Quick Summary
Anubis is an open-source tool developed by TecharoHQ to protect websites from automated scraping by introducing computational challenges for users. This tool acts as a reverse proxy, requiring users to complete a proof of work task before accessing web services. It aims to reduce the load from large-scale automated traffic while allowing legitimate users easy access, addressing a growing concern for site operators dealing with abusive traffic.
The Securityish Brief
Anubis, maintained by TecharoHQ, is designed to mitigate the impact of automated scraping on websites. By adding computational friction before granting access, it raises the cost of bulk scraping while remaining user-friendly for normal visitors. The tool operates as a reverse proxy, meaning it sits between users and the origin service, forwarding requests only after users complete a challenge.
The challenge is delivered via JavaScript, running in the user’s browser, and once completed, users receive a token that allows subsequent requests without repeating the task. This approach allows site operators to customize the challenge’s difficulty based on their traffic patterns and risk tolerance.
TecharoHQ developed Anubis in response to the heavy load that automated scraping placed on community-run sites. The tool is not a general-purpose security platform but a targeted solution for a specific operational issue. Its design emphasizes simplicity, avoiding unnecessary features while focusing on its primary function.
From a security standpoint, Anubis does not classify bots through behavioral analysis but relies on economic principles. By imposing a cost on each request, it makes large-scale automation financially unviable over time. This predictability can help administrators manage their web services more effectively.
As automated scraping continues to be a significant issue for many websites, tools like Anubis represent a practical response. Organizations looking to protect their content should consider implementing such solutions to balance accessibility for users with protection against abusive traffic.
Key Takeaways
- Evaluate your website’s traffic patterns to determine if automated scraping is a concern.
- Consider implementing Anubis or similar tools to introduce computational challenges for potential scrapers.
- Regularly monitor your site’s performance metrics to assess the impact of any new security measures.
- Adjust the difficulty of challenges based on user experience and the level of automated traffic.
- Maintain transparency with users about any challenges they may encounter when accessing your site.
Key Terms & Concepts
- Anubis: In this article, Anubis refers to an open-source tool designed to protect websites from automated scraping.
- Reverse Proxy: A reverse proxy is a server that sits between users and a web service, forwarding requests after certain conditions are met.
- Proof of Work: Proof of work is a computational challenge that users must complete to gain access to a service, raising the cost for automated requests.
Read the original article here: https://www.helpnetsecurity.com/2025/12/22/anubis-open-source-web-ai-firewall-protect-from-bots/
Your 5-Minute Securityish Brief
A weekly digest of cybersecurity news, phishing alerts, privacy tips, and emerging threats, simplified so anyone can understand what matters and why.
Securityish
Securityish explains cybersecurity, scams, data breaches, and privacy risks in simple language so you know what’s happening and how to protect yourself.
© 2026 Securityish
