MANDATE

Bots don't attack pages. They attack actions: logins, sign-ups, checkouts and reservations.

MANDATE Verify checks the browser behind each of those requests. The browser produces short-lived, opaque proof, and your server submits it for hosted verification before the handler commits anything. Verification cross-references live server-side state, including replay and session continuity. There is no checkbox, puzzle or branded interstitial, and your app keeps its own UI and error handling.

Start with one route in Observe mode and review grouped decisions in the dashboard before considering enforcement. Add it in code with the Node SDK and Next.js collector, or at the edge with a Cloudflare Worker or Vercel middleware (preview).

MANDATE is in public beta, provided at no cost on a best-effort basis. The managed SDK is in preview.