Ask HN: Are there any non-email spam/bot detection SAAS providers for websites?
1 comments
Sad to see such a useful question left without an answer. Did you find the answer elsewhere?
I realized it's a core offering from Cloudflare.
Now to convince myself that it's worth competing against them on security-as-a-service simply because they'll be too expensive and/or developers don't want to relinquish entire control of their websites for the added benefit.
Now to convince myself that it's worth competing against them on security-as-a-service simply because they'll be too expensive and/or developers don't want to relinquish entire control of their websites for the added benefit.
Also, people are paid to solve captchas.
Then you have the problem of abusive bots which can be resolved by honeypots & fail2ban, but you have to make sure your logs are aggregated, communicate the firewall rules to your web proxy and then be careful of blocking search engines.
You can also integrate spam blacklists and keep them up to date.
If there aren't any existing providers I'm starting to wonder if there would be an opportunity to create a saas offering which:
* allows developers to integrate simply by plugging into popular web frameworks, protecting not only comments but user/beta signups, etc.
* automatically uses all the best methods for stopping spam & bot abuse, both client and server side, automatically improving its own algorithms
* maintains and automatically distributes a central, real time blacklist database
* provides a great interface for monitoring/reporting and to easily blacklist or whitelist
ps. I had the unfortunate experience of having my submission link timeout as I wrote this submission :)