Cut bot-driven loss without punishing real customers.
Get a continuous bot risk score from mouse, keyboard, scroll, and browser-integrity signals—so you block credential stuffing and scrapers while keeping checkout and signup flows smooth for humans. Sub-50ms scoring fits inline with your existing allow or challenge rules.
Continuous bot score
p95 scoring latency
Automation stacks flagged
Behavioral biometrics in SDK
Behavioral observation
Capabilities
Everything you need
Behavioral Biometrics (Default On)
The SDK passively collects mouse dynamics, keystroke timing, scroll rhythm, and touch gestures from page load — no extra API calls required. Behavioral data flows automatically into bot.detect() and identify().
Mouse Trajectory Analysis
Velocity, acceleration, curvature, jitter, and straight-line ratio form a neuromotor signature. Bots exhibit near-perfect paths and zero jitter.
Keystroke Dynamics
Dwell time, flight time, typing speed, and rhythm consistency distinguish human typists from scripted input and paste bots.
Scroll & Touch Patterns
Scroll speed, smoothness, and direction plus touch swipe velocity and multi-touch patterns add mobile and tablet coverage.
Headless Browser Detection
Detect Puppeteer, Playwright, Selenium, and other automation frameworks through browser API inconsistencies and JavaScript environment analysis.
Browser Integrity Checks
Verify that navigator properties, WebGL capabilities, and JavaScript APIs are internally consistent and match the claimed browser.
Real-Time Scoring
Every request receives a bot score from 0.0 (definitely human) to 1.0 (definitely bot) with sub-50ms processing time.
Challenge System
Configurable invisible challenges for edge cases. CAPTCHA-free verification that doesn't interrupt the user experience.
Session Tracking
Monitor behavior across the entire session, not just a single request. Detect bots that mimic human behavior initially but diverge over time.
Framework Detection
Identify specific automation tools — Puppeteer, Playwright, Selenium, PhantomJS, and 20+ others — with tool-specific signatures.
Adaptive Thresholds
Configurable scoring thresholds with anomaly detection surface emerging bot patterns and zero-day automation frameworks.
How It Works
Three steps to get started
Add the SDK
One client bundle enables behavioral biometrics by default—mouse, keyboard, scroll, and touch tracking start on init with no extra setup.
Observe real behavior
Guard scores pointer dynamics, scroll rhythm, keystroke timing, and environment consistency across the session, not just the first request.
Enforce your policy
Use bot score and labels in your WAF, app logic, or queue—allow, rate-limit, CAPTCHA, or hard-block based on thresholds you own.
Integration
A few lines of code
Get LR Guard running in your application with our TypeScript SDK. Full type safety, comprehensive documentation, and framework-agnostic design.
import { LightningResearch } from '@lightningresearch/sdk'
const { sessionToken } = await fetch('/api/collector/session', {
method: 'POST',
}).then((res) => res.json())
const client = new LightningResearch({
sessionToken,
endpoint: 'https://api.lrdefender.lightningresearch.ai',
// behavioral: true is the default — tracking starts automatically
})
// Behavioral data is included automatically after user interaction
const bot = await client.bot.detect()
console.log(bot)
// Sample bot.detect() JSON response:
// {
// "isBot": false,
// "classification": "human",
// "botScore": 0.02,
// "confidence": 0.98,
// "detectionMethod": "behavioral+fingerprint",
// "automation": {
// "suspectedFramework": null,
// "headlessIndicators": 0
// },
// "details": {
// "mouseEntropy": 0.94,
// "scrollPattern": "organic",
// "keyboardCadence": "human_like",
// "browserIntegrity": "pass"
// },
// "sessionSignals": {
// "observationMs": 1840,
// "samples": 312
// },
// "requestId": "req_01hxyz..."
// }
Use Cases
Built for real-world security
Credential stuffing at scale
Throttle or block login floods that use valid passwords from breaches—score spikes before your IAM lockouts frustrate real users.
Inventory & checkout bots
Protect sneaker drops, event tickets, and limited SKUs by denying high-confidence automation while preserving throughput for humans in line.
Scraping & price intelligence
Raise cost for headless harvesters that hammer catalog and pricing APIs so competitors and aggregators stop treating your site as a free feed.
Lead & signup spam
Keep fake accounts and SEO spam out of trials and contact forms—often without showing a CAPTCHA to trusted traffic.
API & partner endpoints
Layer Guard in front of public or partner APIs where tokens leak: score the client behavior, not just the key.
Get started with LR Guard
Free tier includes 10,000 identifications per month. No credit card required.
Live Demo
Real-Time Behavioral Analysis
Move your mouse, type, and scroll. We send signals to the bot API and show the live verdict.
0
Mouse Events
Speed: 0 · Jitter: 0
0
Key Presses
Avg Dwell: 0ms
0
Scroll Events
Avg speed index: 0
—
Bot Score
Collecting...