Bot-Proof Storage

High-security browser storage library with built-in behavioral bot detection and encrypted client-side persistence.

Overview

bot-proof-storage is a secure wrapper around localStorage and sessionStorage designed to protect sensitive client-side data from bots, scrapers, and automated scripts.

Unlike traditional storage libraries that only encrypt data, this library actively monitors behavioral patterns to identify suspicious activity and automatically sanitize storage when threats are detected.

Features

• AES-256 encrypted storage
• Behavioral bot detection
• Automatic storage sanitization
• LocalStorage & SessionStorage support
• SSR-safe implementation
• Lightweight and dependency minimal

Security System

The library combines encrypted storage with behavioral analysis to detect automation patterns in real time.

Detection Signals

• Linearity Detection Identifies unnatural straight-line mouse movement patterns commonly generated by bots.

• Velocity Analysis Detects inhuman interaction speeds and unrealistic event timing.

• Cadence Monitoring Flags repetitive and perfectly timed interaction sequences.

Active Defense

When suspicious behavior is confirmed:

• Sensitive storage can be automatically cleared
• Access to stored data is blocked
• Custom security callbacks can be triggered

This helps prevent token extraction and unauthorized automation attacks.

Tech Stack

• JavaScript / TypeScript
• CryptoJS (AES-256 Encryption)
• Browser Storage APIs

Installation

npm install bot-proof-storage

Usage

import { BotProofStorage } from 'bot-proof-storage';

const storage = new BotProofStorage({
  secretKey: 'your-secret-key',
  storageType: 'local',
  sensitivity: 0.5,
  autoWipeOnBot: true,
  onBotDetected: () => {
    console.error('Bot activity detected');
  }
});

storage.setItem('session', {
  token: 'xyz123'
});

const data = storage.getItem('session');

Configuration

| Option | Description | | --------------- | ----------------------------------------- | | secretKey | Encryption key used for AES protection | | storageType | local or session storage | | sensitivity | Detection strictness from 0.1 to 1.0 | | autoWipeOnBot | Automatically clears storage on detection | | onBotDetected | Callback triggered on suspicious activity |

Storage Flow

User Interaction
        ↓
Behavior Analysis
        ↓
Bot Detection Engine
        ↓
Encrypted Storage Access
        ↓
Auto Defense (Optional)

Use Cases

• Authentication token protection
• Secure session persistence
• Anti-bot web applications
• High-security client-side storage
• Fraud prevention systems

SSR Support

The library includes built-in safeguards for environments such as:

• Next.js
• Server-side rendering applications
• Hybrid rendering frameworks

Purpose

bot-proof-storage is designed for applications requiring stronger client-side protection than traditional encrypted storage solutions.

It provides:

• Secure encrypted persistence
• Behavioral threat detection
• Automated response mechanisms
• Lightweight integration into modern web apps

License

This project is licensed under the Apache-2.0 License.