Overview

JavaScript and Rate Limiting both elevate Music's active barrier profile
| Value | |
|---|---|
| WAF | 96% |
| Antibot | 21% |
| CAPTCHA | 19% |
| JavaScript | 52% |
| Rate Limiting | 26% |
| TLS | 12% |
WAF leads at 96%. JavaScript (52%) and Rate Limiting (26%) together form a multi-layer active stack — more than most sectors deploy alongside WAF.
Barrier Landscape

JavaScript is Music's dominant secondary barrier by a wide margin
| Value | |
|---|---|
| WAF | 96% |
| Antibot | 21% |
| CAPTCHA | 19% |
| JavaScript | 52% |
| Rate Limiting | 26% |
| TLS | 12% |
| Has robots.txt | 84% |
| Blocks AI crawlers | 25% |
WAF at 96% and JavaScript at 52% together form the sector's main defensive layer. Rate Limiting (26%) follows at a distance. The barrier profile is concentrated rather than broadly spread.

Two-barrier stacks are Music's most common security posture
| % of sites | |
|---|---|
| 0 barriers | 3% |
| 1 barrier | 28% |
| 2 barriers | 33% |
| 3 barriers | 23% |
| 4 barriers | 4% |
| 5 barriers | 7% |
| 6 barriers | 2% |
33% of Music sites carry exactly 2 barriers. 36% stack three or more. 3% carry none — a low share of unprotected sites for this sector.

Music is predominantly Easy to access — with a notable Moderate minority
| Mean recommended tier | |
|---|---|
| All sites | 1.79 |
A mean recommended tier of 1.79 and a median of Easy place Music around the middle of the sectors surveyed. 44% of sites are Simple to access; 17% require Moderate or above.

Simple and Easy cover most Music sites
| % of sites | |
|---|---|
| 1 - Simple | 44.4% |
| 2 - Easy | 38.4% |
| 3 - Moderate | 12.1% |
| 4 - Complex | 3% |
| 5 - Advanced | 2% |
Simple (44%) is the most common tier. Simple and Easy together account for 83% of sites, while 12% land at Moderate and 5% at Complex or Advanced.
robots.txt

Most Music sites publish a robots.txt — coverage above the norm
| % of sites | |
|---|---|
| Publish a valid robots.txt | 84% |
84% of Music sites publish a valid robots.txt. The 16% without a file leave crawl policy undefined — a lower gap than the cross-sector average of around 24%.

Music sites name a handful of agents in robots.txt — few commit to comprehensive policies
| % of sites | |
|---|---|
| 0 | 29% |
| 1 | 24% |
| 2–4 | 17% |
| 5–9 | 10% |
| 10–15 | 4% |
| 16+ | 16% |
The mean of 6.7 named agents reflects limited bot-policy investment in Music. 29% of sites name no agents; 24% name exactly one. Only 16% maintain a list of 16 or more named bots.

AI crawlers draw the most robots.txt attention in Music
| % of sites | |
|---|---|
| AI crawlers | 25% |
| SEO / search indexing | 11% |
| SEO audit tools | 15% |
| Commercial scrapers | 11% |
| Social / content scrapers | 1% |
| Archive / research crawlers | 5% |
| Monitoring / uptime bots | 0% |
AI crawlers are mentioned by 25% of Music sites — the leading bot category. SEO audit tools follows at 15%. Figures are percentages of all 100 Music sites including those with no robots.txt.

Uniform per-agent rules dominate Music robots.txt files
| % of sites | |
|---|---|
| Uniform per-agent rules | 50% |
| Path-level mixed rules | 28% |
| Allow-only (no Disallow rules) | 4% |
| Mixed AI posture | 3% |
| Blanket Disallow: / | 2% |
Uniform per-agent rules lead at 50%, with path-level mixed rules at 28%. Mixed AI posture (3%) and blanket Disallow (2%) are minimal.

AI crawlers are among the most-targeted agents in Music robots.txt
| Disallowed | Allowed (whitelisted) | |
|---|---|---|
| * | 62% | 31% |
| CCBot | 22% | 2% |
| GPTBot | 19% | 2% |
| ClaudeBot | 18% | 2% |
| Google-Extended | 17% | 3% |
| Bytespider | 16% | 2% |
| PerplexityBot | 13% | 2% |
| anthropic-ai | 12% | 2% |
| ChatGPT-User | 10% | 3% |
| Amazonbot | 12% | 1% |
| Diffbot | 10% | 2% |
| cohere-ai | 10% | 2% |
| omgili | 10% | 2% |
| Claude-Web | 10% | 2% |
| Applebot-Extended | 10% | 2% |
| FacebookBot | 8% | 2% |
| Googlebot | 5% | 4% |
| meta-externalagent | 7% | 1% |
| PetalBot | 6% | 1% |
| YouBot | 6% | 1% |
| omgilibot | 6% | 1% |
| AhrefsBot | 6% | 1% |
| Yandex | 5% | 2% |
| Meta-ExternalAgent | 5% | 2% |
| Timpibot | 5% | 2% |
Values are percentages of all 100 Music sites surveyed. The wildcard (*) leads at 62% Disallow. Among named agents, CCBot, GPTBot lead the Disallow list — reflecting direct targeting of AI training and indexing bots.
Industry Cohort

Music is among the hardest sub-categories to access in Entertainment
| WAF | Antibot | CAPTCHA | JavaScript | Rate Limit | TLS | robots.txt | Blocks AI | Tier | |
|---|---|---|---|---|---|---|---|---|---|
| Adult | 98% | 36% | 33% | 36% | 34% | 20% | 85% | 9% | Tier 1 |
| Entertainment | 92% | 17% | 18% | 46% | 23% | 13% | 77% | 30% | Tier 2 |
| Gambling | 95% | 31% | 24% | 53% | 35% | 14% | 57% | 6% | Tier 1 |
| Music | 96% | 21% | 19% | 52% | 26% | 12% | 84% | 25% | Tier 2 |
| TV & Movies | 99% | 30% | 25% | 59% | 33% | 13% | 70% | 11% | Tier 1 |
A median tier of Easy and mean of 1.73 make Music one of the harder sectors within Entertainment to access programmatically. JavaScript (52%) is elevated in the cohort.