CrowdSec WAF based on a custom Caddy build has been connected. Traffic analysis and blocking occur before the request reaches the service. Whitelist rules are configured for legitimate search and AI bots (Googlebot, GPTBot, Claude, Bing, and others) — they pass without restrictions. The whitelist is updated automatically when new bots appear.