Protecting sites from bad bots: WAF rules, rate limiting, scraper blocking, fake signups and keeping good crawlers and AI bots under control.