Overview
CAPTCHA is the second-highest secondary barrier after WAF
| Value | |
|---|---|
| WAF | 91% |
| Antibot | 17.4% |
| CAPTCHA | 23.7% |
| JavaScript | 36.1% |
| Rate Limiting | 12% |
| TLS | 16.4% |
WAF covers 91.0% of Timor-Leste's 726 surveyed sites. CAPTCHA is the second-ranked barrier at 23.7%, ahead of JavaScript at 36.1% in volume but notable as the dominant challenge-type secondary barrier. Rate Limiting stands at 12.0%.
Barrier Landscape
JavaScript tops Timor-Leste's active secondary defences
| Value | |
|---|---|
| WAF | 91% |
| Antibot | 17.4% |
| CAPTCHA | 23.7% |
| JavaScript | 36.1% |
| Rate Limiting | 12% |
| TLS | 16.4% |
| Has robots.txt | 79.6% |
| Blocks AI crawlers | 15.3% |
WAF is deployed by 91.0% of Timor-Leste's sites. JavaScript (36.1%) is the top secondary barrier. CAPTCHA (23.7%) leads Antibot (17.4%) by 6.3 points. TLS is 16.4% and Rate Limiting 12.0% across Timor-Leste's 726 sites.
Single-barrier sites are the most common configuration
| % of sites | |
|---|---|
| 0 barriers | 5.5% |
| 1 barrier | 35.4% |
| 2 barriers | 32.8% |
| 3 barriers | 14.7% |
| 4 barriers | 7% |
| 5 barriers | 4% |
| 6 barriers | 0.6% |
5.5% of Timor-Leste's 726 sites present no barriers. One barrier is the modal count at 35.4% of sites, ahead of two barriers at 32.8%. Sites stacking three or more barriers account for 26.3% of the sample.
Most Timor-Leste sites are Simple to access
| Mean recommended tier | |
|---|---|
| All sites | 1.5 |
Timor-Leste's mean recommended browser tier is 1.52 with a Tier 1 median. A Tier 1 median means more than half of the 726 surveyed sites need only simple retrieval. Tiers 3–5 together account for 9.5%.
Nearly six in ten sites are Simple to access
| % of sites | |
|---|---|
| 1 - Simple | 59.9% |
| 2 - Easy | 30.6% |
| 3 - Moderate | 7.3% |
| 4 - Complex | 1.8% |
| 5 - Advanced | 0.4% |
Tier 1 covers 59.9% of Timor-Leste's 726 sites. Tier 2 adds 30.6%, for a combined 90.5%. Tier 3 accounts for 7.3%. Tier 4 and Tier 5 together make up 2.2% of the sample.
robots.txt
AI crawlers are the most-cited bot category in robots.txt
| % of sites | |
|---|---|
| AI crawlers | 16.5% |
| SEO / search indexing | 11.8% |
| SEO audit tools | 13.8% |
| Commercial scrapers | 8.4% |
| Social / content scrapers | 7.7% |
| Archive / research crawlers | 4.4% |
| Monitoring / uptime bots | 0.4% |
AI crawlers are named by 16.5% of Timor-Leste's 726 sites — the highest of any bot category. SEO audit tools follow at 13.8%, then SEO / search indexing at 11.8%. Social / content scrapers reach 7.7%.
Uniform rules and path-mixed rules are nearly tied in posture distribution
| % of sites | |
|---|---|
| Uniform per-agent rules (no path mixing) | 36.9% |
| Path-level mixed rules for same agent | 36.8% |
| Allow-only (no disallow rules) | 3% |
| Mixed AI posture (block some, allow others) | 2.9% |
| Blanket Disallow: / | 2.9% |
36.9% of Timor-Leste's sites use uniform per-agent rules; path-level mixed rules account for 36.8% — a gap of just 0.1 percentage points. The 20.4% without a robots.txt are the complement of the 79.6% that have one.
GPTBot faces the most Disallow rules in Timor-Leste's robots.txt
| Disallowed | Allowed (whitelisted) | |
|---|---|---|
| GPTBot | 13.1% | 2.5% |
| CCBot | 10.1% | 1.1% |
| ClaudeBot | 10.7% | 1.4% |
| Google-Extended | 11% | 1.4% |
| Bytespider | 10.2% | 1% |
| meta-externalagent | 5% | 0.4% |
| ChatGPT-User | 7.3% | 2.2% |
| PerplexityBot | 8% | 2.3% |
| Applebot-Extended | 7.2% | 0.6% |
| OAI-SearchBot | 4.4% | 1.5% |
| anthropic-ai | 5.8% | 1% |
GPTBot is named in a Disallow rule by 13.1% of Timor-Leste's sites. Google-Extended follows at 11.0% and ClaudeBot at 10.7% — the third-highest Disallow rate of any AI agent in the country.
Multiple Timor-Leste sectors all name at least one bot to restrict
| % of sites | |
|---|---|
| Beauty & Cosmetics | 100% |
| Design | 100% |
| Newspapers | 100% |
| Retail | 100% |
| Writing & Editing | 100% |
| Adult | 90% |
| Computer & Video Games | 90% |
| Consumer Electronics | 90% |
| Entertainment | 90% |
| Foreign Language | 90% |
| General | 90% |
| Mass Media | 90% |
| Oil & Gas | 90% |
| Online Services | 90% |
| Publishing | 90% |
Five sectors reach a 100% named-bot Disallow rate in Timor-Leste: every site in Beauty & Cosmetics, Design, Newspapers, Retail, and Writing & Editing names at least one bot to restrict. The next group of ten sectors stands at 90%.
Airlines leads explicit bot Allow rules
| % of sites | |
|---|---|
| Airlines | 90% |
| Publishing | 80% |
| Retail | 80% |
| Travel & Tourism | 80% |
| Oil & Gas | 70% |
| Photography | 70% |
| Gambling | 66.7% |
| Beauty & Cosmetics | 62.5% |
| Advertising & Mktg | 60% |
| Aerospace & Defence | 60% |
| Education | 60% |
| Food & Beverages | 60% |
| Foreign Language | 60% |
| Science | 60% |
| Software & Dev | 60% |
Airlines records the highest named-bot Allow rate in Timor-Leste at 90%. Publishing, Retail, and Travel & Tourism each follow at 80% — naming at least one bot in an explicit Allow rule across their respective sites.
Industry Patterns
Computer Hardware is the hardest sector to access programmatically
| WAF | Antibot | CAPTCHA | JavaScript | Rate Limit | TLS | robots.txt | Blocks AI | Tier | |
|---|---|---|---|---|---|---|---|---|---|
| Computer Hardware | 90% | 30% | 0% | 40% | 20% | 30% | 100% | 30% | Tier 2 |
| Mail & Delivery | 71.4% | 14.3% | 0% | 14.3% | 0% | 14.3% | 71.4% | 14.3% | Tier 2 |
| Military | 60% | 0% | 0% | 20% | 0% | 20% | 60% | 0% | Tier 2 |
| Retail | 90% | 10% | 0% | 60% | 10% | 20% | 100% | 60% | Tier 2 |
| Apparel & Fashion | 90% | 0% | 20% | 50% | 40% | 40% | 80% | 10% | Tier 2 |
| Aerospace & Defence | 80% | 20% | 20% | 20% | 0% | 60% | 80% | 0% | Tier 2 |
| Consumer Electronics | 80% | 10% | 10% | 40% | 10% | 30% | 90% | 10% | Tier 2 |
| Design | 100% | 20% | 30% | 40% | 20% | 30% | 100% | 30% | Tier 2 |
| Education | 100% | 20% | 10% | 20% | 10% | 10% | 70% | 10% | Tier 2 |
| Human Resources | 100% | 57.1% | 71.4% | 28.6% | 42.9% | 14.3% | 42.9% | 14.3% | Tier 2 |
| Adult | 100% | 40% | 30% | 70% | 10% | 20% | 90% | 20% | Tier 2 |
| Banking | 100% | 30% | 10% | 30% | 10% | 10% | 60% | 0% | Tier 2 |
| Hospitality | 100% | 10% | 10% | 100% | 20% | 0% | 70% | 20% | Tier 2 |
| Science | 100% | 40% | 20% | 30% | 20% | 20% | 70% | 10% | Tier 2 |
| Transport & Logistics | 80% | 10% | 0% | 20% | 10% | 10% | 70% | 10% | Tier 2 |
Computer Hardware records the highest mean recommended browser tier in Timor-Leste at 2.40. Mail & Delivery follows at 2.29. Military and Retail both share a mean tier of 2.20. No industry in the sample reaches a Tier 3 median.
Computer & Video Games is the most accessible sector
| WAF | Antibot | CAPTCHA | JavaScript | Rate Limit | TLS | robots.txt | Blocks AI | Tier | |
|---|---|---|---|---|---|---|---|---|---|
| Travel & Tourism | 90% | 10% | 10% | 60% | 30% | 10% | 80% | 30% | Tier 2 |
| Non-Profit | 90% | 10% | 20% | 40% | 10% | 10% | 70% | 10% | Tier 2 |
| Real Estate | 70% | 0% | 10% | 40% | 30% | 20% | 60% | 30% | Tier 2 |
| Advertising & Mktg | 100% | 40% | 50% | 30% | 0% | 10% | 90% | 0% | Tier 2 |
| Airlines | 90% | 20% | 10% | 60% | 20% | 20% | 100% | 30% | Tier 2 |
| Automotive | 90% | 20% | 0% | 40% | 40% | 10% | 60% | 20% | Tier 2 |
| Distance Learning | 100% | 40% | 50% | 50% | 30% | 10% | 70% | 30% | Tier 2 |
| Finance | 80% | 30% | 0% | 10% | 10% | 10% | 70% | 30% | Tier 2 |
| Telecom | 90% | 0% | 0% | 60% | 0% | 10% | 100% | 10% | Tier 2 |
| Government | 80% | 10% | 0% | 30% | 0% | 10% | 90% | 0% | Tier 2 |
| Healthcare | 100% | 10% | 0% | 10% | 0% | 0% | 90% | 10% | Tier 2 |
| IT Services | 90% | 0% | 0% | 30% | 20% | 10% | 60% | 0% | Tier 2 |
| Photography | 90% | 40% | 50% | 20% | 30% | 80% | 80% | 30% | Tier 2 |
| Publishing | 90% | 30% | 30% | 50% | 20% | 0% | 90% | 50% | Tier 2 |
| Computer & Video Games | 100% | 30% | 20% | 60% | 20% | 20% | 100% | 10% | Tier 2 |
Computer & Video Games records a mean recommended browser tier of 1.50 — the lowest in Timor-Leste. Healthcare, IT Services, Photography, and Publishing all follow at mean tier 1.60.