Introducing BotID, invisible bot filtering for critical routes
Vercel launches BotID, an invisible bot-filtering layer designed to block browser automation on critical routes such as checkouts, logins, and LLM-powered endpoints.
Modern sophisticated bots don’t look like bots. They execute JavaScript, solve CAPTCHAs, and navigate interfaces like real users. Tools like Playwright and Puppeteer can script human-like behavior from page load to form submission. Traditional defenses like checking headers or rate limits aren't enough. Bots that blend in by design are hard to detect and expensive to ignore.
Enter BotID: A new layer of protection on Vercel. Think of it as an invisible CAPTCHA to stop browser automation before it reaches your backend. It’s built to protect critical routes where automated abuse has real cost such as checkouts, logins, signups, APIs, or actions that trigger expensive backend operations like LLM-powered endpoints. Read more