Bot Detection That Powers Your Entire Security Stack

import { webdecoy } from '@webdecoy/vercel';
import { NextResponse } from 'next/server';
import type { NextRequest } from 'next/server';

export async function middleware(req: NextRequest) {
  // Check bot score at the edge
  const botScore = await webdecoy.analyze(req);

  if (botScore.isBot) {
    // Block or challenge based on threat level
    if (botScore.threat === 'high') {
      return new NextResponse('Blocked', {
        status: 403
      });
    }
    return webdecoy.challenge(req);
  }

  return NextResponse.next();
}

export const config = {
  matcher: ['/api/:path*', '/checkout/:path*']
};

# CloudFormation Template Excerpt
Resources:
  WebDecoyIPSet:
    Type: AWS::WAFv2::IPSet
    Properties:
      Name: webdecoy-blocked-ips
      Scope: REGIONAL
      IPAddressVersion: IPV4
      Addresses: []  # Auto-populated by WebDecoy

  WebDecoyRule:
    Type: AWS::WAFv2::RuleGroup
    Properties:
      Name: webdecoy-bot-rules
      Capacity: 100
      Rules:
        - Name: BlockDetectedBots
          Priority: 1
          Action:
            Block: {}
          Statement:
            IPSetReferenceStatement:
              Arn: !GetAtt WebDecoyIPSet.Arn

# API Gateway Integration
  ApiGatewayWebACL:
    Type: AWS::WAFv2::WebACLAssociation
    Properties:
      ResourceArn: !Sub arn:aws:apigateway:${Region}
      WebACLArn: !GetAtt WebDecoyWebACL.Arn

sub vcl_recv {
  # Check WebDecoy edge dictionary for blocked IPs
  if (table.lookup(webdecoy_blocked_ips, client.ip)) {
    error 403 "Forbidden";
  }

  # Check bot score header from WebDecoy
  if (req.http.X-WebDecoy-Score) {
    if (std.atoi(req.http.X-WebDecoy-Score) > 80) {
      error 403 "Bot Detected";
    }
  }
}

sub vcl_log {
  # Stream detection events to WebDecoy
  if (req.http.X-Bot-Detected == "true") {
    log "syslog " req.service_id
        " webdecoy :: "
        client.ip " "
        req.url " "
        req.http.User-Agent;
  }
}