Anubis
The most recommended of 4 anti-scraping tools
Open-source proof-of-work gate that sharply cuts AI scraper traffic on small sites without tracking visitors, but many see it as a temporary fix that frustrates slow devices.
Open-source proof-of-work gate that sharply cuts AI scraper traffic on small sites without tracking visitors, but many see it as a temporary fix that frustrates slow devices.
327 people gave an opinion
- recommend it
- 164
- criticize it
- 163
- approval share
- 50%
Recommended in 12 of 13 months
- November 2025: recommended
- December 2025: recommended
- January 2026: recommended
- February 2026: recommended
- March 2026: recommended
- April 2026: recommended
- May 2026: recommended
- June 2026: recommended
- July 2026: recommended
- August 2026: recommended
- September 2026: recommended
- October 2026: recommended
- November 2026: not recommended (month in progress)
Why it doesn’t carry the badge
- 164 people recommend itNeeds 10 or more, met.
- 1 recommender for every criticNeeds 2 to 1 or better, not met.
- Recommended in 12 of 13 monthsNeeds 4 or more, met.
The same three rules apply to every product, and the badge can’t be bought. How the badge works
What people say about it
The reasons people give, with the number of comments that give each one. Open a reason to read what they said.
Why people recommend it
Each mark is one comment
Drastically cuts bot traffic
“Anubis cut the accesses on my little personal Forgejo instance with nothing particularly interesting on it from about 600K hits per day to about 1000.”
Comment from 12 Dec 2025 in “Guarding My Git Forge Against AI Scrapers” “As soon as Anubis became active in there, it decreased to about 11 requests after 24 hours, most just from curious humans.”
Comment from 29 Mar 2026 in “The bot situation on the internet is worse than you could imagine” “putting anubis in front of a website demonstrably reduces the amount of crawling and that is the entire goal”
Comment from 6 Sep 2026 in “It took a year to ship WebAssembly in Anubis” - Comment from 26 Jul 2026 in “Who does Anubis actually stop?”
- Comment from 30 Aug 2026 in “Creepy Crawlies”
- Comment from 10 Jul 2026 in “Punk, or why I don't stream anymore”
- Comment from 26 Jul 2026 in “Who does Anubis actually stop?”
Makes mass crawling expensive
“It works by running some sort of complex calculation in javascript, so it won't get rid of all bots, but it should slow them all down.”
Comment from 17 Dec 2025 in “AI search engine – How to prevent bots?” “The point of Anubis isn't to prevent bots from accessing a site, but rather to prevent dumb bots from accidentally DOSing a site.”
Comment from 31 Aug 2026 in “Creepy Crawlies” “The goal isn't to eliminate scrapers, its to prevent a distributed scraping network from requesting 10000 pages a second each”
Comment from 6 Sep 2026 in “It took a year to ship WebAssembly in Anubis” - Comment from 25 Jul 2026 in “Who does Anubis actually stop?”
- Comment from 2 Nov 2025 in “You Don't Need Anubis”
- Comment from 16 Nov 2025 in “The internet is no longer a safe haven”
Private, open alternative to Cloudflare
“it's actually cool and loved project here. It's an open-source Captcha that filters out bots, and it doesn't track you around the web”
Comment from 28 Aug 2026 in “We found a division by zero bug in FFmpeg with a vibecoded fuzzer” “Anubis is significantly better than Cloudfare from a ux perspective because it doesn't require interacting with the page.”
Comment from 6 Sep 2026 in “It took a year to ship WebAssembly in Anubis” “The proof-of-work approach is much better privacy-wise than what the usual CAPTCHA services are doing.”
Comment from 28 Aug 2026 in “We found a division by zero bug in FFmpeg with a vibecoded fuzzer” - Comment from 20 Nov 2025 in “Questions for Cloudflare”
Barely disrupts real visitors
“Anubis is significantly better than Cloudfare from a ux perspective because it doesn't require interacting with the page.”
Comment from 6 Sep 2026 in “It took a year to ship WebAssembly in Anubis” “Having to see half-a-second of the Anubis splashscreen occasionally is a small price to pay for keeping it alive.”
Comment from 2 Nov 2025 in “You Don't Need Anubis” “Anubis’s silly, harmless images do a good job of driving away the traffic I don’t want on my personal site.”
Comment from 26 Jul 2026 in “Who does Anubis actually stop?” - Comment from 18 Dec 2025 in “Show HN: Stop AI scrapers from hammering your self-hosted blog (using porn)”
What people warn about
Each mark is one comment
Temporary fix scrapers can bypass
“Anubis is offering a temporary reprieve, but after reading the recent kernel.org article it's increasingly clear that this is a temporary bandaid.”
Comment from 15 Sep 2026 in “An update on Wayback Machine access” “We're using Anubis where possible, but a lot of it is just whack-a-mole with residential proxies.”
Comment from 14 Jul 2026 in “How the FSF sysadmins block botnets with reaction” “It doesn't detect "real browsers". It simply adds some friction and is niche enough that AI scrapers have not bothered to bypass it yet.”
Comment from 7 Aug 2026 in “99% of My Website Traffic Is Bots” - Comment from 31 Aug 2026 in “Creepy Crawlies”
- Comment from 7 Aug 2026 in “99% of My Website Traffic Is Bots”
- Comment from 31 Aug 2026 in “Creepy Crawlies”
Very slow on low-end devices
“The cost is nothing. The browser implementation is too slow, mobile devices are too slow, and hash algorithms with hardware acceleration are too fast.”
Comment from 26 Jul 2026 in “Who does Anubis actually stop?” “it annoys regular visitors and prevents people on low-powered devices or with JavaScript disabled from reading the site at all”
Comment from 22 May 2026 in “Hating AI Is Good” “it makes visiting websites very difficult (often multiple minutes wait times) on old hardware and low-end smartphones”
Comment from 26 Jul 2026 in “Cloudflare's new AI traffic options for customers” - Comment from 8 Aug 2026 in “99% of My Website Traffic Is Bots”
Difficulty setting easily misconfigured
“Anubis will sometimes sit and ask for ridiculous amounts of work, but at least it's never outright denied access.”
Comment from 28 Aug 2026 in “We found a division by zero bug in FFmpeg with a vibecoded fuzzer” “The Anubis difficulty setting is (or was) so high that nobody could visit the site without leaving it open for minutes or hours.”
Comment from 29 Mar 2026 in “The bot situation on the internet is worse than you could imagine” “The Anubis difficulty scale is unintuitive and the difference between a small delay and becoming unusable is easy to cross.”
Comment from 11 Jul 2026 in “An Update on the scraper situation” Requires JavaScript and cookies
“I'm certainly am not going to whitelist those sites, nor am I going to enable cookies wholesale just to avoid solving challenges.”
Comment from 6 Sep 2026 in “It took a year to ship WebAssembly in Anubis” “If you change your IP address, it invalidates the cookie. If you don't change your IP address, you can be blocked by IP address.”
Comment from 6 Sep 2026 in “It took a year to ship WebAssembly in Anubis” “it annoys regular visitors and prevents people on low-powered devices or with JavaScript disabled from reading the site at all”
Comment from 22 May 2026 in “Hating AI Is Good”
Other anti-scraping tools people recommend
The three most recommended other anti-scraping tools, with the same counts for each, so you can compare like for like. The tick on each bar marks the 2 to 1 line the badge needs.
| Product | Recommend | Criticize | Approval | Months | Owned | Badge |
|---|---|---|---|---|---|---|
| AnubisThis page | 164 | 163 | 50% | 12 | — | — |
| iocaine | 9 | 5 | 64% | 6 | — | — |
| Miasma | 8 | 6 | 57% | 2 | — | — |
| Poison Fountain | 5 | 5 | 50% | 4 | — | — |
What people said
40 of the 465 comments that mention it, newest first. Each links to the original comment.
“Anubis is offering a temporary reprieve, but after reading the recent kernel.org article it's increasingly clear that this is a temporary bandaid.”
“If you change your IP address, it invalidates the cookie. If you don't change your IP address, you can be blocked by IP address.”
“I'm certainly am not going to whitelist those sites, nor am I going to enable cookies wholesale just to avoid solving challenges.”
“The goal isn't to eliminate scrapers, its to prevent a distributed scraping network from requesting 10000 pages a second each”
“putting anubis in front of a website demonstrably reduces the amount of crawling and that is the entire goal”
“Anubis is significantly better than Cloudfare from a ux perspective because it doesn't require interacting with the page.”
“The moment anyone you are defending against so much as looks at the mechanics of solving the challenge it completely falls apart.”
“The point of Anubis isn't to prevent bots from accessing a site, but rather to prevent dumb bots from accidentally DOSing a site.”
“But the tokens are IP-bound, and as the article mentions a crawler using a single IP is not so difficult to block.”
“If every site does it the scrapers will adapt. The scrapers will always have a cost advantage over real users for this.”
“the excess load due to scraping activity falls precipitously when Anubis or similar solutions are used”
“The proof-of-work approach is much better privacy-wise than what the usual CAPTCHA services are doing.”
“Anubis will sometimes sit and ask for ridiculous amounts of work, but at least it's never outright denied access.”
“it's actually cool and loved project here. It's an open-source Captcha that filters out bots, and it doesn't track you around the web”
“Over a slow mobile connection Anubis doesn't load at all, even if the actual website would load just fine in seconds.”
“It doesn't detect "real browsers". It simply adds some friction and is niche enough that AI scrapers have not bothered to bypass it yet.”
“I'm not using this for anything but proving a point that the LLM itself can write the bypass tools and run them happily.”
“it makes visiting websites very difficult (often multiple minutes wait times) on old hardware and low-end smartphones”
“Anubis’s silly, harmless images do a good job of driving away the traffic I don’t want on my personal site.”
“The cost is nothing. The browser implementation is too slow, mobile devices are too slow, and hash algorithms with hardware acceleration are too fast.”
“it must be stopping _some_ sort of undesirable traffic without costing too much desirable traffic”
“Anubis stops mass crawling of web pages, by requiring a proof of work, which makes accessing these websites more expensive.”
“We're using Anubis where possible, but a lot of it is just whack-a-mole with residential proxies.”
“The Anubis difficulty scale is unintuitive and the difference between a small delay and becoming unusable is easy to cross.”
“There's no reason for anubis itself to cause reload loops; it's tricky to configure a webserver to use it in some scenarios.”
“I installed Anubis on some online forums I run, and I've been amazed by how much traffic dropped.”
“resisting the current drive of the industry to ruin as much of the good faith resource donations from others is an admirable objective”
“it annoys regular visitors and prevents people on low-powered devices or with JavaScript disabled from reading the site at all”
“The Anubis difficulty setting is (or was) so high that nobody could visit the site without leaving it open for minutes or hours.”
“As soon as Anubis became active in there, it decreased to about 11 requests after 24 hours, most just from curious humans.”
“I think that a UN/(Unicef?) website (not sure which one) did use anubis so maybe you can put it behind businesses too”
“it was so quirky and completely not disruptive that I didn't mind routing my legit users through it”
“It works by running some sort of complex calculation in javascript, so it won't get rid of all bots, but it should slow them all down.”
“Anubis cut the accesses on my little personal Forgejo instance with nothing particularly interesting on it from about 600K hits per day to about 1000.”
“I would to see Anubis and other alternatives thrive much more than closed ones like Cloudflare.”
“I like what it does because it forces bots to either identify themselves as such or face challenges.”
“Having to see half-a-second of the Anubis splashscreen occasionally is a small price to pay for keeping it alive.”
“This program is designed to help protect the small internet from the endless storm of requests that flood in from AI companies.”
“It only challenges user agents with Mozilla in their name by design, because user agents that do otherwise are already identifiable.”
“The whole purpose of Anubis is to be expensive for bots that repeatedly request the same site multiple times a second.”
Counts come from 1,795,640 Hacker News comments, November 2025 to November 2026. How we count. Report a mistake.