ReferenceGlossary
Bot management
Telling automated traffic from people and handling it on its own terms: challenging a suspicious client, rate limiting it, or blocking it, rather than failing every rule match outright.
Security
In Quorum#
Bot management research halves a WAF’s false positives and keeps its block rate. A suspicious client gets a challenge, so a real user it flags still loads the page. Bots still earn nothing and still cost capacity when they get through, so the WAF stays the first place to stop them.
Design#
Read next#
WAF (web application firewall), Rate limiting, DDoS (distributed denial of service), Load shedding