Glossary
Bot Detection
Bot detection attempts to distinguish, from the pattern of a request rather than any credential it presents, whether the party making it is a human operating a browser, a scripted client, or an autonomous agent acting without a person directly driving each action. None of these are inherently illegitimate — plenty of automated and agentic traffic is expected and welcome — but a system's authorization logic may reasonably treat them differently.
Detection signals are probabilistic and adversarial: they're built from patterns automated clients tend to exhibit, and anything built to evade detection specifically will adapt to whatever signal is being used. Bot detection narrows uncertainty; it isn't a definitive identity check on its own.