not included
- 99.99% uptime SLA — not included
- Dedicated success manager — not included
- SSO / SAML — not included
- Custom SLA, DPA, and BAA — not included
- Private deployment option — not included
- Volume pricing — not included
Starter
10,000 requests/mo
60 req/min
$38/month
- JSON output format — included
- HTTPS encryption — included
- API key authentication — included
- Standard endpoints — included
- Community support — included
- CSV output format — included
- Email support — included
- Usage analytics and alerts — included
- 99.9% uptime SLA — included
- Webhooks — not included
- Priority support — not included
- Custom rate limits — not included
- 99.99% uptime SLA — not included
- Dedicated success manager — not included
- SSO / SAML — not included
- Custom SLA, DPA, and BAA — not included
- Private deployment option — not included
- Volume pricing — not included
Most popular
Pro
250,000 requests/mo
600 req/min
$152/month
- JSON output format — included
- HTTPS encryption — included
- API key authentication — included
- Standard endpoints — included
- Community support — included
- CSV output format — included
- Email support — included
- Usage analytics and alerts — included
- 99.9% uptime SLA — included
- Webhooks — included
- Priority support — included
- Custom rate limits — included
- 99.99% uptime SLA — included
- Dedicated success manager — not included
- SSO / SAML — not included
- Custom SLA, DPA, and BAA — not included
- Private deployment option — not included
- Volume pricing — not included
Enterprise
Unlimited requests
Custom
$532/month
- JSON output format — included
- HTTPS encryption — included
- API key authentication — included
- Standard endpoints — included
- Community support — included
- CSV output format — included
- Email support — included
- Usage analytics and alerts — included
- 99.9% uptime SLA — included
- Webhooks — included
- Priority support — included
- Custom rate limits — included
- 99.99% uptime SLA — included
- Dedicated success manager — included
- SSO / SAML — included
- Custom SLA, DPA, and BAA — included
- Private deployment option — included
- Volume pricing — included
4.8
12 reviews
Elena Rossi
Product Manager
Now handles stopping inventory scalping too
We adopted Bot Detection for protecting signup and login and ended up using it for stopping inventory scalping as well. Same key, no new contract, no second integration.
Hannah Lindqvist
Platform Lead
Support answered properly
Asked Meridian AI about an edge case in Bot Detection and got an explanation from someone who had clearly read the code, not a link to the FAQ.
Sofia Almeida
Developer
Quietly reliable
Bot Detection has not surprised us once in eight months of production traffic. That is the highest compliment I can pay a dependency.
Samuel Adeniyi
Software Architect
One key made the difference
Adding Bot Detection took ten minutes because the credential already existed. The vendor onboarding we skipped would have taken longer than the integration.
Zainab Yusuf
Product Engineer
Solved Protecting signup and login for us
We brought Bot Detection in for Protecting signup and login and it has not needed revisiting since. The response shape matched the documentation on the first call, which is rarer than it should be.
Tomas Ferreira
Platform Engineer
Fast enough to sit in the request path
38ms median is quick enough that we call Bot Detection synchronously rather than queueing it. That removed a whole background worker from our architecture.
Yuki Tanaka
Backend Engineer
Free tier covered the whole prototype
I built the entire keeping scrapers off pricing pages flow against Bot Detection before anyone had to approve a purchase order. By the time we paid, we already knew it worked.
Grace Mwangi
Head of Product
Replaced a fragile in-house security job
We had a script doing cleaning analytics that broke every few months and only one person understood. Bot Detection replaced it in an afternoon and nobody maintains it now.