Under the hood
How Marech Works
Every request to your website goes through Marech's detection engine. Here's what happens in milliseconds.
1
Visitor arrives at your website
Your Marech snippet loads invisibly on page load.
2
Is it an AI bot?
Marech checks user agent, headers, IP reputation, and behavior patterns in real time.
3
Decision: Block or Allow
Based on your policies, the bot is blocked (403) or allowed through.
4
Logged in your dashboard
Every decision is recorded — bot type, IP, path, confidence score, and action taken.
How we detect AI bots
01
Known Bot Database
We maintain a constantly-updated list of 20+ known scrapers — GPTBot, ClaudeBot, CCBot, Amazonbot, PerplexityBot, and more.
02
Behavior Analysis
Detect headless browsers and bots pretending to be humans by analyzing missing headers, timing patterns, and JavaScript execution.
03
Datacenter IP Detection
Real users browse from home and mobile networks. AI scrapers come from cloud datacenters. We flag datacenter IPs automatically.
You're in control
Policies let you decide exactly what gets blocked. No one-size-fits-all rules.
Block all AI scrapers
The default. Zero AI bots get through — GPTBot, Claude, and 20+ others.
Block during business hours only
Let archive bots in at night while protecting during peak traffic.
Block on specific paths
Protect /admin, /api, or /checkout while leaving /blog open.