Ad-fraud evidence

Stop paying for clicks that were never human.

BotAudit inspects every click on your paid ads, classifies each visit as human or bot, and builds the claim-ready evidence ad platforms ask for in invalid-traffic disputes.

One-line install · <2KB script · Free forever plan, no card required

12

bot signals checked on every visit — automation flags, input physics, datacenter IPs, behavior.

5

ad platforms auto-detected: Google, Meta, X, TikTok and Bing click IDs.

60 days

the window platforms typically accept invalid-traffic disputes for — every paid plan retains it in full.

How it works

Evidence in three steps.

One script tag on your landing pages. No ad-account access, no pixels beyond ours, no engineering ticket.

1

Add one line of JavaScript

Copy the tag to your landing page. Under 2KB, loads async, sends beacons that never block navigation. Takes 30 seconds.

2

Every visit gets classified

Each click is checked for automation fingerprints, datacenter and proxy IPs, and input physics — the event trail a human hand produces and synthesized input can't fake. Every visit is classified human, suspicious, or bot with the reasons recorded.

3

Export claim-ready evidence

One click downloads a Google Click Quality Form-ready CSV — IP-level click logs, gclids, campaigns, detection reasons — or a printable evidence report for any platform.

The platform

Detection built for evidence, not alarm.

Real-time classification

Visits are scored as they land — automation flags (webdriver, headless), datacenter/hosting IPs, and input physics that catch bots driving real Chrome: teleporting clicks, sub-150ms reactions, wheel-less scrolls. Three honest buckets: human, suspicious, bot.

Google refund claim export

A Click Quality Form-ready CSV with the IP-level click logs Google asks for — plus filterable CSV exports for every other platform.

Wasted-spend estimates

Flagged paid clicks priced at your real CPCs — per campaign where you've set overrides — as a defensible bot-to-suspicious range, not one scary number.

White-label reports

Agencies put their own name and logo on the printable evidence report clients and platforms see. Geo, ISP, and device intelligence included on every visit.

The report

Every claim, backed by a paper trail.

Each flagged click carries its device, network, and behavioral fingerprint — the evidence Google's Click Quality Form asks for. Export it and file; platforms review claims themselves and issue credits at their discretion.

Invalid traffic · Last 30 days3 campaigns
CampaignFlaggedEst. waste
summer-sale
Google Ads
31%
$128.35
brand-x
Google Ads
22%
$86.10
retargeting-q3
Meta Ads
17%
$55.80
Claim-ready evidence pack
$270.25
Pricing

Start free. Upgrade for retention.

See your bot rate for free. Paid plans keep the full ~60-day dispute window and beyond. Yearly billing is ~20% off.

Free
$0forever
  • 1 site · 5,000 visits/mo
  • 7 days retention
  • Dashboard & classification
  • CSV + Google Claim CSV
Get started
Starter
$9/mo · $86/yr
  • 3 sites · 50,000 visits/mo
  • 120 days retention
  • Covers the ~60-day dispute window
  • CSV + Google Claim CSV
Start free
Agency
$79/mo · $759/yr
  • 50 sites · 1M visits/mo
  • 2 years retention
  • White-label reports
  • CSV + Google Claim CSV
Start free
Pro
$99/mo · $949/yr
  • 100+ sites · 5M visits/mo
  • Unlimited retention
  • White-label reports
  • CSV + Google Claim CSV
Start free

Visit allowances are soft limits — we never stop tracking or drop your data at the cap. Full plan comparison →
Auditing more than 5M visits/month? Contact us for volume pricing.

FAQ

Frequently asked questions

How does BotAudit detect bots?
BotAudit analyzes multiple signals: browser automation flags (webdriver, headless mode), input physics (synthesized clicks and scrolls that lack the event trail of a human hand — catching bots that drive real, unmodified Chrome), user interaction patterns, time on page, and hosting provider/datacenter detection. Each visit is classified as Human, Suspicious, or Bot.
How do I use BotAudit for ad refunds?
For Google Ads, click "Google Claim CSV" on your site dashboard — it downloads a Click Quality Form-ready click log with the IP addresses, gclids, campaigns, and detection reasons Google asks for. For other platforms, filter the dashboard to bot traffic and export as CSV. Platforms review every claim themselves and issue ad credits (not cash) at their discretion, so treat recovered spend as upside. The reliable win is seeing exactly which campaigns waste money on bots and fixing them.
Does it slow down my website?
No. The tracking script is tiny (under 2KB) and loads asynchronously. It sends data via navigator.sendBeacon, which doesn't block page navigation or affect user experience.
What ad platforms are supported?
BotAudit automatically detects traffic from Google Ads (gclid, gbraid, wbraid), Facebook/Meta (fbclid), Twitter/X (twclid), TikTok (ttclid), and Bing/Microsoft Ads (msclkid). Organic and direct traffic is also tracked.
Can I pass custom data?
Yes! Set window.botaudit = { campaignId: 'my-campaign', clientId: 'acme' } before the tracking script. You can then filter and export by any custom field.

See how much of your ad spend is going to bots.

Free forever plan. One line of JavaScript, results within hours, no card required.

Start free Compare plans