Security
HSTS
3.4M sites
HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.
- Guide
Cloudflare Bot Management
1.6M sitesSaaS
Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.
reCAPTCHA
1.4M sitesSaaSFreemium · Pay as you go · Quote
reCAPTCHA is a free service from Google that helps protect websites from spam and abuse.

Really Simple SSL & Security
289.5K sites
Really Simple SSL & Security is an easy to install and performant security solution for WordPress.
- Guide
Cloudflare Turnstile
145.3K sitesSaaSFreemium · Quote
Turnstile is Cloudflare's smart CAPTCHA alternative.
DDoS-Guard
52.9K sitesFreemium · $ · Subscription
DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.
hCaptcha
48.2K sitesSaaSFreemium · Quote
hCaptcha is an anti-bot solution that protects user privacy and rewards websites.
Imperva
24.2K sites
Imperva is a cyber security software and services company for networking, data, and application security.
Sucuri
19.8K sites
Sucuri is a cybersecurity company that provides website security solutions and services.
Confiant
18.2K sites$$$ · Subscription
Confiant is a cybersecurity company specialising in ad security and ad quality assurance for digital publishers, programmatic platforms, and advertisers.
Sift
14.9K sitesSaaS$$ · Subscription
Sift is a CA-based fraud prevention company.
Akamai Bot Manager
14.4K sitesSaaSQuote
Akamai Bot Manager detect bots using device fingerprinting bot signatures.
ClickCease
13.7K sitesSaaSPay as you go · Subscription
ClickCease is an ad fraud and click-fraud detection and protection service software.
Forter
11K sitesSaaSQuote
Forter is a SaaS company that provides fraud prevention technology for online retailers and marketplaces.
Detectify
9.5K sites
Detectify is an automated scanner that checks your web application for vulnerabilities.
DataDome
9.3K sites$$$ · Subscription
DataDome is a cybersecurity platform that specialises in bot protection and mitigation, offering advanced solutions to safeguard websites and mobile applications against malicious bot traffic, credential stuffing, scraping, and other automated threats.
PerimeterX
5.5K sitesSaaSPay as you go · Subscription · Quote
PerimeterX is a provider of scalable, behavior-based threat protection technology for the web, cloud, and mobile.
Friendly Captcha
3.1K sitesSaaS$ · Freemium · Subscription · Quote
Friendly Captcha is a proof-of-work based solution in which the user’s device does all the work.
Used byPlausible Analytics
Wordfence Login Security
2.4K sitesFreemium · $ · Subscription
Wordfence Login Security contains a subset of the functionality found in the full Wordfence plugin: Two-factor Authentication, XML-RPC Protection and Login Page CAPTCHA.
Signifyd
2.4K sitesSaaS$$$ · Subscription
Signifyd is a provider of an enterprise-grade fraud technology solution for ecommerce stores.
Riskified
1.8K sitesSaaSQuote
Riskified is a privately held company that provides SaaS fraud and chargeback prevention technology.
TruValidate
1.7K sitesSaaSQuote
TransUnion TruValidate (previously ReputationShield/IDVision from iovation) is an online risk and fraud detection platform.
Konduto
1.7K sitesSaaSQuote
Konduto is a fraud detection service for ecommerce.
Variti
1.6K sitesQuote
Variti is a network security solutions firm that blocks bad bots, protects users from various automated abuse, attacks and fraud techniques.
Keybase
1.3K sitesSaaSOpen sourceFreemium
Keybase is for keeping everyone's chats and files safe, from families to communities to companies. MacOS, Windows, Linux, iPhone, and Android.
Very Good Security
1.3K sitesSaaSPay as you go · Subscription
Very Good Security (VGS) is a data security and compliance platform that enables developers to securely handle sensitive data by encrypting, tokenising, and transmitting it through an intermediary service.
Bugcrowd
1.1K sites
Bugcrowd is a crowdsourced cybersecurity platform.
GeeTest
995 sitesSaaSQuote
GeeTest is a CAPTCHA and bot management provider, protects websites, mobile apps, and APIs from automated bot-driven attacks, like ATO, credential stuffing, web scalping, etc.
Yandex SmartCaptcha
755 sitesSaaSFreemium · Pay as you go
Yandex SmartCaptcha is a service for verifying queries to identify user requests and block bots.
Alibaba Cloud Verification Code
710 sites
Alibaba Cloud Verification Code is a security feature provided by Alibaba Cloud to help protect user accounts from unauthorised access.

Tencent Waterproof Wall
677 sites
ThreatMetrix
474 sitesSaaSQuote
LexisNexis ThreatMetrix is an enterprise solution for online risk and fraud protection ('digital identity intelligence and digital authentication').
Slider Captcha
473 sitesOpen source
Slider Captcha is a free service that helps protect websites from spam and abuse.
Fortinet FortiGate
388 sitesQuote
Fortinet FortiGate is a family of network security appliances that provide firewall, VPN, intrusion prevention, antivirus, web filtering, and other security features to protect and secure networks and data.

SiteGuard WP Plugin
290 sites
SiteGurad WP Plugin is the plugin specialised for the protection against the attack to the management page and login.
MTCaptcha
289 sitesSaaSFreemium · $ · Subscription
MTCaptcha is a captcha service that is GDPR and WCAG compliant, providing the confidence of privacy and accessibility.
Basic
287 sites
Basic is an authetication method used by some web servers.
iThemes Security
277 sitesFreemium · $ · Subscription
iThemes Security(formerly known as Better WP Security) plugin enhances the security and protection of your WordPress website.
Blue Triangle
273 sitesSaaSQuote · $$$ · Subscription
Blue Triangle is a connected view of marketing, web performance, and third-party tag analytics while constantly monitoring website code for security vulnerabilities.
Akamai Web Application Protector
249 sitesSaaSQuote
Akamai Web Application Protector is designed for companies looking for a more automated approach to web application firewall (WAF) and distributed denial-of-service (DDoS) security.
Kasada
234 sitesSaaSQuote
Kasada is a cybersecurity company that provides a platform to protect websites and web applications from bot attacks and malicious activities.
AntiBot.Cloud
175 sitesSaaS$ · Subscription
AntiBot.Cloud is a PHP script and cloud service to protect websites from bots and junk traffic.
Kount
158 sitesSaaSQuote
Kount is a suite of fraud detection and prevention solutions for ecommerce businesses.
Norton Shopping Guarantee
124 sitesSaaS$ · Subscription · Pay as you go
Norton Shopping Guarantee offering a third-party shopping guarantee to customers provides added protection and validation that you are safe to buy from.
Onfido
87 sitesSaaSPay as you go · Subscription · $$
Onfido is a technology company that helps businesses verify people's identities using a photo-based identity document, a selfie and artificial intelligence algorithms.
AWS WAF Captcha
52 sitesSaaSSubscription · Pay as you go
AWS WAF Captcha helps block unwanted bot traffic by requiring users to successfully complete challenges before their web request are allowed to reach AWS WAF protected resources.
FraudLabs Pro
50 sitesSaaSFreemium · $$ · Subscription
FraudLabs Pro is a fraud prevention service offered by the company FraudLabs Pro, which specialises in online fraud detection and risk management for businesses.
Wordfence
43 sitesFreemium · $ · Subscription
Wordfence is a security plugin for sites that use WordPress. Wordfence includes an endpoint firewall and malware scanner.
Data from the open Wappalyzer database (enthec/webappanalyzer, GPL-3.0), updated every week. Site counts from the HTTP Archive (September 2026). Code tools (frameworks, build, ORMs…) come from a list kept by Faundr.