Edge Protect · A Bot Agent

Bad Bots Stop
at the door.

Edge Protect is a bot agent, the agentic bouncer of the ecommerce world. It reads every session at the edge, turns away the AI-powered bad bots that pollute your data and ad spend, and waves the good ones through. Full service, done for you: no code changes, no engineering lift.

Book a Demo →

10B+Bots blocked annually

<24 hrsTo a clean baseline

0Impact on SEO + AEO crawlers

Daily bot sessions 300,000

Edge Protect deployed mid-chart. Blocked within hours. agent live

300+ brands run on Nostra ai

How to spot bot traffic on your store.

Before you block anything, confirm what you have. These are the four charts we see across stores before Edge Protect goes live. If one or more look familiar, a meaningful share of your traffic is automated.

The Finding · Cloudflare

~50%

of web traffic could be bots

Cloudflare's Bot vs Human analysis, measured across traffic on its own network, found that roughly half of all web traffic isn't human, and about 30% of total traffic is bad bots. Some of it you want. The rest clicks your ads, inflates your sessions, and quietly erodes your ROAS.

Source: Cloudflare, Bot vs Human Report

Bot signal 01

Spikes from unknown locations

Sessions surge from countries you have never sold to, or direct traffic at 3am with zero orders attached. Real demand does not arrive in vertical lines.

Bot signal 02

Fake email signups climb

Bots fill your forms with addresses that never open and never click. Your list grows, your open rate falls, and your sender reputation pays for it.

Bot signal 03

CVR drops, no site changes

You did not change prices, pages, or offers, but conversion keeps sliding. Bot sessions inflate the denominator while buying nothing.

Bot signal 04

Ad costs climb, ROAS falls

Clicks and CPCs rise while return on ad spend falls. Click fraud spends your budget, and bot-polluted audiences make retargeting worse.

How the bouncer works the door.

Evaluate

Reads every session

Each visit is scored across multiple live signals: IP reputation and velocity, browser and device behavior, navigation flow, and event sequencing. Static IP and geography rules can't keep up with modern bots. Behavior doesn't lie.

Classify

Spots the automation

No single signal decides the outcome. AI weighs the full pattern to separate real shoppers from bad bots, including the ones that rotate IPs and execute JavaScript to look human.

Filter

Blocks the bad, welcomes the good

Bad bots are filtered before they reach your site, your analytics, or your ad audiences. Verified crawlers like Googlebot, ChatGPT, and Claude pass through untouched, so your SEO and AEO never suffer. And when an attack starts, the agent tells you, not your dashboards three weeks later.

edge-protect · live agent live

Not a firewall. A user agent.

Static bot protection hands you rules and a dashboard, then leaves you to it. Edge Protect is a user agent: it watches your door, alerts you the moment you're attacked, and makes the updates for you while the attack is still happening.

Edge Protect user agent

Basic bot protection

Detection method

Real-time behavioral AI

Static IP and geo rules

Catches AI-powered bad bots

Lets good bots through (Claude, ChatGPT, Googlebot)

Allows only real shoppers

Often blocks them

Alerts you when you're attacked

You find out in the dashboard

Adapts for you during an attack

Manual rule updates

Site speed impact

Zero, runs at the edge

Extra lines of code on every page

Setup

Live in under a day, zero code

Engineering required

From first block to a new baseline.

Blocking starts within hours, not weeks. Then the job becomes holding the line while attackers cycle infrastructure and try again.

01Hour 1

The bouncer takes the door

A DNS-level change puts Edge Protect in front of your storefront. Every session is scored at the edge before it can reach your origin or fire an analytics event.

02Day 1

Baseline restored

Baltic Born went from 300,000+ bot sessions a day to single-digit thousands within 24 hours. Nixon cut bot traffic by roughly 90% within hours of going live.

03From then on

The line holds

Attackers probe, rotate infrastructure, and try new paths. The agent adapts alongside them. Baltic Born's baseline has held for 80+ days and counting.

Edge Protect's track record.

Numbers from the 300+ brands running on Nostra ai today.

10B+

bad bots turned away every year.

Every one of them was about to pollute a dashboard, drain an ad budget, or probe a checkout. The bouncer works your door around the clock, done for you.

<24 hrsTo a clean traffic baseline after deployment

0Impact on SEO and AEO crawlers, zero code changes

Edge Protect

Baltic Born ended a 300K-a-day bot attack overnight

A coordinated scraping surge pushed past 300,000 bot sessions in a single day, drowning every dashboard the team relied on. Edge Protect deployed April 24. Within 24 hours, bot volume fell to single-digit thousands, and the baseline has held for 80+ days since.

"We turned Edge Protect on April 24, right as our bot traffic was crossing 300,000 sessions in a single day. Within hours, the bots stopped reaching the storefront. Three months later, our new baseline is still the lowest it's been in months, and our dashboards finally reflect what's actually happening on the site."

Kate B., Director of Digital Product, Baltic Born

Read the full story →

300k+Bot sessions on the peak day

~99%Reduction within 24 hours

80+ daysAt baseline and counting

Edge Protect

Nixon cut bot traffic by roughly 90% within hours

Weeks of bot surges pushed sessions to five times normal volume and buried the real conversion rate. Edge Protect came online May 8. You can pick the date out of the chart without a label.

"We turned Edge Protect on May 8 and the bot traffic just stopped getting through. Three weeks later, our baseline is still the lowest it's been in two months, and our dashboards finally reflect what's actually happening on the site."

Shelly Wilson, Senior Advisor, Nixon

Read the full story →

~90%Drop in daily bot sessions

<24 hrsFrom deployment to effect

~10xMeasured CVR recovery by mid-May

Edge Protect · Edge Delivery

U Beauty killed 95% of bot traffic, and got faster for free

Thousands of daily bot sessions were taxing the origin and polluting every metric. After Edge Protect, the only bots still reaching the site are verified crawlers like Googlebot, ChatGPT, and Claude. Removing the bot load also made the site faster for real shoppers.

"We put over 100 clinical studies into every formula. Our website should perform with that same level of precision. Nostra gave us speed we could feel and analytics we could finally trust."

AJ Patel, SVP of Global Growth, U Beauty

Read the full story →

95%Malicious bot traffic eliminated

19.3%Faster TTFB with bot load removed

30 daysTo the full result

Questions, answered.

Will Edge Protect block Google or AI crawlers?

No. Verified good bots like Googlebot, Bingbot, ChatGPT, and Claude are let through, so SEO and AEO are unaffected. The bot traffic you keep is the kind that keeps you indexed, ranked, and cited in AI answers.

How fast does it start working?

Blocking begins within hours of a DNS-level change. Baltic Born went from more than 300,000 bot sessions a day to normal baseline within 24 hours, and Nixon cut bot traffic by roughly 90% within hours.

How does it tell bad bots from real shoppers?

Every session is scored across live signals: IP reputation and velocity, browser and device behavior, navigation flow, and event sequencing. AI weighs the full pattern, so bots that rotate IPs and execute JavaScript still get caught.

Why do bad bots matter if customers can still shop?

The damage sits in the data layer. Bad bots inflate sessions, distort conversion rates, pollute retargeting audiences, and burn ad spend on traffic that will never buy. Marketing decisions end up running against a corrupted denominator.

What happens when attackers change tactics?

They probe, rotate infrastructure, and try new attack paths. Edge Protect adapts alongside them. Baltic Born's baseline has held for 80+ days with no sustained attack breaking through.

Does it require engineering work?

No. Edge Protect deploys at the DNS level with zero code changes and no downtime, and starts filtering the same day.

Put the bouncer at your door.

300+ brands already run behind Edge Protect. It's full service: deploy once, blocking starts within hours, and your dashboards go back to telling the truth.

Book a Demo →

How to spot bot traffic on your store.

of web traffic could be bots

Spikes from unknown locations

Fake email signups climb

CVR drops, no site changes

Ad costs climb, ROAS falls

How the bouncer works the door.

Reads every session

Spots the automation

Blocks the bad, welcomes the good

Not a firewall. A user agent.

From first block to a new baseline.

The bouncer takes the door

Baseline restored

The line holds

Edge Protect's track record.

Baltic Born ended a 300K-a-day bot attack overnight

Nixon cut bot traffic by roughly 90% within hours

U Beauty killed 95% of bot traffic, and got faster for free

Questions, answered.

Put the bouncer at your door.

The Edge in Ecommerce