Introducing BotID, invisible bot filtering for critical routes
By Steven Van ·
BotID blocks browser-automation bots on checkouts, logins and APIs, with a Kasada-powered Deep Analysis mode for Pro and Enterprise teams.
Vercel has launched BotID, a bot detection layer for Vercel apps that targets the routes where automated abuse gets expensive: checkouts, logins, signups, APIs, and endpoints that trigger costly backend operations like LLM calls. Described in the announcement, it works as an invisible layer of checks rather than a visible CAPTCHA, and returns a pass or fail from a single server-side call to checkBotId(), with no config files, API keys, or thresholds to tune.
Instead of checking user-agent headers or IP ranges, BotID collects signals that distinguish human users from browser automation tools like Playwright and Puppeteer, and mutates its detection logic on every page load to resist replay and reverse engineering. It ships in two modes: Basic, enabled by default for all teams, and Deep Analysis, which adds detection built on Kasada's engine and is available to Pro and Enterprise teams.
