SPHYNX

It guarded the road to Thebes.
Now it guards your origin.

Sphynx runs in front of your app and decides, per request: browser or script. Clean traffic gets a signed cookie and moves on. Suspicious traffic gets a challenge. The whole stack is open source — fork it, train your own model, self-host every piece with no vendor in the request path, or point it at our hosted scorer.