Mitigate L7 DDoS attacks
By declining suspicious traffic at the application layer, BotBye! prevent heavy backend processing and reduce load on core systems — so real users requests still get through.Fake Reviews. Real Reputation Damage
Coordinated bot attacks generate fake negatives that sink product ratings and drive customers away. Detect and block manipulation instantlyPolo shirtMen's clothing
4
Luk_111
Bots Brute-Force Your Promo Codes
Automated scripts guess and redeem discounts at scale, turning campaigns into losses. Stop code-cracking with per-code rate limits, one-time tokens, and real-time abuse detectionShirtSize S
HoodieSize L
JeansSize M
Checkout
Promocode
—
Subtotal$159.97
Delivery$3
Total$162.97
Testers Today, Chargebacks Tomorrow
Card testing executed automatically by bots, not real users. Stop automated authorization attempts before they escalate into large‑scale fraud.Card Number
0123456789
0123456789
0123456789
0123456789
0123456789
0123456789
0123456789
0123456789
0123456789
0123456789
0123456789
0123456789
0123456789
0123456789
0123456789
0123456789
Card Name
John Doe
Expiry Date
02/29
CVV
123
How it works?
Every request is protected with a one-time token generated by BotBye!mysite.com
BotBye Client-side Integration
Secured Request
Challenges Runner
api.botbye.com
mysite.com (Backend)
BotBye Server-side Integration
Your Logic With Response
Start using bot protection on the client-side
Integrate BotBye easily on the client side via the JS Tag or NPM integration.Read the docsNPM
JS Tag
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
import {
initChallenges,
runChallenge
} from "botbye-client";
initChallenges({
// Project Client Key
clientKey: "00000000-0000-...",
})
// Add token to request
const makeSomeCall = async () => {
const token = await runChallenge();
return fetch(
'https://somedomain.com',
{
method: "POST",
headers: {
"BotBye-Token": token
}
})
}
Back-End API Response
Make decision-making easier — BotBye will return an response, and you can automatically approve or decline requests in real time to keep your process seamless and secure.Read the docs1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
{
"reqId": "f77b2abd-c5d7-....",
"result": {
// Bot detected
"isAllowed": false
},
"error": null,
// Project > More > API Extra Data
"extraData": {
"ip": "192.168.1.1",
"asn": "AMAZON-AES",
"country": "USA",
"browser": "Android WebView",
"browserVersion": "66.0",
"deviceName": "Galaxy S9",
"deviceType": "Mobile Phone",
"deviceCodeName": "SM-G960F",
"platform": "Android OS",
"platformVersion": "8.0"
}
}