Overview

JavaScript leads Mental Health's secondary barrier stack above the norm
| Value | |
|---|---|
| WAF | 95% |
| Antibot | 16% |
| CAPTCHA | 24% |
| JavaScript | 40% |
| Rate Limiting | 18% |
| TLS | 6% |
WAF at 95% is the dominant barrier. JavaScript (40%) leads secondary coverage. The remaining barriers sit materially lower, giving Mental Health a narrow but defined secondary layer.
Barrier Landscape

WAF leads Mental Health at 95% — JavaScript is the main secondary layer
| Value | |
|---|---|
| WAF | 95% |
| Antibot | 16% |
| CAPTCHA | 24% |
| JavaScript | 40% |
| Rate Limiting | 18% |
| TLS | 6% |
| Has robots.txt | 85% |
| Blocks AI crawlers | 12% |
WAF dominates at 95%. JavaScript (40%) leads active secondary barriers, followed by CAPTCHA (24%). The remaining three barriers all sit at or below 18% — a concentrated rather than broadly stacked profile.

Two-barrier stacks are Mental Health's most common security posture
| % of sites | |
|---|---|
| 0 barriers | 5% |
| 1 barrier | 35% |
| 2 barriers | 38% |
| 3 barriers | 9% |
| 4 barriers | 4% |
| 5 barriers | 9% |
| 6 barriers | 0% |
38% of Mental Health sites carry exactly 2 barriers. 22% stack three or more. 5% carry none — a low share of unprotected sites for this sector.

Mental Health sites are predominantly Simple to access
| Mean recommended tier | |
|---|---|
| All sites | 1.30 |
A mean recommended tier of 1.30 and a median of Simple place Mental Health toward the easier end of the sectors surveyed. 78% of sites are Simple to access; 6% require Moderate or above.

Simple tier covers more than three-quarters of Mental Health sites
| % of sites | |
|---|---|
| 1 - Simple | 78% |
| 2 - Easy | 16% |
| 3 - Moderate | 4% |
| 4 - Complex | 2% |
| 5 - Advanced | 0% |
Simple (78%) is the most common tier. Simple and Easy together account for 94% of sites, while 4% land at Moderate and 2% at Complex or Advanced.
robots.txt

Most Mental Health sites publish a robots.txt — coverage above the norm
| % of sites | |
|---|---|
| Publish a valid robots.txt | 85% |
85% of Mental Health sites publish a valid robots.txt. The 15% without a file leave crawl policy undefined — a lower gap than the cross-sector average of around 24%.

Mental Health sites name a handful of agents in robots.txt — few commit to comprehensive policies
| % of sites | |
|---|---|
| 0 | 30% |
| 1 | 44% |
| 2–4 | 11% |
| 5–9 | 10% |
| 10–15 | 1% |
| 16+ | 4% |
The mean of 3.0 named agents reflects limited bot-policy investment in Mental Health. 30% of sites name no agents; 44% name exactly one. Only 4% maintain a list of 16 or more named bots.

AI crawlers and SEO / search indexing draw near-equal attention in Mental Health robots.txt
| % of sites | |
|---|---|
| AI crawlers | 12% |
| SEO / search indexing | 10% |
| SEO audit tools | 6% |
| Commercial scrapers | 2% |
| Social / content scrapers | 2% |
| Archive / research crawlers | 2% |
| Monitoring / uptime bots | 0% |
AI crawlers appears in 12% of Mental Health sites; SEO / search indexing in 10%. The near-equal split reflects a sector that treats both categories with comparable priority. Figures are percentages of all 100 sites.

Uniform per-agent rules dominate Mental Health robots.txt files
| % of sites | |
|---|---|
| Uniform per-agent rules | 48% |
| Path-level mixed rules | 31% |
| Allow-only (no Disallow rules) | 6% |
| Mixed AI posture | 2% |
| Blanket Disallow: / | 0% |
Uniform per-agent rules lead at 48%, with path-level mixed rules at 31%. Mixed AI posture (2%) and blanket Disallow (0%) are minimal.

AI crawlers are among the most-targeted agents in Mental Health robots.txt
| Disallowed | Allowed (whitelisted) | |
|---|---|---|
| * | 61% | 40% |
| GPTBot | 8% | 2% |
| ClaudeBot | 6% | 2% |
| Bytespider | 6% | 1% |
| CCBot | 5% | 2% |
| Googlebot | 5% | 1% |
| Applebot-Extended | 4% | 1% |
| Google-Extended | 3% | 2% |
| omgili | 3% | 1% |
| BLEXBot | 4% | — |
| sogou | 4% | — |
| sogou spider | 4% | — |
| AdsBot-Google | 2% | 2% |
| Amazonbot | 3% | 1% |
| FacebookBot | 2% | 1% |
| Meta-ExternalAgent | 2% | 1% |
| anthropic-ai | 2% | 1% |
| Baiduspider | 3% | — |
| 008 | 3% | — |
| MegaIndex.ru | 3% | — |
| MegaIndex.ru/2.0 | 3% | — |
| Sogou web spider | 3% | — |
| megaIndex.ru | 3% | — |
| Scrapy | 2% | 1% |
| omgilibot | 2% | 1% |
Values are percentages of all 100 Mental Health sites surveyed. The wildcard (*) leads at 61% Disallow. Among named agents, GPTBot leads Disallow at 8%, with ClaudeBot and Bytespider tied at 6% — reflecting direct targeting of AI training and indexing bots.
Industry Cohort

Mental Health sits mid-table within the Healthcare cohort
| WAF | Antibot | CAPTCHA | JavaScript | Rate Limit | TLS | robots.txt | Blocks AI | Tier | |
|---|---|---|---|---|---|---|---|---|---|
| Healthcare | 93% | 17% | 21% | 35% | 27% | 21% | 78% | 14% | Tier 2 |
| Medical Devices & Equipment | 92% | 13% | 22% | 45% | 16% | 8% | 81% | 8% | Tier 1 |
| Mental Health | 95% | 16% | 24% | 40% | 18% | 6% | 85% | 12% | Tier 1 |
| Pharmaceuticals | 84% | 20% | 25% | 54% | 27% | 8% | 62% | 5% | Tier 1 |
| Veterinary | 100% | 24% | 29% | 43% | 35% | 25% | 89% | 5% | Tier 1 |
| Wellness | 98% | 23% | 31% | 48% | 34% | 16% | 83% | 22% | Tier 2 |
Across Healthcare, Mental Health's barrier rates are broadly in line with peers. WAF at 95%, JavaScript at 40%, and AI blocking at 12% all sit near the cohort median. Tier difficulty (mean 1.24) is below the group average.