# What bot detection software has the best protection for web scraping and credential stuffing attacks?

<p class="elv-tracking-normal elv-text-default elv-font-figtree elv-text-base elv-leading-base elv-font-normal" elv="true">Hi G2, I'm researching which bot detection tools hold up best against web scraping and credential stuffing, and wanted real reviews behind the shortlist. These two attacks punish weak detection differently, one floods you, the other hides in real traffic, so I focused on what reviewers actually saw. In the<a class="a a--md" elv="true" href="https://www.g2.com/categories/bot-detection-and-mitigation"> </a><a class="a a--md" elv="true" href="https://www.g2.com/categories/bot-detection-and-mitigation">bot detection and mitigation</a> category, three come up most: DataDome, HUMAN Sightline, and Netacea. The wider list:</p><ol>
<li>
<a class="a a--md" elv="true" href="https://www.g2.com/products/datadome/reviews"><strong>DataDome</strong></a>: reviewers say it catches the sneakiest bots, including credential stuffing and scraping, with an audit mode to validate before blocking.</li>
<li>
<a class="a a--md" elv="true" href="https://www.g2.com/products/human-sightline-cyberfraud-defense/reviews"><strong>HUMAN Sightline Cyberfraud Defense</strong></a>: consistently credited with stopping credential stuffing and scraping with little customer intervention.</li>
<li>
<a class="a a--md" elv="true" href="https://www.g2.com/products/netacea-bot-detection-and-bot-management/reviews"><strong>Netacea Bot Detection and Bot Management</strong></a>: reviewers say scrapers and pricing-intelligence bots that used to overload their site are no longer a problem.</li>
<li>
<a class="a a--md" elv="true" href="https://www.g2.com/products/fingerprintjs-fingerprint/reviews"><strong>Fingerprint</strong></a>: device intelligence that links repeat offenders even behind VPNs and proxies.</li>
<li>
<a class="a a--md" elv="true" href="https://www.g2.com/products/cloudflare-application-security-and-performance/reviews"><strong>Cloudflare Application Security and Performance</strong></a>: blocks bots at the edge without constant tuning, though some hit false positives.</li>
</ol><p class="elv-tracking-normal elv-text-default elv-font-figtree elv-text-base elv-leading-base elv-font-normal" elv="true">Which of these actually held up under a sustained credential-stuffing run? And did stopping scrapers cost you any real users?</p>

##### Post Metadata
- Posted at: 22 days ago
- Author title: Marketer
- Net upvotes: 1


## Comments
### Comment 1

Oh for scraping and credential stuffing specifically, the specialists are what you want, not a generic firewall. DataDome is highly rated and purpose-built for real-time bot protection against scraping, credential stuffing and account takeover, with fast detection at the edge. HUMAN (Sightline) is another strong specialist, focused on distinguishing real humans from sophisticated bots, good against automated fraud and account abuse. Cloudflare&#39;s application security includes solid bot management too, especially if you&#39;re already on their network. To be real, the hard part with these attacks is catching evolving bots without blocking real users, so I&#39;d test each in detection-only mode first on your real traffic and see the false-positive rate before enforcing. Which is the bigger pain right now, scrapers hammering your content and pricing, or credential stuffing against your login?

##### Comment Metadata
- Posted at: 12 days ago





## Related discussions
- [How well does Trello scale into a larger team?](https://www.g2.com/discussions/1-how-well-does-trello-scale-into-a-larger-team)
  - Posted at: over 13 years ago
  - Comments: 6
- [Can we please add a new section](https://www.g2.com/discussions/2-can-we-please-add-a-new-section)
  - Posted at: over 13 years ago
  - Comments: 0
- [Quantifiable benefits from implementing your CRM](https://www.g2.com/discussions/quantifiable-benefits-from-implementing-your-crm)
  - Posted at: over 13 years ago
  - Comments: 4