Overview

JavaScript leads Recreational Facilities's secondary barrier stack above the norm
| Value | |
|---|---|
| WAF | 95% |
| Antibot | 23% |
| CAPTCHA | 21% |
| JavaScript | 51% |
| Rate Limiting | 21% |
| TLS | 11% |
WAF at 95% is the dominant barrier. JavaScript (51%) leads secondary coverage. The remaining barriers sit materially lower, giving Recreational Facilities a narrow but defined secondary layer.
Barrier Landscape

JavaScript is Recreational Facilities's dominant secondary barrier by a wide margin
| Value | |
|---|---|
| WAF | 95% |
| Antibot | 23% |
| CAPTCHA | 21% |
| JavaScript | 51% |
| Rate Limiting | 21% |
| TLS | 11% |
| Has robots.txt | 71% |
| Blocks AI crawlers | 6% |
WAF at 95% and JavaScript at 51% together form the sector's main defensive layer. Antibot (23%) follows at a distance. The barrier profile is concentrated rather than broadly spread.

Two-barrier stacks are Recreational Facilities's most common security posture
| % of sites | |
|---|---|
| 0 barriers | 5% |
| 1 barrier | 23% |
| 2 barriers | 39% |
| 3 barriers | 16% |
| 4 barriers | 12% |
| 5 barriers | 5% |
| 6 barriers | 0% |
39% of Recreational Facilities sites carry exactly 2 barriers. 33% stack three or more. 5% carry none — a low share of unprotected sites for this sector.

Recreational Facilities sites are predominantly Simple to access
| Mean recommended tier | |
|---|---|
| All sites | 1.21 |
A mean recommended tier of 1.21 and a median of Simple place Recreational Facilities among the most accessible sectors surveyed. 84% of sites are Simple to access; 4% require Moderate or above.

Simple tier covers more than three-quarters of Recreational Facilities sites
| % of sites | |
|---|---|
| 1 - Simple | 84% |
| 2 - Easy | 12% |
| 3 - Moderate | 3% |
| 4 - Complex | 1% |
| 5 - Advanced | 0% |
Simple (84%) is the most common tier. Simple and Easy together account for 96% of sites, while 3% land at Moderate and 1% at Complex or Advanced.
robots.txt

Around seven in ten of Recreational Facilities sites publish a robots.txt
| % of sites | |
|---|---|
| Publish a valid robots.txt | 71% |
71% of Recreational Facilities sites have a valid robots.txt. The remaining 29% leave crawl policy entirely undefined — a meaningful gap for a sector of this scale.

Most Recreational Facilities sites name one bot or none in their robots.txt
| % of sites | |
|---|---|
| 0 | 44% |
| 1 | 45% |
| 2–4 | 3% |
| 5–9 | 5% |
| 10–15 | 1% |
| 16+ | 2% |
44% of Recreational Facilities sites name zero agents and 45% name one. A mean of 1.4 is pulled up by a small number of sites with extensive policies, while the median stays at 1.

AI crawlers draw the most robots.txt attention in Recreational Facilities
| % of sites | |
|---|---|
| AI crawlers | 6% |
| SEO / search indexing | 3% |
| SEO audit tools | 3% |
| Commercial scrapers | 1% |
| Social / content scrapers | 0% |
| Archive / research crawlers | 1% |
| Monitoring / uptime bots | 0% |
AI crawlers are named in 6% of Recreational Facilities robots.txt files, followed by SEO / search indexing at 3%. All figures are percentages of all 100 sites including those with no robots.txt.

Uniform per-agent rules dominate Recreational Facilities robots.txt files
| % of sites | |
|---|---|
| Uniform per-agent rules | 42% |
| Path-level mixed rules | 18% |
| Allow-only (no Disallow rules) | 10% |
| Mixed AI posture | 0% |
| Blanket Disallow: / | 1% |
Uniform per-agent rules lead at 42%, with path-level mixed rules at 18%. Mixed AI posture (0%) and blanket Disallow (1%) are minimal.

AI crawlers are among the most-targeted agents in Recreational Facilities robots.txt
| Disallowed | Allowed (whitelisted) | |
|---|---|---|
| * | 43% | 29% |
| GPTBot | 6% | — |
| Google-Extended | 6% | — |
| ClaudeBot | 5% | — |
| Applebot-Extended | 4% | — |
| CCBot | 4% | — |
| Bingbot | 2% | 1% |
| MJ12bot | 3% | — |
| SiteAuditBot | 1% | 2% |
| Amazonbot | 3% | — |
| Bytespider | 3% | — |
| meta-externalagent | 3% | — |
| Google-InspectionTool | 1% | 1% |
| Googlebot | 1% | 1% |
| Googlebot-Image | 1% | 1% |
| Screaming Frog SEO Spider | 1% | 1% |
| GoogleBot | 1% | 1% |
| Yandex | 1% | 1% |
| YandexBot | 1% | — |
| YandexImages | 1% | — |
| YandexMetrika | 1% | — |
| baiduspider | 1% | — |
| baiduspider-image | 1% | — |
| baiduspider-mobile | 1% | — |
| baiduspider-news | 1% | — |
Values are percentages of all 100 Recreational Facilities sites surveyed. The wildcard (*) leads at 43% Disallow. Among named agents, GPTBot, Google-Extended lead the Disallow list — reflecting direct targeting of AI training and indexing bots.
Industry Cohort

Recreational Facilities sits mid-table within the Travel & Hospitality cohort
| WAF | Antibot | CAPTCHA | JavaScript | Rate Limit | TLS | robots.txt | Blocks AI | Tier | |
|---|---|---|---|---|---|---|---|---|---|
| Airlines | 76% | 24% | 11% | 51% | 27% | 22% | 69% | 9% | Tier 2 |
| Events Services | 83% | 17% | 21% | 41% | 26% | 12% | 65% | 3% | Tier 1 |
| Hospitality | 86% | 18% | 17% | 47% | 27% | 19% | 76% | 9% | Tier 2 |
| Recreational Facilities | 95% | 23% | 21% | 51% | 21% | 11% | 71% | 6% | Tier 1 |
| Restaurants | 91% | 28% | 19% | 57% | 41% | 15% | 50% | 5% | Tier 2 |
| Travel & Tourism | 81% | 27% | 8% | 55% | 31% | 26% | 78% | 21% | Tier 2 |
Across Travel & Hospitality, Recreational Facilities's barrier rates are broadly in line with peers. WAF at 95%, JavaScript at 51%, and AI blocking at 6% all sit near the cohort median. Tier difficulty (mean 1.18) is below the group average.