Stop Counting Bot Clicks as Real Engagement
Your email open rates are lying to you. Security scanners, link prefetchers, and cloud provider bots inflate your metrics by up to 50%. OpenClickBot detects and flags automated interactions in real-time, so you only measure what matters — real human engagement.
Detection Engine
Every bot signal, caught in real-time
Our multi-rule analysis engine scores each email event against a battery of heuristics — cloud IP ranges, user agent fingerprints, click timing, and more.
Bot Open Detection
Identify automated email opens from security scanners, email gateway prefetchers, and protection services that trigger pixels before a human ever sees the message.
Bot Click Detection
Detect link clicks from cloud provider bots, automated crawlers, and security scanners that follow every URL in your emails — inflating your CTR by up to 50%.
Cloud IP Matching
Cross-reference every event IP against live AWS, GCP, and Azure CIDR ranges. Our IP sync engine keeps ranges fresh with atomic batch updates.
User Agent Analysis
Flag suspicious automated user agents, headless browsers, and known bot signatures. Catch the bots that try to look human but leave fingerprints behind.
Click Timing Analysis
Detect inhuman response times — when a "click" happens milliseconds after an "open", no human was involved. Our timing rules catch what IP checks miss.
Webhook Delivery
Get HMAC-signed detection results delivered to your endpoint in real-time. Every payload includes bot scores, matched rules, and confidence levels.
The Problem
Your email metrics are compromised
The bot problem is getting worse
Apple MPP, Microsoft SafeLinks, and Google link scanners mean more automated interactions than ever. You need a defense layer.Inflated open rates
Security scanners trigger tracking pixels before recipients read your email. Your 45% open rate might really be 25%.
Ghost click-throughs
Link protection services click every URL in your emails. Those "engaged" users never actually visited your landing page.
Wasted ad spend
Retargeting campaigns based on bot engagement burn budget on audiences who never showed real interest.
Bad segmentation
When bots look like your most engaged users, your "VIP" segments are contaminated with phantom engagement.
Built for production scale
Process millions of email events with a pipeline designed for reliability, not just speed.Multi-tenant architecture
Each tenant gets isolated SQS queues, separate webhook endpoints, and custom bot thresholds. Your data never mixes.
Atomic batch processing
Events are claimed atomically to prevent duplicate processing across worker instances. At-least-once delivery with full idempotency.
Auto-expiring data
TTL indexes automatically clean up events after 90 days. No manual maintenance, no storage bloat.
Graceful degradation
Non-retryable errors fail fast. Server errors retry with exponential backoff and jitter. Dead-lettered events are never lost.
How It Works
Get bot detection running in 4 steps
Step 1: Register your tenant
Provide your email and SQS queue name. We provision your dedicated processing pipeline — SQS queue, SNS topic, and SES event destination — all wired up automatically.
Step 2: Connect your SES events
Point your Amazon SES configuration set to our SNS topic. Every open, click, and delivery event flows into your dedicated queue.
Step 3: Analysis engine scores events
Our worker claims batches of events atomically and runs each one through the full detection rule set — cloud IP matching, user agent analysis, timing heuristics, and more. Each event gets a bot score and classification.
Step 4: Get results via webhook
Detection results are delivered to your webhook endpoint with HMAC-SHA256 signatures, idempotency keys, and exponential backoff retries. Integrate with any system.
By the Numbers
Pricing
Simple, transparent pricing
Start free. Scale when you need to. No surprise charges.
Starter
For testing and small lists
- Up to 10,000 events/month
- All detection rules included
- Webhook delivery
- Community support
Growth
For growing email programs
- Up to 500,000 events/month
- All detection rules included
- Priority webhook delivery
- Custom bot thresholds
- Email support
Enterprise
For high-volume senders
- Unlimited events
- All detection rules included
- Dedicated SQS queues
- Custom detection rules
- HMAC webhook signing
- Priority support + SLA
FAQ
Frequently Asked Questions
Everything you need to know about OpenClickBot's detection capabilities.
How does OpenClickBot detect bots?
We run every email event through a multi-rule scoring engine. Each event is checked against cloud provider IP ranges (AWS, GCP, Azure), known bot user agents, click timing patterns, and other heuristics. Events receive a composite bot score — if it exceeds your threshold, it's flagged as bot activity.
What email providers are supported?
OpenClickBot currently integrates with Amazon SES through native event notifications (SNS → SQS). If you send email through SES — whether directly or via services built on top of SES — you can connect to OpenClickBot.
How do I receive detection results?
Results are delivered to your webhook endpoint as HMAC-SHA256 signed HTTP POST requests. Each payload includes the original event data, bot score, matched rules, and classification. You can integrate with any system that accepts webhooks.
What cloud provider IPs do you track?
We maintain fresh CIDR ranges for AWS, Google Cloud Platform, and Microsoft Azure. Our IP sync worker downloads official published ranges and updates them atomically in MongoDB, so lookups always reflect current allocations.
Is there a free tier?
Yes. The Starter plan is free forever and includes up to 10,000 events per month with all detection rules. This is enough for testing, small lists, or evaluating the service before committing to a paid plan.
How secure is my data?
Each tenant gets isolated processing queues and separate MongoDB collections. Webhook payloads are signed with per-tenant HMAC secrets. Event data auto-expires after 90 days via TTL indexes. We never share data between tenants.
Get Started
Start detecting bots today
Enter your details and we'll provision your dedicated detection pipeline. Takes less than 60 seconds.
Ready to see your real engagement numbers?
Stop making decisions based on phantom metrics. Connect OpenClickBot and start measuring what actually matters.