Will it block my monitoring or my own servers?

Add their IP range or AS number as a trusted network. Trusted networks skip the network rules and the datacenter penalty; every other signal still applies.

What do real visitors see?

Nothing, unless their score is low. Then they see a one-second browser check — no image puzzles — and are cleared for 30 minutes.

Does it work with WebSockets and APIs?

Yes. API paths can be exempted or given their own rate limits, and WebSocket upgrades pass through once the connection is scored.

← All features

Bot detection & fingerprinting

Bot protection that scores every request, not just the obvious ones

Most bot traffic doesn't announce itself. It sends a browser User-Agent, comes from a rented cloud server, and moves faster than any person could. Greenproxy looks past the headers a client can fake and scores each request on the things it can't.

Get a quote →See the panel

What you get

TLS & HTTP/2 fingerprinting

JA3/JA4 and HTTP/2 SETTINGS fingerprints catch tools that claim to be Chrome but negotiate TLS like Python. This runs before a single byte reaches your origin.

Network intelligence

Every visitor's address is matched to its network — residential ISP, hosting provider, commercial VPN or Tor exit — from a database of over a million ranges. Set a policy per category: allow, challenge or block.

Behavioural scoring

Request rate, path patterns, missing browser headers and session history combine into one bot score. Low scores get a managed challenge; hopeless ones get a 403 or a tarpit.

Verified good bots

Googlebot, Bingbot and other search crawlers are verified by reverse DNS, so protecting your site never costs you search ranking.

How it works

In the panel

Turn Bot Protection on per domain, pick a sensitivity (low, medium, high or Under Attack), and choose what happens to hosting, VPN and Tor networks. Every decision is logged as a security event with the reasons, so you can see exactly why a request was challenged and trust a network with one click if it was a false positive.

Questions

Will it block my monitoring or my own servers?: Add their IP range or AS number as a trusted network. Trusted networks skip the network rules and the datacenter penalty; every other signal still applies.
What do real visitors see?: Nothing, unless their score is low. Then they see a one-second browser check — no image puzzles — and are cleared for 30 minutes.
Does it work with WebSockets and APIs?: Yes. API paths can be exempted or given their own rate limits, and WebSocket upgrades pass through once the connection is scored.