Self-hosted abuse detection and rule enforcement against low-effort mass AI scraping and bots. Uses conventional non-nuclear options.

go-away sits in between your site and the Internet / upstream proxy.

Incoming requests can be selected by rules to be actioned or challenged to filter suspicious requests.

The tool is designed highly flexible so the operator can minimize impact to legit users, while surgically targeting heavy endpoints or scrapers.

Challenges can be transparent (not shown to user, depends on backend or other logic), non-JavaScript (challenges common browser properties), or custom JavaScript (from Proof of Work to fingerprinting or Captcha is supported)

See Why do this? section for the challenges and reasoning behind this tool.

This documentation and go-away are in active development. See What's left? section for a breakdown.