Overview
JavaScript and CAPTCHA both elevate Security Products & Services's active barrier profile
| Value | |
|---|---|
| WAF | 91% |
| Antibot | 19% |
| CAPTCHA | 26% |
| JavaScript | 40% |
| Rate Limiting | 15% |
| TLS | 12% |
WAF leads at 91%. JavaScript (40%) and CAPTCHA (26%) together form a multi-layer active stack — more than most sectors deploy alongside WAF.
Barrier Landscape
WAF leads Security Products & Services at 91% — JavaScript is the main secondary layer
| Value | |
|---|---|
| WAF | 91% |
| Antibot | 19% |
| CAPTCHA | 26% |
| JavaScript | 40% |
| Rate Limiting | 15% |
| TLS | 12% |
| Has robots.txt | 73% |
| Blocks AI crawlers | 4% |
WAF dominates at 91%. JavaScript (40%) leads active secondary barriers, followed by CAPTCHA (26%). The remaining three barriers all sit at or below 19% — a concentrated rather than broadly stacked profile.
Security Products & Services's barrier counts are spread — no single configuration dominates
| % of sites | |
|---|---|
| 0 barriers | 9% |
| 1 barrier | 32% |
| 2 barriers | 28% |
| 3 barriers | 17% |
| 4 barriers | 6% |
| 5 barriers | 8% |
| 6 barriers | 0% |
Barrier counts vary widely across Security Products & Services sites. Single-barrier configurations are the modal count at 32%, but the distribution is broad. 31% of sites carry three or more.
Security Products & Services sites are predominantly Simple to access
| Mean recommended tier | |
|---|---|
| All sites | 1.27 |
A mean recommended tier of 1.27 and a median of Simple place Security Products & Services among the most accessible sectors surveyed. 78% of sites are Simple to access; 5% require Moderate or above.
Simple tier covers more than three-quarters of Security Products & Services sites
| % of sites | |
|---|---|
| 1 - Simple | 78% |
| 2 - Easy | 17% |
| 3 - Moderate | 5% |
| 4 - Complex | 0% |
| 5 - Advanced | 0% |
Simple (78%) is the most common tier. Simple and Easy together account for 95% of sites, while 5% land at Moderate and 0% at Complex or Advanced.
robots.txt
Around three-quarters of Security Products & Services sites publish a robots.txt
| % of sites | |
|---|---|
| Publish a valid robots.txt | 73% |
73% of Security Products & Services sites have a valid robots.txt. The remaining 27% leave crawl policy entirely undefined — a meaningful gap for a sector of this scale.
Security Products & Services sites name a handful of agents in robots.txt — few commit to comprehensive policies
| % of sites | |
|---|---|
| 0 | 34% |
| 1 | 46% |
| 2–4 | 11% |
| 5–9 | 7% |
| 10–15 | 1% |
| 16+ | 1% |
The mean of 1.5 named agents reflects limited bot-policy investment in Security Products & Services. 34% of sites name no agents; 46% name exactly one. Only 1% maintain a list of 16 or more named bots.
SEO audit tools draw the most robots.txt attention in Security Products & Services
| % of sites | |
|---|---|
| AI crawlers | 4% |
| SEO / search indexing | 4% |
| SEO audit tools | 8% |
| Commercial scrapers | 1% |
| Social / content scrapers | 2% |
| Archive / research crawlers | 0% |
| Monitoring / uptime bots | 0% |
SEO audit tools are named in 8% of Security Products & Services robots.txt files, followed by AI crawlers at 4%. All figures are percentages of all 100 sites including those with no robots.txt.
Uniform per-agent rules dominate Security Products & Services robots.txt files
| % of sites | |
|---|---|
| Uniform per-agent rules | 36% |
| Path-level mixed rules | 32% |
| Allow-only (no Disallow rules) | 4% |
| Mixed AI posture | 0% |
| Blanket Disallow: / | 1% |
Uniform per-agent rules lead at 36%, with path-level mixed rules at 32%. Mixed AI posture (0%) and blanket Disallow (1%) are minimal.
AhrefsBot leads named Disallow rules in Security Products & Services robots.txt
| Disallowed | Allowed (whitelisted) | |
|---|---|---|
| * | 62% | 36% |
| AhrefsBot | 6% | — |
| Yandex | 3% | 3% |
| AhrefsSiteAudit | 5% | — |
| Nutch | 5% | — |
| adsbot-google | 5% | — |
| Googlebot-Image | 2% | 2% |
| PetalBot | 3% | — |
| Googlebot | 2% | 1% |
| BLEXBot | 2% | — |
| Amazonbot | 2% | — |
| Baiduspider | 2% | — |
| GPTBot | 2% | — |
| AdsBot-Google | 1% | 1% |
| Mediapartners-Google | 1% | 1% |
| Twitterbot | 1% | 1% |
| Barkrowler | 1% | — |
| CazoodleBot | 1% | — |
| Gigabot | 1% | — |
| Go-http-client | 1% | — |
| Node/simplecrawler | 1% | — |
| Nuclei | 1% | — |
| Riddler | 1% | — |
| WikiDo | 1% | — |
| Zoominfobot | 1% | — |
Values are percentages of all 100 Security Products & Services sites surveyed. The wildcard (*) leads at 62% Disallow. Among named agents, AhrefsBot, AhrefsSiteAudit, Nutch are the most frequently targeted — focused on non-AI crawlers.
Industry Cohort
Security Products & Services sits mid-table within the Technology cohort
| WAF | Antibot | CAPTCHA | JavaScript | Rate Limit | TLS | robots.txt | Blocks AI | Tier | |
|---|---|---|---|---|---|---|---|---|---|
| Biotech | 89% | 13% | 19% | 39% | 17% | 13% | 76% | 14% | Tier 1 |
| Computer Software | 95% | 17% | 19% | 30% | 18% | 13% | 83% | 14% | Tier 2 |
| Information Technology | 94% | 13% | 15% | 36% | 21% | 14% | 68% | 7% | Tier 2 |
| Market Research | 94% | 16% | 22% | 44% | 25% | 14% | 71% | 0% | Tier 1 |
| Nanotechnology | 95% | 8% | 33% | 31% | 10% | 9% | 79% | 6% | Tier 1 |
| Online Services | 93% | 9% | 16% | 50% | 19% | 12% | 86% | 36% | Tier 2 |
| Security Products & Services | 91% | 19% | 26% | 40% | 15% | 12% | 73% | 4% | Tier 1 |
Across Technology, Security Products & Services's barrier rates are broadly in line with peers. WAF at 91%, JavaScript at 40%, and AI blocking at 4% all sit near the cohort median. Tier difficulty (mean 1.24) is above the group average.