BotD is an open source library that we created to make it easy for every developer to detect basic bots in their web apps.
It is available under a permissive MIT license and will always be free for developers and commercial use.
We keep the open-source BotD package healthy with timely critical fixes and regressions addressed as fast as possible. That said, the near-term roadmap is stability-only, so new features are unlikely to land soon. Please plan accordingly if you depend on upcoming enhancements.
For more demanding applications we created a professional API-based bot detection software that is called Fingerprint Pro Bot Detection.
<script>
// Initialize an agent at application startup, once per page/app.
const botdPromise = import('https://openfpcdn.io/botd/v2').then((Botd) => Botd.load())
// Get detection results when you need them.
botdPromise
.then((botd) => botd.detect())
.then((result) => console.log(result))
.catch((error) => console.error(error))
</script>npm i @fingerprintjs/botd
# or
yarn add @fingerprintjs/botdimport { load } from '@fingerprintjs/botd'
// Initialize an agent at application startup, once per page/app.
const botdPromise = load()
// Get detection results when you need them.
botdPromise
.then((botd) => botd.detect())
.then((result) => console.log(result))
.catch((error) => console.error(error))Fingerprint Bot Detection API is a professional bot detection API service that processes all information server-side and transmits it securely to your servers.
Fingerprint Bot Detection API provides both browser and server-side APIs that make the process of bot detection fast and secure. When using the Bot Detection, use the browser JavaScript SDK to detect browser automation tools and server-side Automation Intelligence API to detect more bot bot types, such as AI agents, AI assistants, and AI/LLM crawlers.
The commercial product combines vast amounts of auxiliary data that bots expose (network properties, browser overrides) to be able to reliably deduplicate real users from automated software, resulting in the detection of popular AI tools, browser automation tools, their derivatives and plugins.
A big advantage of the paid product is that it's able to distinguish good bots from bad ones that allow you to block malicious traffic without blocking search engine crawlers, monitoring workers, etc.
Full product comparison:
1. Fingerprint Pro is GDPR and CCPA compliant as the data processor. You still need to be compliant as the data controller and use the bot detection for fraud prevention under legitimate interest or ask for user consent.
Bot detection API result example:
{
"bot": "bad",
"bot_type": "headless_chrome",
"bot_info": {
"category": "browser_automation",
"provider": "chromium/chromium",
"name": "ChromeHeadless",
"identity": "unknown",
"confidence": "medium"
}
}📕 Fingerprint Bot Detection API Docs
See the Contribution guidelines to learn how to contribute to the project or run the project locally. Please read it carefully before making a pull request.
- FingerprintJS -- browser fingerprinting library that queries browser attributes and computes a hashed visitor identifier from them
- Fingerprint Android -- Android identification and fingerprinting in native apps
- Fingerprint iOS -- iOS identification and fingerprinting in native apps
© 2026 FingerprintJS, Inc