Show HN: Web-tarpit – Bot trap for any JavaScript server. Zero deps, one import

Category: security

Tags: security, bot-protection, web-security, honeypot, middleware

Score: 7.0/10 (Innovation: 7, Technical: 6, Documentation: 8, Utility: 7)

A JavaScript bot trap that wastes vulnerability scanners' time by serving fake WordPress pages, honeypot credentials, and slow-drip responses. It's interesting because it implements active defense with zero dependencies and works across multiple JavaScript server environments.

Target audience: backend devs, devops, security engineers

Repository: https://github.com/crumrine/web-tarpit · JavaScript · MIT

View on Hacker News