Website Security & Threat Management
Moving past bots vs. humans

Moving past bots vs. humans

4/21/2026 · Thibault Meunier

What this post added

This post discusses the evolution of web protection beyond the 'bots vs. humans' dichotomy. It highlights how emerging AI clients bypass traditional browser-based interactions, disrupting the publisher-user balance. The post details the client-server model and current bot management techniques, which rely on passive and active client signals, as well as server signals. It introduces the 'rate limit trilemma' (decentralized, anonymous, accountable) and argues that the focus should shift to detecting intent and behavior rather than just identifying humans or bots, especially in light of new clients that don't exhibit traditional browser behaviors.

Read the original post ↗