General crawler blocking
Python clients, scraping libraries, Selenium, Playwright, Puppeteer, HeadlessChrome, and bare Chromium patterns are scored before protected routes respond.
Low-cost crawler defense
Block AI bots, Python scrapers, Selenium, Playwright, headless Chromium, and noisy path probes without buying an enterprise WAF.
Defense layers
Python clients, scraping libraries, Selenium, Playwright, Puppeteer, HeadlessChrome, and bare Chromium patterns are scored before protected routes respond.
The snippet collects lightweight browser signals so middleware can tell a real browser from a static HTML fetch.
Optional encoded content placeholders make static parsers see less useful HTML until a real browser executes the snippet.
python-requests, urllib, Scrapy, curl, wget, axios, node-fetch, Java, Go HTTP clients
Selenium, Playwright, Puppeteer, HeadlessChrome, bare Chromium, webdriver signals
GPTBot, ClaudeBot, PerplexityBot, CCBot, Bytespider, Applebot-Extended
Googlebot and other known search bots are tagged separately so they can pass by default.
.env, .git, WordPress, debug, actuator, phpMyAdmin, server-status, and config scans
Forwarded chains, cloud infrastructure headers, anonymous proxy reputation, and burst patterns
Plans
Special launch period: Starter is 50% off at $10/mo.
$0/mo
Free forever
1 site / 1,000 requests per month
Start in monitor mode and see which crawlers are hitting your site before you pay.
Start free$10/mo
was $19/mo
Limited launch price, 50% off
3 sites / 100k requests per month
Block obvious scripts, headless browsers, AI crawlers, and noisy path probes for early products.
Choose Starter$49/mo
Annual includes 2 months free
10 sites / 1M requests per month
Add proxy/datacenter pressure, longer logs, quota reporting, and safer rollout controls.
Choose GrowthContact us
Custom terms
Custom sites / 5M+ requests per month
Custom thresholds, onboarding help, and retention for serious production traffic.
Contact salesMonthly quotas reset every month. Every plan includes a site allowance, and additional protected sites can be added as paid site seats once billing is enabled.
Pricing and performance
Public claims should stay honest: use the lab replay number as a benchmark, not a guarantee. In the current Noonchies replay, Voidek blocked or logged 9 of 9 unwanted crawler scenarios while allowing normal browser traffic and Googlebot.
| Dimension | Voidek | Enterprise WAF | Basic CAPTCHA |
|---|---|---|---|
| Setup path | Script + middleware | DNS/WAF migration | Widget-only install |
| Primary cost | Free start, $19/mo paid entry | Enterprise contract | Usually free or bundled |
| Performance shape | Light browser collect plus one decision call on protected routes | Edge fast, but policy tuning can be heavy | Fast challenge, limited policy context |
| Crawler friction | UA, headers, webdriver, static HTML shielding, route scoring, and rate pressure | Broad WAF rules | Human check only |
| Best fit | Small sites that need crawler pressure quickly | Large teams with security ops | Simple form abuse gates |
Install
Pick a language, copy the snippet, and start in monitor mode before turning on challenge or block.
const decision = await fetch("https://api.gravitwave.com/voidek/v1/decide", {
method: "POST",
headers: {
"content-type": "application/json",
"authorization": "Bearer " + process.env.VOIDEK_API_KEY
},
body: JSON.stringify({
siteId: "SITE_ID",
path: location.pathname,
headers: Object.fromEntries(new Headers())
})
}).then((response) => response.json());Next features
Get a digest when AI crawlers, headless browsers, or quota spikes appear.
Compare robots.txt intent with real traffic and Voidek decisions.
Run scheduled Playwright, requests, and search-bot probes against protected paths.
Send block/challenge events into Slack, Discord, or your incident queue.

Contact us
For private beta help, integrations, or Pro pricing, email voidek.dev@gmail.com.