Small package. Collective defense.

A bad day for bots.
A good day for humans.

Put your domains behind NiceTryBot. See every request and every 404, tag the scanners and the claim farms, and send them to the gym while real people walk straight through.

Self-host it free Browse add-ons

Free up to 10 domains. Source available under the Elastic License 2.0.

A line of disguised robots bounces off a shield and lands on a treadmill

a bot's very short adventure your-site.com

00:00 GET /.env 404

00:01 GET /wp-admin 404

00:02 GET /.git/config 404

↳ Pattern spotted. Off to the gym.

How it works

See it. Decide. Waste their time, not yours.

The edge sees everything

Point a domain at the edge. Every request is logged with its TLS fingerprint, client hints and path, and probes for .env or wp-admin are tagged on sight.

Rules decide

Write rules in a small, readable language, or start from a rule pack. Backtest them against last week's traffic before they touch a real visitor.

The gym does the rest

Suspicious traffic goes to the gym: waiting rooms, captchas, bans that lift on their own. It burns their time and hands you their fingerprints. People never see it.

Follow a visit, step by step

Keep your CDN

Your fraud farm uses home internet. Your IP blocklist doesn't care.

Modern farms rent a thousand residential IPs and use each one once. What gives them away is the machine: one browser image, the same canvas hash, a browser that says it's one thing while its client hints say another. NiceTryBot looks there.

It runs alongside whatever already sits in front of your site. Keep it for caching and DDoS. Add the layer that knows what your form knows.

Every request, every plan: Full per-request logs, per domain, yours to query. Which site gets the most 404s is a click, not a contract.
Verdicts you can explain: Every decision lists the rule and the signals that fired. Put it in front of anyone who asks why.
Fewer challenges for people: Shared IPs don't get punished for their neighbours. Friction goes to the traffic that earned it.
Quiet by default: Blocking teaches an attacker what tripped. The gym keeps them busy and tells them nothing.

The marketplace

Snap on what you need.

The core is free. Add-ons install with Composer and switch on with a licence key, proven offline with our public key. Your install asks us once a day whether the key was revoked, and keeps working if it can't reach us.

All add-ons