Skip Navigation

Search

Customer Portal Bot Prevention Best Practices
Answer ID 13063   |   Last Review Date 10/09/2025

What can I do to improve my site's protections against bots?

Below are the current options available to you to protect your site from bot or automated traffic.  Note that making your end user pages more secure against automated traffic serves more than one purpose.  Some solutions may decrease your billable sessions, but just as importantly, if your Customer Portal pages are set up in an inefficient or query-heavy manner, excessive bot traffic can compromise performance and availability.

Note that if your site is available to the public (meaning there is no login required), you should have calibrated your sessions entitlements taking into account that at least some automated traffic will be generating sessions against your site.  No solution can filter out all automated traffic and the only guaranteed way to ensure that your knowledge base statistics and sessions are not inflated by bots crawling across your site is to put content behind a login.

Important - B2C Service sites are hosted in a multi-tenant environment.  If inefficient queries or poorly implemented end user page customizations are causing availability issues, network restrictions may be temporarily put in place to ensure that you do not impact other customers.

Options For Bot Remediation

(1) Akamai - Akamai is a separate product, a security suite that can be put in front of your B2C Service site to significantly increase the odds that automated or malicious traffic is detected and rejected before it enters the Oracle network.  This service is free of charge, and there isa  document attached to this answer detailing the process for testing an enabling Akamai.  If you would like to look into it, please submit a Service Request and we will start with enabling it on a test site.

(2) Bring your Own Captcha (BYOC) is a service that is available as a product feature starting in the 25c version of the application.  This refers users to a CAPTCHA challenge on page load once a session.    You are able to configure your own CAPTCHA service or use a basic one that comes with the feature.  Note that this is distinct from the Customer Portal abuse detection feature, which protects your webforms from attackers - this can be configured on page load to help mitigate automations and bots.  There is documentation attached to this answer on how to implement the feature.

 

 

Available Languages for this Answer:

Notify Me
The page will refresh upon submission. Any pending input will be lost.