[nottorp]

I ran it on my personal domain that has just some kind of landing page and nothing else on it, and it's not advertised anywhere:

0% of traffic is non-human · <$0.01/yr projected

Well, 0% of traffic is AI bots. 99% of traffic is vulnerability scanners actually.

[plaintosapp]

Ha, that's a fair point — vulnerability scanners are a whole separate category I haven't tackled yet. BotCost is specifically focused on AI training and search crawlers right now (GPTBot, ClaudeBot, Bytespider etc.) rather than security scanners.

Good news: 0% AI bot traffic on an unadvertised landing page makes sense — those bots tend to follow links and sitemaps. If you run it on a site with real content and traffic you'll likely see a different picture.

Vulnerability scanners on the other hand... that's a different problem worth solving too.