30 checks in Security & Privacy. Automated Its subsection has a live automated checker in the engine.
| ID | Check | Passes when |
|---|---|---|
| 7.6.01 | Detect non-human traffic patterns | Detected |
| 7.6.02 | Validate bot fingerprinting enabled | Enabled |
| 7.6.03 | Validate IP reputation checks functioning | Functioning |
| 7.6.04 | Detect high-frequency crawler bursts | None |
| 7.6.05 | Validate ASN-based bot filtering active | Active |
| 7.6.06 | Validate detection for scripted headless browsers | Detected |
| 7.6.07 | Detect traffic with missing JS execution | Minimal |
| 7.6.08 | Validate known good bots whitelisted | Whitelisted |
| 7.6.09 | Validate challenge pages for unknown bots | Challenged |
| 7.6.10 | Compute Bot Identification Accuracy Score | Finalized |
| ID | Check | Passes when |
|---|---|---|
| 7.6.11 | Validate rate limiting thresholds configured | Configured |
| 7.6.12 | Detect rate limit bypass attempts | None |
| 7.6.13 | Validate IP throttling functional | Functional |
| 7.6.14 | Detect proxy rotation patterns | Minimal |
| 7.6.15 | Validate burst traffic isolated | Isolated |
| 7.6.16 | Validate API endpoints protected by rate limits | Protected |
| 7.6.17 | Validate per-user rate limits enforced | Enforced |
| 7.6.18 | Validate CDN-level throttling active | Active |
| 7.6.19 | Detect geo-pattern rate limit triggers | Monitored |
| 7.6.20 | Compute Rate Limiting & Load Protection Score | Finalized |
| ID | Check | Passes when |
|---|---|---|
| 7.6.21 | Validate major AI bots recognized (OpenAI, Google, Anthropic) | Recognized |
| 7.6.22 | Validate AI bots restricted or allowed according to policy | Enforced |
| 7.6.23 | Validate robots.txt matches bot access policy | Matching |
| 7.6.24 | Detect unauthorized or spoofed AI crawlers | None |
| 7.6.25 | Validate custom bot segments tracked separately | Segmented |
| 7.6.26 | Validate known harmful bots fully blocked | Blocked |
| 7.6.27 | Validate partner bots allowed | Allowed |
| 7.6.28 | Validate JS-challenge flow for semi-legit bots | Active |
| 7.6.29 | Detect bots abusing login/signup endpoints | None |
| 7.6.30 | Compute Bot Access Classification Master Score | Finalized |
← 7.5 Security Headers7.7 PII Data Exposure Prevention →
A Deep Audit scores every check here that applies to your page, then an AI pass of up to 150 checks. Included on Pro and Ultra, or $9 for one audit.
See plansMachine-readable: catalog totals and the full catalog as JSON (IDs, section, weight, status).