From observation to enforcement

See what bots hit your site. Then decide what to do about it.

Free
$0/mo
See what bots hit your site. Passive analytics.
  • Sensor tag (1 line of JS)
  • Bot identification from 172+ registry
  • Conduct score per bot
  • Private dashboard
  • Behavioral traps (optional Step 2)
  • 5,000 API calls/month
  • Active middleware (block/throttle)
  • Custom per-operator policy
  • Real-time alerts
  • API access to raw data
Install free sensor
Business
$199/mo
Full control. Custom policy per operator. API + alerts.
  • Everything in Pro
  • Custom per-operator policy
  • Real-time Telegram/webhook alerts
  • API access to raw data + exports
  • 500,000 API calls/month
  • Priority support (email SLA 24h)
  • Custom integration assistance
Go Business
FeatureFreePro $99Business $199
Sensor analytics + dashboard
Bot identification (172+ registry)
Behavioral traps
Cross-site reputation
Active middleware (block/throttle/challenge)
Default enforcement policy
Email alerts
Custom per-operator policy
Real-time Telegram/webhook alerts
API access + raw data export
Priority support (24h SLA)
API calls/month5,00050,000500,000

Common questions

Do I need to remove Cloudflare?

No. BCS sits on top of your existing stack. Keep Cloudflare for CDN/DDoS/WAF. BCS adds per-operator governance that Cloudflare doesn’t provide.

What happens when I hit the API call limit?

Free tier: dashboard shows a notice that additional bots were detected but details require upgrade. Pro/Business: we notify you at 80% and offer one-click plan upgrade.

Can I downgrade or cancel anytime?

Yes. No lock-in. Cancel anytime. Access continues until end of billing period. Refund policy.

Is $99 worth it if I only have a small site?

If bots cost you bandwidth, content theft, or false positives on Cloudflare — yes. If you just want to see what’s hitting your site, the Free tier is enough.

What’s the difference between the sensor and the middleware?

The sensor (Free) is a JS tag that observes and reports. The middleware (Pro/Business) is server-side code that intercepts every request and acts on it — block, throttle, or challenge — before it reaches your app.