Bot detection should not stop at allow/block. This post shows how StyloBot's classification result becomes application logic in ASP.NET: tag helpers in Razor, action filters and policies in controllers, signal-level gating, so your UI can shape the experience…
Bot detection should not stop at allow/block. This post shows how StyloBot's classification result becomes application logic in TypeScript: server middleware for Express and Fastify, template helpers for Handlebars, Nunjucks, and EJS, and browser web…
Identity-based bot detection (IPs, user-agents, headers) collapses the moment automation starts rotating identities. StyloBot models clients as behavioural shapes in a 130+ dimensional vector space. Here's why that's the right level of abstraction for level-4…
How do you test a detector whose answer is supposed to change as it learns? This post is about BDF, the Behavioural Definition Format that makes StyloBot testable: one file defines a class of traffic, then drives regression replay, load generation, and a…
StyloBot's detection engine is ASP.NET Core. This post explains how that engine connects to Go gateways, Node.js applications, and any other stack via a gRPC sidecar, a typed Go SDK, and a Caddy plugin, without any of those consumers needing to know anything…
Long-running services tend to slowly drift toward unbounded memory. Here's how I find that drift, how I think about fixing it without papering over it, and a worked example from StyloBot's vector similarity layer that took it from 13 GB on the Large Object…
Heads up: this one is for the nerds. It's a deep technical dive into StyloBot's adaptive learning system (EWMA updates, hysteresis thresholds, verdict caching, variance watchdogs), with real code from Mostlylucid.BotDetection and pointers to the equivalent…
Well today was a BIT OF A DAY. I handed in my notice on one contract (been in it almost 2 years!) and my other contract decided to terminate...SO...at the end of May I'll be officially unemployed. It's an odd one...at the moment my body is filled with nervous…
Most software still assumes the world will hand it clean inputs and stable rules. Production usually does neither. This post is the through-line behind a bunch of things I've been building: DiSE, Constrained Fuzziness, CFMoM, Reduced RAG, StyloFlow, The Ten…
Enterprise bot detection shouldn't require a PhD in infrastructure (or thousands a month in expenditure to use!). Two lines of code, zero external services, and you're running (up to) 21 detectors in milliseconds on every request to every endpoint. Read Part…