- Is it safe? Run by WebDecoy LLC.See ↓
- Is it free? Free plan · From $20/mo · pricing page, read Oct 20, 2026See ↓
- What else does this?
MHAScan by Aptumifree
Pixel Officefree
Agent GuardSee ↓
≈ 55visits/mo
Use not read yet · estimate, read Oct 20, 2026
- For
- Ecommerce, publishers, SaaS and marketplace teams facing scrapers, fake signups and card testing.
- Price
- Free plan · From $20/mopricing page, read Oct 20, 2026
- Activity
- Actively maintainedsite updated 2 weeks ago
- Company
- WebDecoy LLC · Domain since 2008privacy policy · domain registered
- How it runs
- API
- Used for
- Block scrapers harvesting product catalogs and listings
- Detect card testing and fake orders on storefronts
- Track which AI crawlers visit and what they request
- On the web since 2008, older than 95% of its shelfINITE Atlas
- Has an MCP server (1 in the registry)public registry →
- Launched on Product Hunt on Oct 20, 2026Product Hunt ↗
- Run byWebDecoy LLCprivacy policy ↗
- Certifications they stateGDPR · CCPAprivacy policy ↗
- Subprocessorspublishedsubprocessor list ↗
- Data processing agreementpublishedDPA ↗
- Privacy policy updated2026-10-08privacy policy ↗
These are WebDecoy's own statements, read from its pages. We did not audit them. A line that is missing was not found on the pages we read; it does not mean the practice is absent.
- MCP serverhttps://mcp.webdecoy.com/mcpnot in the official registry: answered when asked
- Stateanswers, requires sign-inchecked 2026-10-27
- Address to connectmcp.webdecoy.com/mcp
This card as JSON, for your agent →
Each line is something a program found when it went looking: the registry entry, the server's own answer, a spec that parses. A missing line means we did not find it, not that it does not exist.
Figure and bar: visits/mo, estimate · year: online since
- #1
MHAScan by Aptumi
Scans documents to text, Excel, or JSON entirely in the browser with no server upload.
119 linking domainsMaintainedFrom $9.50/mo2026 - #2
Pixel Office
Optimizes website visibility to AI crawlers and enables autonomous agents to execute transactions through metadata injection and paymeter proxies.
1ActiveFrom ≈ $55/mo - #3
Agent Guard
Aligns the proxy, IP and timezone of local AI agents like Claude Code and Cursor, and flags secrets leaking through their config files.
1Active - #4
BotscopeMCP · open
Classifies website traffic to identify bots, scrapers, and AI agents, blocking malicious ones while tracking AI citations.
3ActiveFrom $2.99 per use - #5
JsmonMCP · sign-in
Crawls a domain's URLs and analyses their JavaScript for exposed credentials, vulnerable endpoints and third-party risk, alerting via Jira, Slack or email.
529ActiveFrom $15/mo
Not it? Say what you need
betaThree tools from the Atlas for the job you describe, each with what fits and what does not.
No notes yet. What do you use WebDecoy for?
Sign in to leave a noteWhat is WebDecoy?
Catches bots and AI crawlers by planting hidden decoy URLs and fake endpoints that only automated clients reach. It is listed in the Atlas under Data and made by WebDecoy LLC.
Who is WebDecoy for?
Ecommerce, publishers, SaaS and marketplace teams facing scrapers, fake signups and card testing.
How much does WebDecoy cost?
WebDecoy has a free plan; paid plans start at $20/mo, per its pricing page on 2026-10-20.
Is WebDecoy free?
Yes, WebDecoy has a free plan, per its pricing page on 2026-10-20.
Is WebDecoy still maintained?
Actively maintained: site updated 2 weeks ago.
Who owns WebDecoy?
WebDecoy is run by WebDecoy LLC, per its privacy policy (2026-10-20).
Is WebDecoy safe?
We do not audit vendors. What WebDecoy publishes, read 2026-10-20: GDPR, CCPA stated on its privacy policy.
What are alternatives to WebDecoy?
In Data, by use: MHAScan by Aptumi, Pixel Office, Agent Guard, Botscope, Jsmon.
How we read a tool
No votes, no reviews, no vendor claims. Every week a crawler reads each tool's own site and a few public registries, and the words on the card are bands over what it read.
- Use: visits to the site (estimated), installs from npm and PyPI, presence in Chrome's usage report.
- Activity: the newest release on GitHub, npm or PyPI; the newest dated page on the site; open roles on a public jobs board.
- Price: the vendor's own pricing page, read with the date. A figure is printed only when it is on that page.
- The line and the use cases are written by us from the homepage, one tool at a time, and refused when they repeat the vendor's marketing.
How AI assistants read each site — the reading vendors ask us about — is on each tool's own visibility page.
How we read every tool → · By INITE Atlas Desk
Cookies
Before we count this visit
Analytics and ad measurement tell us which pages and which of our ads do their job: Google Analytics and Google Ads, the Meta pixel, Yandex Metrica, and one first-party id of our own. Nothing is stored until you answer, and declining changes nothing about the site.