Botd vs Mozilla http scanner

BotD is FingerprintJS's open-source, MIT-licensed JavaScript library that runs entirely in the browser to flag basic automation -- headless Chrome, PhantomJS, Selenium, and similar tools -- without any server round-trip for the detection itself. It ships as an npm package or as a CDN-hosted ES module and returns a plain detected/bot-kind result object from a single detect() call. It is free for any use with no signup; FingerprintJS separately sells a more sophisticated, paid, server-side Bot Detection API for teams that need those extra signals.

The HTTP Observatory grades a website's security headers -- CSP, HSTS, cookie flags, and more -- against Mozilla's recommended baseline, the same engine behind the long-running Mozilla Observatory scanner. The original mozilla/http-observatory Python API was shut down on 2024-10-31 when the tool moved to MDN; automated callers now POST to a v2 scan endpoint that returns a grade, score, and pass/fail counts, with a details link back to the full MDN report. It's fully public and keyless, rate-limited to one fresh scan per host per minute (cached results are returned for repeat calls within that window), and built for CI-pipeline use.