OneShield Bot Protection on new websites

1. OneShield Bot Protection appeared on about 26 new sites in the last 30 days.^[1]
2. Six in ten new OneShield Bot Protection sites also use PHP.

The line is the 7-day average share of new sites that use OneShield Bot Protection, over the last 90 days. It starts at our first detection. The shaded area was measured against a different set of sites, so the line can step there without OneShield Bot Protection itself changing.^[2]

#	Movement	Tool	Share of all sites	Share of category	Bar
1	–	HSTS	47.5%	87.6%
2	–	Cloudflare Bot Management	13.7%	25.2%
3	–	Google reCAPTCHA	1.9%	3.5%
4	▲1	Anubis	0.1%	0.2%
5	▼2	DDoS-Guard	0.1%	0.2%
…
41	▲22	OneShield Bot Protection	<0.1%	<0.1%

All-time shares across the new sites we track: of all of them, and of the sites using any Security tool. Among September launches it ranked #30 in Security, up from #52 in August. All 398 in Security

Tool	Sites with both	vs all new sites	Bar
WordPress	31	4.2x
PHP	32	3.3x

Tools that turn up far more often on OneShield Bot Protection sites than on new sites in general, and how many times as common each one is there.

2 of the 59 sites using OneShield Bot Protection are product launches we list individually. The other 57 are sites we found crawling the wider web: they count towards the figures above, but we do not publish them one by one. They are included in the StackScope API and in Stackdar alerts.

Site	Found	Also detected
MtvHoops — Basketball film study mtvhoops.site · Education	Sep 28
HICONNECT - Attendance, Inventory and Project Management thehitelecom.com · Productivity · Vietnam	Sep 6

The StackScope API serves all 59 sites using OneShield Bot Protection, filterable and exportable, from £15 a month.

1. These figures cover websites that went live since April 2026, not the web as a whole.
2. Amber: 8 July to 10 September 2026, before we improved our infrastructure to index new sites much sooner, often on the day they go live. Sites found that early often haven't finished setting up, so anything usually added after launch reads lower from 10 September. We record each site as it was when we found it.
3. Country comes from what each site says about itself, such as a company registration, legal terms or a phone number, not just its domain ending. Too few sites state their country plainly for the usual count, so this one also counts single signals: a country domain ending, a phone number (for North America, its area code), a location the site declares in its own page metadata, or a country-specific vendor stack and the page language where they agree and nothing contradicts them. Read these as likely rather than certain.