Overview

JavaScript leads Facilities Services's secondary barrier stack above the norm
| Value | |
|---|---|
| WAF | 94% |
| Antibot | 9% |
| CAPTCHA | 23% |
| JavaScript | 27% |
| Rate Limiting | 12% |
| TLS | 10% |
WAF at 94% is the dominant barrier. JavaScript (27%) leads secondary coverage. The remaining barriers sit materially lower, giving Facilities Services a narrow but defined secondary layer.
Barrier Landscape

WAF leads Facilities Services at 94% — JavaScript is the main secondary layer
| Value | |
|---|---|
| WAF | 94% |
| Antibot | 9% |
| CAPTCHA | 23% |
| JavaScript | 27% |
| Rate Limiting | 12% |
| TLS | 10% |
| Has robots.txt | 75% |
| Blocks AI crawlers | 1% |
WAF dominates at 94%. JavaScript (27%) leads active secondary barriers, followed by CAPTCHA (23%). The remaining three barriers all sit at or below 12% — a concentrated rather than broadly stacked profile.

Single-barrier configurations dominate Facilities Services — mostly WAF alone
| % of sites | |
|---|---|
| 0 barriers | 6% |
| 1 barrier | 43% |
| 2 barriers | 32% |
| 3 barriers | 13% |
| 4 barriers | 1% |
| 5 barriers | 5% |
| 6 barriers | 0% |
43% of Facilities Services sites carry exactly one barrier — almost always WAF. Two-barrier stacks add 32%. Just 19% of sites layer three or more defences.

Nearly all Facilities Services sites are Simple to access programmatically
| Mean recommended tier | |
|---|---|
| All sites | 1.14 |
A mean recommended tier of 1.14 and a median of Simple place Facilities Services among the most accessible sectors surveyed. 94% of sites are Simple to access; 3% require Moderate or above.

Simple tier covers more than three-quarters of Facilities Services sites
| % of sites | |
|---|---|
| 1 - Simple | 94% |
| 2 - Easy | 3% |
| 3 - Moderate | 0% |
| 4 - Complex | 1% |
| 5 - Advanced | 2% |
Simple (94%) is the most common tier. Simple and Easy together account for 97% of sites, while 0% land at Moderate and 3% at Complex or Advanced.
robots.txt

Around three-quarters of Facilities Services sites publish a robots.txt
| % of sites | |
|---|---|
| Publish a valid robots.txt | 75% |
75% of Facilities Services sites have a valid robots.txt. The remaining 25% leave crawl policy entirely undefined — a meaningful gap for a sector of this scale.

Most Facilities Services sites name one bot or none in their robots.txt
| % of sites | |
|---|---|
| 0 | 37% |
| 1 | 48% |
| 2–4 | 8% |
| 5–9 | 6% |
| 10–15 | 1% |
| 16+ | 0% |
37% of Facilities Services sites name zero agents and 48% name one. A mean of 1.2 is pulled up by a small number of sites with extensive policies, while the median stays at 1.

SEO / search indexing draw the most robots.txt attention in Facilities Services
| % of sites | |
|---|---|
| AI crawlers | 3% |
| SEO / search indexing | 7% |
| SEO audit tools | 7% |
| Commercial scrapers | 1% |
| Social / content scrapers | 0% |
| Archive / research crawlers | 2% |
| Monitoring / uptime bots | 0% |
SEO / search indexing are named in 7% of Facilities Services robots.txt files, followed by SEO audit tools at 7%. All figures are percentages of all 100 sites including those with no robots.txt.

Uniform per-agent rules dominate Facilities Services robots.txt files
| % of sites | |
|---|---|
| Uniform per-agent rules | 39% |
| Path-level mixed rules | 28% |
| Allow-only (no Disallow rules) | 5% |
| Mixed AI posture | 0% |
| Blanket Disallow: / | 3% |
Uniform per-agent rules lead at 39%, with path-level mixed rules at 28%. Mixed AI posture (0%) and blanket Disallow (3%) are minimal.

AhrefsBot leads named Disallow rules in Facilities Services robots.txt
| Disallowed | Allowed (whitelisted) | |
|---|---|---|
| * | 57% | 33% |
| AhrefsBot | 5% | 1% |
| AhrefsSiteAudit | 4% | 1% |
| Nutch | 4% | — |
| adsbot-google | 4% | — |
| Googlebot | 1% | 3% |
| bingbot | 2% | 1% |
| ia_archiver | 2% | — |
| MJ12bot | 2% | — |
| SiteAuditBot | 1% | 1% |
| GPTBot | 0% | 2% |
| Megalodon | 1% | — |
| Applebot | 1% | — |
| Baiduspider | 1% | — |
| Baiduspider-image | 1% | — |
| Baiduspider-video | 1% | — |
| Semrush | 1% | — |
| Slurp | 1% | — |
| Yandex | 1% | — |
| BLEXBot | 1% | — |
| XoviBot | 1% | — |
| Dotbot | 1% | — |
| Exabot | 1% | — |
| Gigabot | 1% | — |
| Rogerbot | 1% | — |
Values are percentages of all 100 Facilities Services sites surveyed. The wildcard (*) leads at 57% Disallow. Among named agents, AhrefsBot, AhrefsSiteAudit, Nutch are the most frequently targeted — focused on non-AI crawlers.
Industry Cohort

Facilities Services lags the Legal & Professional Services cohort on AI-blocking policy
| WAF | Antibot | CAPTCHA | JavaScript | Rate Limit | TLS | robots.txt | Blocks AI | Tier | |
|---|---|---|---|---|---|---|---|---|---|
| Consulting | 87% | 9% | 22% | 37% | 8% | 11% | 75% | 5% | Tier 1 |
| Customer Services | 100% | 22% | 22% | 55% | 38% | 17% | 76% | 7% | Tier 1 |
| Facilities Services | 94% | 9% | 23% | 27% | 12% | 10% | 75% | 1% | Tier 1 |
| Legal | 83% | 15% | 22% | 35% | 15% | 8% | 58% | 5% | Tier 2 |
Facilities Services's 1% AI-blocking rate is the lowest in the Legal & Professional Services cohort. WAF (94%) and JavaScript (27%) are at or above cohort peers on technical barriers.