waf.bot_score — Bot Score (0–100)

0–100

In the console: Bot Score (0–100)

The bot risk score calculated by HEIMWALL for every request. 0 represents a definite human, 100 a definite bot. Determined using behavioral analysis, IP reputation, TLS fingerprinting, and more.

Tip

Common thresholds: ge 60 = moderate-high bot probability, ge 80 = very high bot probability. Legitimate AI crawlers may also score high; combine with waf.client.bot_category for precision.

Supported Operators

Operator	Description
lt	Less than
le	Less than or equal
gt	Greater than
ge	Greater than or equal

Examples

IF   waf.bot_score ge 80
THEN block

IF   waf.bot_score ge 60
THEN captcha

IF   waf.bot_score ge 60 AND waf.client.bot_category not_in search, seo
THEN block

Related

• waf.client.bot →
• waf.client.bot_category →