stylobot stylobot v8 Paid, self-hosted editions are now available. From £25/mo.
See the plans Start a free trial
stylobot Logo stylobot
a mostlylucid product
Fast behavioural bot protection. Zero usage charges.

Fast behavioural bot protection. Zero usage charges.

Self-hosted protection that runs anywhere: from a Raspberry Pi to a Kubernetes cluster. Stop wasting compute on scrapers and click fraud.

StyloBot watches what a client actually does: request timing, path transitions, fingerprint integrity, and session shape. Up to 57 detectors run in waves, so the pipeline does only the work a request's evidence needs. No SaaS. Nothing about your visitors leaves your environment. How behavioral inference works →

The complete detection core is FOSS: free and easy to run. Commercial licences fund its continued development and add manageability, reporting, and advanced features at predictable licence pricing. No request, event, seat, bandwidth, or traffic-volume charges. A DDoS is an availability problem, not an invoice. See the benchmark methodology and recorded results →

Live · Your Detection Bot
17:09:01 · 0ms

Top Bots

Name Bot % Threat Hits 1h Seen
US Bingbot 437 60m: 2 bot · 0 human 33s
DE Serpstatbot Crawler serpstatbot.com 248 60m: 0 bot · 0 human 15h 0m
US Googlebot 232 60m: 3 bot · 0 human 5m
US Applebot 184 60m: 0 bot · 0 human 3h 23m
GB Unknown 144 60m: 0 bot · 0 human 10h 34m
1–5 of 96
1 …
Not a demo. Your real request, live detection engine.
Non-blocking on stylo.bot. Every detector scores you and the dashboard records it. This demo throttles bots but blocks nothing, so you can watch the engine work on your own request. For production we recommend blocking confirmed bots. Each self-hosted install sets its own action per policy (allow, throttle, challenge, block).
Live dashboard Free & open source GitHub Repo Compare licences
License: AGPL-3.0 NuGet Docker Release
ZERO usage charges

A licence can be paid. Your traffic is never metered.

No request or seat charges

A traffic spike or DDoS does not increase your StyloBot bill.

No telemetry tax

Your visitors' data never leaves your environment.

Free engine, paid management

FOSS stays easy to run. Commercial funds it and adds reporting and advanced controls.

Add StyloBot to what you already run

Pick your setup. Same engine every time.

ASP.NET Core app

I have a .NET web app

Add the NuGet package. The middleware embeds in-process, no separate proxy.

Show me →

nginx / Caddy or a VPS

I have any app on a server

Run the StyloBot executable as a reverse proxy or daemon in front of it.

Show me →

Docker Compose

I have an existing compose stack

Add StyloBot as a service in front of your app container.

Show me →

Kubernetes / multi-domain

Commercial

I have a cluster or a fleet

Deploy the gateway with Helm. Multi-domain management and fleet included.

Show me →

Just kicking the tyres? docker run -p 8080:8080 scottgal/stylobot-all:latest or read the getting-started guide.

Self-hosted
runs in your VPC, your data stays there
Full decision trace
signals, deltas, action, policy
49 detectors
layered protocol + behavior signals
Privacy-aware
HMACed IDs + stripped UAs

Choose your documentation path

Use the customer docs for setup, configuration, and rollout, and the GitHub repo for deep detector internals, architecture, and API references.

Getting started How it works Configuration Repo Docs Index

AI without LLMs in the hot path.

The intelligence is emergent: small detectors, behavior memory, signatures, reputation, and feedback loops combine into decisions that improve as traffic repeats. LLMs are optional side analysis, not the thing you depend on for every request.

✓
Useful on day one. Start in observe mode and tune from real traffic
✓
Every decision has a trace: raw signals, derived signals, detector deltas, aggregation, and policy action
✓
Session behavioral analysis catches automation that rotates IPs, user agents, and fingerprints

Per-request output — this request, live

probability
100 %
confidence
100 %
risk band
VeryHigh
action
block

Plus detector breakdown, raw and derived signals, threat score, intent classification, policy action, and narrative reasoning.

Built for people who want to see the machinery.

Most bot products hide the decision in a vendor cloud. StyloBot gives you the runtime, the signal trace, and the policy controls inside your own deployment.

StyloBotDataDomeCloudflareHUMAN
Licence and usage modelFree FOSS / predictable commercial licenceSales-led SaaSEnterprise planCustom
Self-hostedYesNoNoNo
Open sourceFull engineNoNoNo
Usage chargesNeverOftenPlan-dependentCustom
Raw traffic sharingNot requiredCloud-scoredCloud edgeCloud-scored
Policy-controlled frictionYesYesYesYes
See full pricing

From the development blog

How StyloBot was built and the thinking behind it.

All articles →
Core concept
Behavioral inference systems
The architectural idea behind StyloBot: inferring intent from request behavior rather than matching patterns. Why that distinction matters for accuracy and for false-positive rates.
All bot detection posts
The full development series
30+ articles covering detector design, signal composition, LLM integration, HNSW session clustering, fingerprinting, and the commercial layer. Written as StyloBot was built.
Browse all articles →

Pay for the licence, not your traffic.

FOSS is free and easy to run. Commercial licences fund continued FOSS development and pay for the dashboard, manageability, reporting, and advanced features. There are no per-request, per-seat, bandwidth, or traffic-volume charges, so a DDoS does not create a larger StyloBot bill. Try the commercial controls for 30 days with no card.

Compare licences Start free trial View source on GitHub

Open source and charity projects: contact us for a complimentary license.