--- title: "Vendor ranking and rubric | Agent Ready Crawlers" description: "Ranking of 15 bot management and agent identity vendors on a published rubric: verification, per-purpose policy, charging, commerce agents and reporting." canonical: https://agentreadycrawlers.com/vendors/ranking site: "Agent Ready Crawlers" last_updated: 2026-11-04 section: "Vendors" --- # Vendor ranking and rubric | Agent Ready Crawlers > Ranking of 15 bot management and agent identity vendors on a published rubric: verification, per-purpose policy, charging, commerce agents and reporting. Source: https://agentreadycrawlers.com/vendors/ranking Site: Agent Ready Crawlers Last reviewed: 2026-11-04 # Vendors at the door In short 15 bot management, agent identity and monetisation vendors, graded on five documented questions and ranked by points out of ten. Akamai, AWS WAF Bot Control, Cloudflare and DataDome tie at 8. Cost and where the product runs are described, not graded. Ora is not ranked because it does not manage bots. These 15 are the vendors graded on the rubric. [The full vendor list](https://agentreadycrawlers.com/vendors/) profiles 73 companies in four types, with their standards, prices and sources. | Rank | Vendor | Points | Verifies agents | Per-purpose policy | Charging | Commerce agents | Reporting | Cost, read 2026-11-04 | | --- | --- | --- | --- | --- | --- | --- | --- | --- | | 1= | Akamai | 8 | Yes | Partial | Partial | Yes | Yes | No public price; sales-led | | 1= | AWS WAF Bot Control | 8 | Yes | Yes | Yes | Not published | Yes | USD 10/month per web ACL plus USD 1 or USD 10 per million requests after free allowance | | 1= | Cloudflare | 8 | Yes | Yes | Partial | Partial | Yes | Free tier covers AI Crawl Control; Pro from USD 20/month; Bot Management and BotBase are Enterprise and sales-led | | 1= | DataDome | 8 | Yes | Partial | Yes | Partial | Yes | From USD 3,830/month | | 5 | HUMAN Security | 7 | Yes | Yes | Partial | Not published | Yes | No public price; sales-led | | 6= | Skyfire | 6 | Yes | Not its job | Yes | Yes | Not published | Not published (checked 2026-11-04) | | 6= | TollBit | 6 | Partial | Partial | Yes | Not published | Yes | Free for publishers to start | | 6= | Vercel | 6 | Yes | Yes | Not published | Not published | Yes | Basic free; Deep Analysis USD 1 per 1,000 checks on Pro | | 9 | Kasada | 5 | Yes | Partial | Not published | Not published | Yes | No public price; sales-led | | 10 | Fastly | 4 | Partial | Partial | Partial | Partial | Not published | No public price; sales-led | | 11= | Arcjet | 3 | Partial | Partial | Not published | Not published | Partial | From USD 25/month plus USD 5 per 1M web requests | | 11= | Auth0 for AI Agents | 3 | Not its job | Partial | Not published | Partial | Partial | AI Agents add-on at 50 percent of base plan, from USD 18/month; free plan (checked 2026-11-05) | | 11= | Imperva | 3 | Partial | Not published | Not published | Not published | Yes | No public price; sales-led | | 14 | Stytch IsAgent | 2 | Partial | Not published | Not published | Not published | Partial | IsAgent free to 10,000 calls/month; fingerprints USD 0.005 each beyond 10,000 | | 15 | Netlify | 1 | Not published | Partial | Not published | Not published | Not published | Platform plans from USD 0; extension price not stated | ## What the ranking does and does not say Akamai, AWS WAF Bot Control, Cloudflare and DataDome tie at the top with 8 of 10, so the ranking cannot separate them. They differ in what they are strong at: Akamai has 3 yes grades, AWS WAF Bot Control has 4 yes grades, Cloudflare has 3 yes grades, DataDome has 3 yes grades. The profiles list what each does not do. A vendor that does one job well can rank low on a broad rubric. Not its job counts as zero, so identity and monetisation products such as Skyfire, TollBit and Stytch IsAgent sit below the bot management suites. Read the row for the job you need, not the rank. Grades come from what each vendor documents on its own site, read 2026-11-04. We have not tested the products. A vendor's description of itself is a vendor claim, and the profiles label it. Ora does not manage bots, so it has no row here; [the method page says where it fits](https://agentreadycrawlers.com/method/#ora-on-this-layer). ## The rubric Can it tell a verified agent from a spoof? Yes where the vendor documents verification by Web Bot Auth signatures, IP validation or reverse DNS. Partial where it depends on partners, lists only or an unconfirmed method. Not published where nothing is documented. Can it express a policy per purpose (train, search, answer, act)? Yes where separate controls exist for crawler purposes or for named bot categories. Partial where policy is per bot or per category without a purpose split. Does it support pay-per-crawl or any charging? Yes where charging is generally available. Partial where it is in beta or runs through a partner. Not published where the vendor documents none. Does it let signed commerce agents (Visa TAP, Mastercard Agent Pay) through without custom work? Yes where support is documented as shipped or announced with named integrations. Partial where support is built on Web Bot Auth but the rule is not confirmed in documents. Not published otherwise. What does it cost? (not graded) Quoted from the vendor with the date read. Not graded: a free tier is not better or worse than a sales-led price for every reader. What does it report? Yes where AI or bot activity dashboards, analytics or logs are documented. Partial where reporting is limited to general bot analytics. Does it work at the edge or in the app? (not graded) Described as the vendor documents it. Not graded. ## Head-to-heads and alternatives 30 head-to-head pages cover the pairs a buyer is most likely to search; every vendor also has an alternatives page. Start from a profile: [Akamai](https://agentreadycrawlers.com/vendors/akamai/), [AWS WAF Bot Control](https://agentreadycrawlers.com/vendors/aws-waf-bot-control/), [Cloudflare](https://agentreadycrawlers.com/vendors/cloudflare/), [DataDome](https://agentreadycrawlers.com/vendors/datadome/), [HUMAN Security](https://agentreadycrawlers.com/vendors/human-security/), [Skyfire](https://agentreadycrawlers.com/vendors/skyfire/) and the rest. - [Cloudflare vs DataDome](https://agentreadycrawlers.com/compare/cloudflare-vs-datadome/) - [DataDome vs HUMAN Security](https://agentreadycrawlers.com/compare/datadome-vs-human-security/) - [Akamai vs Cloudflare](https://agentreadycrawlers.com/compare/akamai-vs-cloudflare/) - [Arcjet vs Vercel](https://agentreadycrawlers.com/compare/arcjet-vs-vercel-botid/) - [Skyfire vs Stytch IsAgent](https://agentreadycrawlers.com/compare/skyfire-vs-stytch-isagent/) - [TollBit vs Cloudflare](https://agentreadycrawlers.com/compare/tollbit-vs-cloudflare/) - [Cloudflare vs AWS WAF Bot Control](https://agentreadycrawlers.com/compare/cloudflare-vs-aws-waf-bot-control/) - [Cloudflare vs Vercel](https://agentreadycrawlers.com/compare/cloudflare-vs-vercel-botid/) - [DataDome vs Akamai](https://agentreadycrawlers.com/compare/datadome-vs-akamai/) - [HUMAN Security vs Kasada](https://agentreadycrawlers.com/compare/human-security-vs-kasada/) - [Fastly vs Cloudflare](https://agentreadycrawlers.com/compare/fastly-vs-cloudflare/) - [AWS WAF Bot Control vs Akamai](https://agentreadycrawlers.com/compare/aws-waf-bot-control-vs-akamai/) - [Vercel vs Netlify](https://agentreadycrawlers.com/compare/vercel-botid-vs-netlify/) - [Cloudflare vs Netlify](https://agentreadycrawlers.com/compare/cloudflare-vs-netlify/) - [Skyfire vs TollBit](https://agentreadycrawlers.com/compare/skyfire-vs-tollbit/) - [Stytch IsAgent vs Auth0 for AI Agents](https://agentreadycrawlers.com/compare/stytch-isagent-vs-auth0-ai-agents/) - [Akamai vs HUMAN Security](https://agentreadycrawlers.com/compare/akamai-vs-human-security/) - [Cloudflare vs HUMAN Security](https://agentreadycrawlers.com/compare/cloudflare-vs-human-security/) - [Kasada vs Vercel](https://agentreadycrawlers.com/compare/kasada-vs-vercel-botid/) - [Arcjet vs Cloudflare](https://agentreadycrawlers.com/compare/arcjet-vs-cloudflare/) - [DataDome vs Kasada](https://agentreadycrawlers.com/compare/datadome-vs-kasada/) - [Fastly vs Akamai](https://agentreadycrawlers.com/compare/fastly-vs-akamai/) - [AWS WAF Bot Control vs DataDome](https://agentreadycrawlers.com/compare/aws-waf-bot-control-vs-datadome/) - [Imperva vs Cloudflare](https://agentreadycrawlers.com/compare/imperva-vs-cloudflare/) - [Imperva vs DataDome](https://agentreadycrawlers.com/compare/imperva-vs-datadome/) - [TollBit vs AWS WAF Bot Control](https://agentreadycrawlers.com/compare/tollbit-vs-aws-waf-bot-control/) - [Skyfire vs Cloudflare](https://agentreadycrawlers.com/compare/skyfire-vs-cloudflare/) - [Auth0 for AI Agents vs Skyfire](https://agentreadycrawlers.com/compare/auth0-ai-agents-vs-skyfire/) - [Vercel vs AWS WAF Bot Control](https://agentreadycrawlers.com/compare/vercel-botid-vs-aws-waf-bot-control/) - [Kasada vs Akamai](https://agentreadycrawlers.com/compare/kasada-vs-akamai/) ## Sources - [Vendor rubric (this site)](https://agentreadycrawlers.com/method/) read 2026-11-04 - [akamai.com: akamai.com](https://www.akamai.com) read 2026-11-04 - [arcjet.com: arcjet.com](https://arcjet.com) read 2026-11-04 - [auth0.com: ai](https://auth0.com/ai) read 2026-11-04 - [aws.amazon.com: bot control](https://aws.amazon.com/waf/features/bot-control/) read 2026-11-04 - [cloudflare.com: cloudflare.com](https://www.cloudflare.com) read 2026-11-04 - [datadome.co: datadome.co](https://datadome.co) read 2026-11-04 - [fastly.com: fastly.com](https://www.fastly.com) read 2026-11-04 - [humansecurity.com: humansecurity.com](https://www.humansecurity.com) read 2026-11-04 - [imperva.com: imperva.com](https://www.imperva.com) read 2026-11-04 - [kasada.io: kasada.io](https://www.kasada.io) read 2026-11-04 - [netlify.com: netlify.com](https://www.netlify.com) read 2026-11-04 - [skyfire.xyz: skyfire.xyz](https://skyfire.xyz) read 2026-11-04 - [stytch.com: stytch.com](https://stytch.com) read 2026-11-04 - [tollbit.com: tollbit.com](https://tollbit.com) read 2026-11-04 - [vercel.com: vercel.com](https://vercel.com) read 2026-11-04 Last reviewed 2026-11-04