Overview
Military's WAF coverage is unusually low — active barriers carry the load
| Value | |
|---|---|
| WAF | 77% |
| Antibot | 11% |
| CAPTCHA | 16% |
| JavaScript | 21% |
| Rate Limiting | 19% |
| TLS | 17% |
WAF covers only 77% of Military sites, well below the global norm. JavaScript (21%) and Rate Limiting (19%) absorb the defensive weight in a sector that leans on active challenge layers over firewall coverage.
Barrier Landscape
WAF leads Military at 77% — JavaScript is the main secondary layer
| Value | |
|---|---|
| WAF | 77% |
| Antibot | 11% |
| CAPTCHA | 16% |
| JavaScript | 21% |
| Rate Limiting | 19% |
| TLS | 17% |
| Has robots.txt | 62% |
| Blocks AI crawlers | 7% |
WAF dominates at 77%. JavaScript (21%) leads active secondary barriers, followed by Rate Limiting (19%). The remaining three barriers all sit at or below 17% — a concentrated rather than broadly stacked profile.
Military's barrier counts are spread — no single configuration dominates
| % of sites | |
|---|---|
| 0 barriers | 21% |
| 1 barrier | 33% |
| 2 barriers | 25% |
| 3 barriers | 10% |
| 4 barriers | 7% |
| 5 barriers | 4% |
| 6 barriers | 0% |
Barrier counts vary widely across Military sites. Single-barrier configurations are the modal count at 33%, but the distribution is broad. 21% of sites carry three or more.
Simple is the dominant access tier for Military sites
| Mean recommended tier | |
|---|---|
| All sites | 1.53 |
A mean recommended tier of 1.53 and a median of Simple place Military toward the easier end of the sectors surveyed. 63% of sites are Simple to access; 12% require Moderate or above.
Simple is the dominant tier in Military, but Easy accounts for a significant share
| % of sites | |
|---|---|
| 1 - Simple | 63% |
| 2 - Easy | 25% |
| 3 - Moderate | 8% |
| 4 - Complex | 4% |
| 5 - Advanced | 0% |
Simple (63%) is the most common tier. Simple and Easy together account for 88% of sites, while 8% land at Moderate and 4% at Complex or Advanced.
robots.txt
Nearly two-thirds of Military sites publish any robots.txt
| % of sites | |
|---|---|
| Publish a valid robots.txt | 62% |
Only 62% of Military sites have a valid robots.txt. Nearly 38% leave crawl policy undefined — one of the lower coverage rates across surveyed sectors.
More than half of Military sites name no bot agents in robots.txt
| % of sites | |
|---|---|
| 0 | 51% |
| 1 | 33% |
| 2–4 | 9% |
| 5–9 | 4% |
| 10–15 | 3% |
| 16+ | 0% |
51% of Military sites name zero bot agents; 33% name exactly one. A mean of 1.1 named agents and median of 0 reflect minimal engagement with named bot policy across the sector.
AI crawlers draw the most robots.txt attention in Military
| % of sites | |
|---|---|
| AI crawlers | 8% |
| SEO / search indexing | 3% |
| SEO audit tools | 4% |
| Commercial scrapers | 0% |
| Social / content scrapers | 2% |
| Archive / research crawlers | 1% |
| Monitoring / uptime bots | 0% |
AI crawlers are named in 8% of Military robots.txt files, followed by SEO audit tools at 4%. All figures are percentages of all 100 sites including those with no robots.txt.
Uniform per-agent rules dominate Military robots.txt files
| % of sites | |
|---|---|
| Uniform per-agent rules | 38% |
| Path-level mixed rules | 21% |
| Allow-only (no Disallow rules) | 2% |
| Mixed AI posture | 0% |
| Blanket Disallow: / | 1% |
Uniform per-agent rules lead at 38%, with path-level mixed rules at 21%. Mixed AI posture (0%) and blanket Disallow (1%) are minimal.
AI crawlers are among the most-targeted agents in Military robots.txt
| Disallowed | Allowed (whitelisted) | |
|---|---|---|
| * | 44% | 23% |
| GPTBot | 6% | 1% |
| Google-Extended | 5% | — |
| ClaudeBot | 3% | 1% |
| CCBot | 3% | — |
| ChatGPT-User | 2% | 1% |
| AhrefsBot | 3% | — |
| facebookexternalhit/* | 1% | 1% |
| Amazonbot | 2% | — |
| Slurp | 1% | 1% |
| bing | 1% | 1% |
| bingbot | 1% | 1% |
| msnbot | 1% | 1% |
| Googlebot-Image | 2% | — |
| Synapse | 1% | — |
| MJ12Bot | 1% | — |
| Megaindex | 1% | — |
| serpstatbot | 1% | — |
| FacebookBot | 1% | — |
| Fasterfox | 1% | — |
| MJ12bot | 1% | — |
| SeekportBot | 1% | — |
| Yandex | 1% | — |
| ia_archiver | 1% | — |
| BLEXBot | 1% | — |
Values are percentages of all 100 Military sites surveyed. The wildcard (*) leads at 44% Disallow. Among named agents, GPTBot, Google-Extended lead the Disallow list — reflecting direct targeting of AI training and indexing bots.
Industry Cohort
Military is the most accessible sub-category in the Public Sector cohort
| WAF | Antibot | CAPTCHA | JavaScript | Rate Limit | TLS | robots.txt | Blocks AI | Tier | |
|---|---|---|---|---|---|---|---|---|---|
| Government | 80% | 10% | 8% | 33% | 15% | 12% | 64% | 10% | Tier 2 |
| Military | 77% | 11% | 16% | 21% | 19% | 17% | 62% | 7% | Tier 1 |
| Political Organizations | 97% | 13% | 23% | 47% | 16% | 9% | 79% | 6% | Tier 1 |
| Public Policy | 96% | 9% | 9% | 28% | 11% | 9% | 86% | 8% | Tier 1 |
| Public Safety | 94% | 12% | 25% | 44% | 18% | 14% | 74% | 6% | Tier 1 |
A median tier of Simple and mean of 1.45 make Military the easiest to access programmatically within Public Sector. WAF (77%) and AI blocking (7%) are below cohort peers.