Block scrapers posing as browsers in Bunny Shield
Sumly keeps bots that pretend to be people out of your numbers, and with your Bunny API key adds a Bunny Shield custom WAF rule that blocks their network: in one click, through your assistant, or by itself.
-
AstroChart Google Play · in the app 🇪🇸 +€9.99
-
Humanize Stripe · on the site · from Facebook 🇿🇦 +€11.04
- TimeLoop App Store · in the app · via RevenueCat 🇺🇸 +€29.99
-
The live demo: our own apps, with example numbers.
Blocking in three steps
Bunny Shield on Advanced or above, your API key and the pull zone.
-
1
Turn on Bunny Shield for the pull zone, on Advanced or above: custom WAF rules, and matching a request by its network, start there.
-
2
In Sumly, open Projects and payments, the project, Bots & blocking, choose Bunny, paste the API key (Account settings › API key) and the pull zone's ID. Sumly finds its Shield zone and checks it has custom rules.
-
3
Under Insights › Bots › Disguised scrapers, press Block in Bunny, or turn on the autopilot.
What you see
Bunny next to every other project and provider, on the same pages.
Bots
Disguised scrapers, each with Block in Bunny, and Undo once it is blocked.
Overview
One card while a project is being scraped, with the button.
Alerts
One Bot attack notice per attack, in the bell and the app.
Visitors and Live
How many page views the Smart bot filter kept out.
Counts toward your plan
Nothing: the Smart bot filter and blocking are on every Sumly plan. On Bunny's side, Shield Advanced or above. Plans →
What you don't get
Nothing else in Bunny is read or changed: pull zones, storage and your own Shield rules stay as they are.
The details
What Sumly adds to Bunny Shield
- For a scraper network, one custom WAF rule: variable GEO, value ASN, operator STRMATCH, the network's number, action Block.
- For scrapers crowding one part of the site: a custom WAF rule on REQUEST_URI, operator BEGINSWITH, that path, action Challenge.
- Each rule is named sumly_… and added next to yours. Sumly looks for its own first, so a second click adds nothing.
When Sumly adds a rule
- When you press Block or Challenge, or your assistant calls block_bot and you confirm.
- By itself only with the autopilot on (off by default), for clear cloud scraper networks, and the alert says so.
- Undo deletes Sumly's rule alone. A network you took back is never blocked by the autopilot again.
Good to know
- A pull zone on Shield Basic has no custom WAF rules, so it is not connected; copy the rule from Bots instead, or choose Your own server.
- Bunny's API key opens the whole account: Bunny has no narrower key. Sumly keeps it encrypted, uses it only for its own rules, and deletes it when you disconnect.
- The rule blocks the whole network. Unlike Cloudflare, no exception for verified bots is added, as Bunny's docs do not say how to combine one.
- A network that also carries people at home or on their phones is never blocked whole.
Bunny questions
Why Shield Advanced?
Custom WAF rules and the GEO variable that matches a network are on Advanced and above. Basic has neither.
Where is the pull zone's ID?
In its address in the Bunny dashboard: dash.bunny.net/cdn/<ID>/general.
Is my whole account at risk with the key?
The key can do anything Bunny allows, so Sumly keeps it encrypted, uses it only to add and take back its own rules, and deletes it on disconnect. You can also make a new key in Bunny at any time, which ends the old one.
Can I undo it?
Yes: Undo block on the scraper's row, or delete the sumly_… rule in Shield yourself.
Other integrations
Shopify
Try it with your own projects
Sign in with Google or a code by e-mail and connect your first project. The first 14 days of a paid plan are free, with no card.
Start free trialOr look around first: open the live demo.