Akamai Bot Manager: what you get with the CDN, and what you do not
Akamai Bot Manager is sold alongside the Akamai CDN and WAF. Large installed base, absent from the Q2 2026 Forrester Wave, and how a specialist layer fits next to it.

Updated 5 min read

Akamai Bot Manager is on more shortlists than its reputation in this category would suggest, for a simple reason: if you already buy the Akamai CDN, the bot module is a line item rather than a new vendor.
What Akamai Bot Manager is
The bot detection product Akamai sells with its CDN and WAF, in standard and Premier tiers. Detection runs in the Akamai edge network in front of your origin.
Where it leads
Scale and proximity. If your traffic is already flowing through Akamai, there is no additional hop, no new DNS change and no new contract. For large enterprises with an existing Akamai relationship, that removes most of the friction that kills security purchases.
How it compares to the Forrester-evaluated vendors
Akamai was not evaluated in Forrester's Q2 2026 Bot and Agent Trust Management Wave. Neither were Cloudflare, Imperva or Castle. Wave inclusion depends on revenue thresholds and category fit rather than product quality, so absence is not a verdict. It does mean there is no independent analyst assessment of how Akamai handles the agent-trust question.
That question is the one worth pressing in an evaluation. Ask what the agent library looks like, how a shopping agent acting for a real customer is distinguished from a scraper, and what the customer sees when that decision goes wrong.
What it costs
Quoted, usually inside a wider CDN and security contract. The practical consequence is that the marginal cost of bot protection is hard to isolate, which weakens your position at renewal.
Where data is processed
Akamai's global edge network. Processing regions are set by your CDN configuration rather than by the bot module, so the answer depends on the wider Akamai contract. Prosopo, by contrast, can hold processing to the EU on its Enterprise and Custom plans.
How a block gets explained
Through Akamai's security console and log delivery. Getting Akamai logs into your own SIEM is well-trodden. Whether the reason attached to an individual block is specific enough to answer a customer complaint is the thing to test during a trial rather than take on trust.
Who authors the rules
You do, in the Akamai policy configuration, against Akamai's detection.
Which buyers Akamai suits
It is the stronger fit if you are a large Akamai CDN customer, if procurement strongly prefers fewer vendors, or if the bot pressure you face is commodity and the module is handling it.
How Prosopo compares
If you need a readable reason on the block rather than a category label, particularly where a false positive on checkout has a revenue number attached.
If your own team wants to write and deploy a rule during an incident.
The thing under attack is a single form or API. Our Enterprise plan lets you put a script tag on just that form, an edge worker in front of one origin, or both, rather than changing a whole-network policy.
Prosopo Protect deploys as a Cloudflare Worker or an AWS Lambda@Edge function, so it can run in front of a specific origin without restructuring your CDN.
Side by side
| Prosopo | Akamai Bot Manager | |
|---|---|---|
| Forrester Q2 2026 tier | Not evaluated | Not evaluated |
| Sold as | Standalone platform | Module on CDN and WAF contract |
| Block explanation | Plain-language reason | Category and policy label |
| Rule authoring | Customer, self-serve | Customer, in Akamai policy config |
| Client stack | Open source | Proprietary |
| Self-hosting | Available via obfuscated detector bundle | No |
| Data processing | EU-only available on Enterprise. Points of presence in US, LATAM, APAC, EU | Akamai global network |
| Data isolation | Dedicated database on the Custom plan | Not published |
| Published pricing | All tiers on pricing | Quoted in CDN contract |
More on deployment options in Prosopo Protect.
On Akamai and still seeing bots?
A Bot Exposure Assessment is a 30-minute call with an engineer. We look at your traffic, show where your current setup leaves gaps, and agree how a trial would be judged. Nothing to install first.
Questions
Something else? Ask an engineer.
What is Akamai Bot Manager?
Akamai Bot Manager is the bot detection product Akamai sells alongside its CDN and web application firewall. Bot Manager Premier is the higher tier. It is one of the most widely deployed bot products by installed base, largely because it is sold into existing Akamai CDN contracts.
Was Akamai in the Forrester Wave for bot and agent trust management?
No. Forrester's Q2 2026 Wave evaluated DataDome, HUMAN, Kasada, Arkose Labs, CHEQ, Netacea, hCaptcha and Google reCAPTCHA Enterprise. Akamai, Cloudflare, Imperva and Castle were not among the evaluated vendors, which does not mean they are absent from real shortlists.
How much does Akamai Bot Manager cost?
Akamai does not publish Bot Manager pricing. It is quoted, normally as part of a wider CDN and security contract, so the marginal cost of the bot module is difficult to isolate at renewal.
What is the best Akamai Bot Manager alternative?
If you want to stay with a bundled CDN vendor, Cloudflare Bot Management is the closest equivalent. If you want a specialist that gives a reason on every block and lets your own team author the rules, Prosopo. If you need a Forrester-evaluated standalone platform, DataDome, HUMAN or Kasada.
Related reading
CAPTCHA · Forrester Wave Bot and Agent Trust Management Q2 2026: How Prosopo Compares Forrester's Q2 2026 Wave named 8 Bot and Agent Trust Management vendors. What each got dinged for, and how Prosopo — the specialist entry — compares.
Ticketing · How to Stop Ticket Scalping: The 2026 Anti-Bot Playbook How to stop and prevent ticket scalping in 2026: block scalper bots, residential proxies and bulk signups at the queue, ticket page, drop API and CDN edge.
Gartner and bot management: the Magic Quadrant that does not exist There is no Gartner Magic Quadrant for bot management. There is one for Cloud WAAP, and bot mitigation is a criterion inside it. Where each vendor appears, and how to read the two analyst views together.
OWASP automated threats: the 21 names your vendor should be using The OWASP Automated Threat Handbook gives every bot attack a vendor-neutral name and an OAT number. The full taxonomy, the five that cost the most money, and how to use it in an RFP.
What is WAAP? Web Application and API Protection explained WAAP means Web Application and API Protection: a WAF, DDoS mitigation, bot management and API protection sold as one cloud service. The bot component is the one to scrutinise, because it needs signals a network vendor has no reason to collect.
CAPTCHA · Procaptcha vs Friendly Captcha - Why Real Bot Protection Matters in 2026 Procaptcha vs Friendly Captcha in 2026 — catch rate, GDPR posture and pricing compared. Friendly is proof-of-work only; Procaptcha catches real bots.