- IP database says
- Clean in every list
- Connection says
- TLS reaches a browser behind the TCP peer
- Browser says
- Consistent profile, nothing to flag
Cloaking software that reads the connection, not just the IP.
Reputation lists call a proxy "clean" long after it went live. MaxGuard inspects the connection itself, scores browser and reputation signals against your rules, then allows, routes, or blocks before your page loads. Bots, click farms, proxies, VPNs, and scrapers never see the asset.
Any residential proxyAny anti-detect browserNo JavaScript required for the verdict
What the IP claims. What the connection shows.
Sample assessments. Run your own in the live demo.
- Source IP
- 198.51.100.42
- IP database says
- Clean · 0 of 9 lists
- Connection says
- Proxy tunnel · extra network leg
- Confidence
- High
- Evidence
- Complete
- Seen
- 23× across 6 IPs
- Demo events
- 6
- Blocked
- 3
- Allowed
- 2
- Review
- 1
| Time / Geo | Outcome | Detection signal |
|---|---|---|
| US | BLOCK | Residential proxy · rotating egressProxy intelligence |
| CA | ALLOW | Clean · repeat browser fingerprintBrowser signals |
| FR | REVIEW | TLS / User-Agent fingerprint mismatchTransport signals |
| DE | BLOCK | Headless automation · WebDriver signalBrowser signals |
| AU | ALLOW | Gateway clear · connection continuity intactGateway Edge |
| NL | BLOCK | Mobile proxy · carrier-managed tunnelNetwork path |
Illustrative events across MaxGuard's detection layers. Review marks signals for inspection; Gateway delivery is configured as Allow or Block.
- Residential proxies
- Mobile 4G / 5G proxies
- Datacenter ASNs
- VPN exit nodes
- TOR relays
- Anti-detect browsers
- Headless automation
- Rotating exit pools
A clean IP is a claim.
The connection is evidence.
Gateway Edge adds an independent connection assessment to MaxGuard's traffic intelligence. See the classification, confidence, and evidence behind a connection, then let your campaign policy decide what happens next.
Proxy detection without JavaScript behavior signals. Gateway Edge detects proxies through connection and network evidence, without relying on JavaScript timezone checks or synthetic mouse and keyboard events. Bring any anti-detect browser and any residential proxy to the live demo. MaxGuard's browser-based protection adds JavaScript checks as a separate layer.
- Inspect the connection
Connection continuity and network-path observations add context beyond an IP address.
- See the evidence
Clear, suspicious, flagged, or inconclusive—with confidence and evidence availability shown separately.
- Choose the response
Configure allow or block actions by classification, confidence, and evidence. Keep signals visible even with enforcement off.
- IP database says
- Carrier range, trusted
- Connection says
- Same signature across 6 exits in 40 s
- Browser says
- Recurring fingerprint 5c2e…9a41
- IP database says
- No data yet
- Connection says
- Network-path anomaly on first contact
- Browser says
- JavaScript blocked, no client signals
Illustrative cases, not customer data. Reputation lists lag behind new networks; the connection is judged on the visit itself.
A proxy can change the address.
It can't remove the distance.
An anti-detect browser can change the profile a website sees. Gateway Edge compares raw TCP observations with TLS handshake timing and connection characteristics to assess the connection behind that profile.
In a proxy tunnel, the TCP peer can be the proxy while the TLS exchange still reaches the browser behind it. That extra leg leaves context an IP address alone cannot provide.
- 01Read the TCP peer
- 02Follow the TLS path
- 03Compare the context
TCP observes the proxy-to-MaxGuard leg. The tunneled TLS exchange also involves the browser-to-proxy leg. Gateway Edge evaluates the relationship alongside other connection evidence.
Timing is one signal. Network conditions, processing delays, and proxy behavior also matter. This illustration shows a TLS tunnel, not every type of proxy.
8f2c.a91e.07bdFlagged · connection evidence- Observe the request
- Compare independent signals
- Surface the connection risk
Reputation lists lag.
The connection doesn't.
A fresh IP address shouldn't mean a free pass. Gateway Edge examines the connection itself, so a proxy can reveal its presence before its address appears in a reputation list.
- Inspect network paths and connection continuity in real time.
- Combine independent observations into a connection assessment.
- See confidence and evidence availability alongside the result.
What is Cloaking Software?
Cloaking software is a hard traffic decision layer. It inspects the incoming request before any protected page or destination is served. Signals decide the outcome: allow, block, redirect, or route elsewhere. No guessing. No second chances for junk traffic.
Analyze before access
Score IP reputation, connection type, location, device, browser, traffic source, custom lists, and known abuse indicators before protected content ever loads.
Route traffic by rule
Allow real users. Block high-risk requests. Redirect selected traffic. Rotate pages and offers by your campaign rules. MaxGuard executes the decision you set.
Keep the evidence
Log every decision, the signals behind it, and the action taken so you can investigate abuse, tighten filters, and prove what the junk was costing you.
For paid-traffic landing pages, e-commerce, membership systems, content platforms, and custom apps, MaxGuard sits between unknown visitors and the assets you refuse to expose. Soft tools leave gaps. This one closes them.
Every way they hide. Covered.
One checkpoint between inbound traffic and the pages you protect. Each category below is judged on network evidence, browser signals, and your rules, not on the IP alone.
✕Residential & mobile proxies
Clean-looking home and carrier addresses that reputation lists never flag. Gateway Edge reads the TCP and TLS path and finds the extra leg the address hides.
Connection evidence · no JavaScript needed✕Anti-detect browsers & spoofed devices
A profile can claim any device. The connection profile, transport fingerprint, and browser capabilities have to agree with it. When they don't, the mismatch is the signal.
Consistency checks across layers✕Fraud rings & rotating IPs
A new exit address on every request, none of them listed anywhere. The recurring browser signature and connection continuity tie the sessions back together.
Recurrence · continuity · velocity✕Bots, scrapers & headless automation
Automation frameworks, headless browsers, and checker bots are stopped before they touch the funnel, and their fingerprints go on your lists.
Browser intelligence · behavior signals✕Spy tools & competitor crawlers
Ad-intelligence crawlers, compliance scanners, and competitors get routed to the page you choose. The real offer never renders for them.
Source rules · silent routing✓Real visitors
Genuine traffic passes straight through. No challenge screens, no warning pages, no giveaway redirect patterns. They never know the checkpoint was there.
Allowed · reason loggedPut a decision engine between every click and your content
MaxGuard turns raw visitor signals into an immediate action before suspicious traffic reaches the page, campaign, or workflow you are protecting. No delay. No soft landing for junk.
Expose the visitor
Read the IP, network, location, device, browser, source, and available request signals on every incoming hit. Nothing stays anonymous by default.
Score the risk
Run those signals against reputation data, abuse indicators, your lists, and campaign-specific rules. High risk gets treated as high risk.
Enforce the decision
Let real users through. Shut suspicious traffic out. Route qualified audiences to the experience you want them to see. Decisions stick.
Your cloud.
Protection, provisioned.
Bring your campaign and connected cloud accounts. MaxGuard coordinates the server, domain setup, and secure connection that put Gateway Edge in front of your site.
- Cloud setup, coordinated. Server provisioning through Vultr, with Cloudflare DNS and certificate setup managed as part of the workflow.
- Central control. Edge decisions. Campaign configuration and policy reach the appliance through an authenticated, encrypted management connection.
- Managed beyond launch. Policy distribution, appliance updates, and health monitoring keep the deployment connected to your control plane.
One place to manage protection.
Traffic decisions at your edge.
- Provision
- Connect
- Apply policy
- Monitor
Select a stage to explore it. Autoplay pauses while you inspect.
The browser tells
on itself.
Look beyond the network. MaxGuard's comprehensive JavaScript checks examine timezone consistency, synthetic mouse and keyboard events, browser fingerprints, WebRTC signals, and automation indicators. Together, they expose inconsistencies a single check can miss.
5c2e…9a41d18b…40f73ab9…c6e2e7f4…1c58Rules built from
real signals.
Bring network intelligence, browser signals, and campaign policy together. Decide which audiences pass and which signals deserve a closer look.
Try a rule with values reported by your own browser. Toggle a condition or change an operator and watch the example update.
- Combine conditions to describe the traffic you care about.
- Control the outcome with allow and block policies.
- Use confidence, evidence, and your own lists to refine decisions.
These values stay in your browser. This example does not save or apply rules to your campaigns.
Enable JavaScript to build a local example using your browser's values.
5c2e…9a41Same sample signature192.0.2.18→5c2e…9a41New IPs.
Familiar fingerprints.
Changing the exit IP doesn't necessarily change the visitor's browser and connection characteristics. Recurring signals help reveal related sessions across an apparently unrelated stream of addresses.
Use that context to investigate repeat visitors, automation, and suspicious traffic patterns, then refine your campaign rules.
What reputation lists miss, the connection reveals
IP-reputation tools judge an address by its history. Client-side fingerprinting judges a browser by what its script can read. MaxGuard adds a third source of truth: the connection itself.
| Scenario | IP-reputation-only tools | Client-side-only fingerprinting | MaxGuard |
|---|---|---|---|
| Fresh proxy network, listed nowhere | ✕Waits for the next list update | ~Only if the script runs and the profile slips | ✓Connection evidence on first contact |
| Anti-detect browser on a residential exit | ✕The IP looks like a home | ✕The profile is built to pass | ✓The network path is not part of the profile |
| JavaScript blocked or disabled | ~IP verdict only | ✕Nothing to inspect | ✓TCP and TLS assessment still runs |
| Rotating IPs from one device | ✕Each address judged alone | ✓Fingerprint recurrence | ✓Recurrence plus connection continuity |
| Where the decision runs | ~Remote lookup on every hit | ~Third-party script on your page | ✓Your integration, your API, or an appliance in your cloud |
| What you can audit | ~A reputation score | ~An opaque risk number | ✓Classification, confidence, evidence, and the reason for every decision |
Categories describe how each approach works in general, not any specific vendor. MaxGuard combines all three sources: reputation data, browser intelligence, and Gateway Edge connection assessment.
Bring the setup you think is undetectable. The live demo shows the verdict and the evidence behind it.
Test your connectionRuns where your
traffic already lands.
Drop MaxGuard in front of a landing page, a WordPress site, a custom app, or an API-driven workflow. Rules and routing live in the platform, so policy changes never touch your codebase.
- PHP
- WordPress
- JavaScript
- REST API
- Direct serve
- Redirect
- Cloudflare & proxy-mode CDNs
- Gateway Edge appliance
- Ready-to-use scripts with guided setup for PHP, WordPress, and JavaScript sites.
- API lookups for trackers, custom apps, and internal tools.
- Managed Gateway Edge appliance provisioned in your own cloud account.
- Drop inA PHP include, the WordPress plugin, a JavaScript tag, or an API call. Or let MaxGuard provision Gateway Edge in front of your site.
<script src="…/mg.js"> - MaxGuard decidesEvery request is scored against IP reputation, Gateway Edge connection evidence, browser signals, your lists, and your campaign rules, before protected content is served.
- You actAllow, route, redirect, or block. Direct-serve the approved page or redirect to the destination you choose. The visitor never sees a challenge screen.
- Requests
- 100%
- Allowed
- 61%
- Blocked
- 33%
- Review
- 6%
Expose every visit. Defend every decision.
MaxGuard shows the traffic coming in, the signals behind each request, and the exact reason a visitor was allowed, blocked, or redirected. Stop trusting inflated click totals. Operate on traffic-quality evidence.
Use configurable reports, campaign breakdowns, and CSV exports to uncover waste, tighten rules, investigate suspicious activity, and prove what bad traffic was costing you. Numbers don't lie when the junk is gone.
See MaxGuard in actionThe cloaking and traffic-protection arsenal
Twelve core capabilities to expose hostile traffic, protect valuable pages, control what happens next, and plug MaxGuard into how your business already runs. No half measures.
Precision Cloaking & Filtering
Evaluate every request before protected content loads, then allow, block, redirect, or route according to your rules. Hard decisions. Fast execution.
- IP reputation and abuse intelligence
- GEO, device, browser, and source rules
Checker Bot & Scanner Protection
Built to identify and filter traffic tied to website checkers and automated security scanners, including Google Safe Browsing, VirusTotal, Kaspersky, BrandVerity, GeoEdge, AdSecure, The Media Trust, Confiant, and Ad Lightning. Scanners don't get a free look.
- Bot and crawler detection
- Risk-based page access controls
Spy Tool & Scraper Defense
Protect landing pages and campaign assets against automated reconnaissance from spy and competitive-intelligence services such as AdPlexity, AdClarity, AdSpy, Adheart, Anstrex, AdSpyder, and similar monitoring tools. Competitors don't get to steal your playbook.
- Competitive-intelligence filtering
- Unauthorized-access protection
Advanced Click Fraud Protection
Detect click-fraud patterns from advanced click farms, headless browsers, and automation frameworks such as Headless Chrome, Puppeteer, Playwright, Selenium, PhantomJS, ZennoPoster, and similar bot stacks. Automation gets shut down.
- Repeat-click and automation controls
- Traffic-quality analysis
Smart Page Routing & Rotation
Send approved audiences to the right page, rotate destinations, and compare offers without rebuilding the traffic workflow. Control the path. Keep the conversion.
- Allow, block, and redirect actions
- Page rotation and A/B testing
Detailed Reporting & Block Reasons
Inspect visits, clicks, conversions, routing outcomes, and the exact reason behind every MaxGuard decision. No black boxes. Full audit trail.
- Real-time campaign breakdowns
- Configurable reports and CSV exports
API Lookups & Custom Integrations
Connect MaxGuard to websites, applications, affiliate trackers, and internal workflows through real-time API lookups and flexible integration options. Fit it to your stack, not the other way around.
- Low-latency fraud-prevention API
- Support for custom traffic workflows
Ready-to-Use Protection Scripts
Deploy MaxGuard with guided scripts and implementation instructions for PHP, WordPress, and HTML/JavaScript sites. No full stack rebuild required.
- PHP, WordPress, and JavaScript options
- Configuration managed from one interface
Custom & Shared Blacklists
Create or upload your own traffic lists, combine them with shared abuse intelligence, and permanently restrict repeat offenders and known hostile sources. Once flagged, they stay out.
- Custom allowlists and blocklists
- Repeat-click and source restrictions
Global Reputation Databases
Enrich every decision with location, device, network, and abuse intelligence from preconfigured data sources built for immediate traffic filtering. Real signals. Fast decisions.
- IP reputation and geolocation context
- Preconfigured global filtering data
IPv4 & IPv6 Protection
Apply the same reputation checks, filtering rules, and reporting logic across both IPv4 traffic and modern IPv6 connections. No gaps by address format.
- Unified dual-stack traffic analysis
- Consistent rules across address formats
Fast, Scalable & Redundant
Run traffic checks in milliseconds on infrastructure built for growing visitor volumes while reducing single points of failure. Speed that protects page performance.
- Fast decisions that protect page speed
- Redundant architecture for continuity
Third-party product and company names are used only to identify categories of checker, scanner, monitoring, and automation traffic. MaxGuard is not affiliated with or endorsed by these organizations. Detection coverage depends on configuration, available request signals, and continuously changing third-party systems.
Three things an IP list cannot give you
Detection quality is the headline. These are the reasons it holds up after the first month.
Verdicts without JavaScript
An anti-detect browser can rewrite everything a script can read. It cannot rewrite the timing and shape of its own TCP and TLS path. Gateway Edge judges that path before any page code runs, and keeps working when JavaScript is blocked.
See the connection physicsRuns in your own cloud
The managed appliance is provisioned in your account, with DNS and certificates handled for you. Traffic decisions happen at your edge, your data stays with you, and policy still flows from one control plane.
See the managed deploymentEvery decision explained
No black-box score. Each allow, route, or block carries its classification, confidence, evidence availability, and block reason, with campaign breakdowns and CSV exports to prove what bad traffic was costing you.
See a sample decisionStop paying the price for unfiltered traffic
Pick a campaign-based plan for unlimited traffic with a defined number of simultaneously active campaigns, or an events plan for unlimited campaigns with a monthly event allowance. Every plan includes core traffic filtering, IP intelligence, technical support, and full platform access. No watered-down tiers.
Plans are billed monthly with automatic renewal available. Not sure which model fits? Tell us your expected volume and campaign structure. We will match the setup to the threat, not the marketing brochure.
Campaign Plans
Best for teams that need unrestricted traffic handling and predictable active-campaign capacity. Scale the active slots. Keep the filtering hard.
- Up to 1 active campaign at once
- Create unlimited campaigns
- Unlimited traffic
- 24/7 technical support
- IP intelligence and reputation data
- Live support
- Up to 5 active campaigns at once
- Create unlimited campaigns
- Unlimited traffic
- 24/7 technical support
- IP intelligence and reputation data
- Live support
- Up to 10 active campaigns at once
- Create unlimited campaigns
- Unlimited traffic
- 24/7 technical support
- IP intelligence and reputation data
- Live support
- Up to 20 active campaigns at once
- Create unlimited campaigns
- Unlimited traffic
- 24/7 technical support
- IP intelligence and reputation data
- Exclusive API access
- Live support
Monthly Events Plans
Best for teams that want unlimited campaigns and a predictable monthly event allowance. Scale the included volume as traffic grows. Same core protection. Same hard filtering.
- Unlimited campaigns
- 24/7 technical support
- IP intelligence and reputation data
- Live support
- Unlimited campaigns
- 24/7 technical support
- IP intelligence and reputation data
- Live support
- Unlimited campaigns
- 24/7 technical support
- IP intelligence and reputation data
- Live support
- Unlimited campaigns
- 24/7 technical support
- IP intelligence and reputation data
- Live support
Bad traffic attacked. MaxGuard hit back.
Teams in advertising, e-commerce, gaming, ticketing, publishing, and online communities use MaxGuard to keep automation and abuse away from real users. Results over promises.
Since putting MaxGuard on our ticketing and reservations site, the bot and scalper problem got shut down. Real customers could finally get tickets without the system getting hammered by automation. MaxGuard detects and blocks the junk. Fair access returned. If you run ticketing, stop letting bots win.
Michael
Ticketing Website DeveloperIndustry: Online Ticketing And Reservations
MaxGuard locked down our online gaming platform. Bots were spamming, faking accounts, and cheating. After integration, the platform stopped taking that abuse. Real players got a cleaner experience. Advanced bot mitigation that actually works. Gaming platforms that ignore this pay for it in ruined communities.
Mark
Online Gaming Platform OwnerIndustry: Online Gaming Platform
MaxGuard kept our e-commerce site clear of bot attacks and fraud. Fake accounts, spammy transactions, and high bounce rates were constant. After integration, bot traffic and fraudulent sales dropped hard. Real-time threat detection let us focus on real shoppers. Soft tools failed. This one didn't.
Lisa
Online RetailerIndustry: E-Commerce
MaxGuard is required if you publish content and want to keep ownership of it. Bots and scrapers were stealing articles and monetizing them. After MaxGuard, unauthorized access and scraping incidents dropped sharply. Stop letting scrapers treat your content as free inventory.
Sophia
Online Magazine EditorIndustry: Content Publishing
MaxGuard fixed our online polling site. Bot interference was skewing results and destroying credibility. With the bot mitigation in place, only real users participate. Polls that used to be compromised are now usable. Soft filters left the problem intact. This closed it.
David
Polling Website AdministratorIndustry: Online Surveys And Polls Application
MaxGuard is the tool affiliate marketers need to stop spy tools and scrapers from copying landing pages and stealing strategies. Before MaxGuard, competitors and spy services had free access. After, unauthorized access and scraping dropped hard. Focus on results instead of watching your work get stolen.
John
Affiliate MarketerIndustry: Online Marketing
MaxGuard's detection changed our paid campaigns. Click fraud and fake traffic were burning money and wrecking performance. After integration, traffic quality improved and conversion rates rose. Ad spend stopped funding bots. ROI improved because the junk was gone.
Mark
Digital Advertising ManagerIndustry: Advertising Agency
MaxGuard exceeded expectations on bot blocking. Other solutions under-delivered. The technology and approach actually stopped the junk. Real traffic, higher engagement, better conversions. Soft tools leave gaps. This one closes them. Bot traffic stopped being an open problem.
Dennis
Online Business OwnerIndustry: Entrepreneur
MaxGuard transformed our digital marketing by blocking bot traffic that was wasting ad spend and skewing analytics. Advanced detection identifies and blocks the malicious traffic. Campaigns reach real users. ROI improved. Bot-related waste stopped being the default cost of doing business.
Ankit
Marketing DirectorIndustry: Digital Marketing Agency
Questions engineers ask first
Short answers here. The full FAQ covers integration, billing, compliance, and support in detail.
Decisions are made in real time on the request itself, before protected content is served, and every hit is recorded as it happens. Filtering sits in the request path rather than running as an after-the-fact report.
Use the ready-made PHP, WordPress, or JavaScript integrations, or call the API from your own stack. MaxGuard supports both redirect and direct-serve setups, so you can route visitors to different destinations or serve the approved page in place.
Genuine visitors pass without challenge screens or captchas. Blocking combines continuously updated abuse lists, connection and browser evidence, and settings you control, including geo targeting and your own allow and block lists. Every decision shows its reason, so a false positive is visible and fixable rather than hidden in a score.
No. MaxGuard supports both redirection and direct-serve integrations. You can send traffic to different destinations or serve approved content directly, depending on your deployment and rules.
Yes. MaxGuard does not provide CDN services itself, but it fully supports proxy-mode CDNs including Cloudflare, Fastly, KeyCDN, and Amazon CloudFront. The managed Gateway Edge appliance also handles Cloudflare DNS and certificate setup as part of provisioning.
Ready to shut bad traffic out?
Show us what is attacking your traffic, budget, or pages. We review the risk and recommend the MaxGuard setup built to stop it. No soft sales talk. Clear threat. Clear response.
To protect existing clients and service quality, MaxGuard reviews new access requests individually. Provide a valid Telegram ID and enough detail for us to understand the use case. We respond to inquiries that fit our service scope and acceptable-use requirements.
For a free-trial request, use a company-domain email when possible and tell us if you already use another traffic-filtering or fraud-detection platform. By submitting this form, you agree to use MaxGuard only for lawful and ethical purposes and to follow our Terms of Service, Privacy Policy, and Refund Policy.