Features
Depth, not checklists.
Four pillars carry the entire platform. Each one is built to be boring, reliable, and fast, the way security should be.
Behavioral biometrics
Every human moves differently. Pointer curvature, hesitation, acceleration, keystroke rhythm. BotShield builds a live behavioral profile in the first seconds of a session and scores it against known bot signatures.
- Pointer entropy and curve analysis
- Keystroke cadence profiling
- Session timing heuristics
Token-based verification
Passing users receive a signed JWT with a five-minute lifespan. Your backend verifies it against your secret key. The browser never sees anything sensitive, and replayed tokens die quickly.
- HS256 signed, short expiry
- One-call backend verification
- Per-project secret keys
Transparent analytics
A live dashboard fed directly by your production database. Requests, blocks, score distributions, and origins, updated in real time with no sampling and no rounding tricks.
- Real-time streaming updates
- Per-project breakdowns
- Exportable event logs
Origin pinning and abuse control
Bind your API key to your domains. If someone lifts your key and drops it on another site, requests simply fail. Rate limits and reputation tracking handle the rest.
- Domain allow-lists
- IP reputation memory
- Sensitivity presets per project