Is this site behind Imperva?

Formerly Incapsula. WAF + bot management used by enterprise and government sites. Distinctive `visid_incap` cookies.

Free diagnostic • Confidence scoring • Signal-by-signal breakdown • Recommended client configuration

URL to check

Try:

Verification keeps this tool free from abuse. For diagnostic and developer use only — run checks on sites you are authorised to access.

What is Imperva (Incapsula)?

Imperva (the bot-management product was originally branded Incapsula) is an enterprise WAF, DDoS, and bot-management suite. It sits in front of government portals, banks, and large SaaS platforms.

Read the full Imperva Incapsula glossary entry

How Imperva (Incapsula) protects sites

›JavaScript challenge with `_Incapsula_Resource` redirects
›`visid_incap_*` and `incap_ses_*` cookies
›Bot Management rule engine + reputation scoring
›Aggressive WAF rules — malformed requests are rejected quickly

Detection signals we look for

✓x-iinfo response header
✓x-cdn: Incapsula header
✓visid_incap_* or incap_ses_* cookies
✓HTML containing _Incapsula_Resource

Recommended Scrappey client configuration

For authorised access only — your own properties, contractually permitted scraping, QA, monitoring, accessibility audits, and similar use cases. Always respect the site's terms of service and applicable law.

→Browser context required — the JS challenge sets the session cookies that subsequent requests need.
→Use residential proxies; Imperva's reputation feed flags datacenter IPs quickly.
→Persist incap_ses_* cookies across requests in a Scrappey session.
→Use antibot: "imperva" so the JS challenge is handled for you.

Create a free account to run the configuration above — 150 credits included, no card required.

Imperva (Incapsula) FAQ

Is Incapsula the same as Imperva?

Yes. Incapsula was the cloud product name; the company is Imperva. They consolidated branding around 2019, but the cookies still carry the incap prefix.

Related concepts

Deeper reading on the techniques and signals that surround Imperva (Incapsula).

Anti-Bot Detection

Glossary

TLS Fingerprinting (JA3/JA4)

Glossary

Anti-Bot Vendor Detection Cheatsheet

Glossary

Concept map

How anti-bot protection fits together

Hover a vendor or technique to see the connections. Click any node to read the full glossary entry. The lines show which detection techniques each vendor leans on.

6 vendors · 8 techniques · 27 connections

Hover · click a node

Vendor Technique

Detect other anti-bot vendors

Or run a generic check across all vendors

Integrations

n8n

Automate workflows visually. Streamline data collection processes.

n8n Template

Pre-built template for modern websites. Simplifies Scrappey integration.

RapidAPI

Access via API marketplace. Easy integration with comprehensive docs.

Apify

Scalable actor-based automation. Reliable browser rendering.

MCP Server

AI-powered browser automation. Intelligent session management.

Scrappey CLI

Scrape from your terminal. One command, pipeable output, CI-ready.

Claude Code Skill

Portable skill for Claude Code + Codex. Browser-backed data access on demand.

LangChain

LangChain connector — clean web data for any chain or agent.

LlamaIndex

LlamaIndex reader — load modern web pages straight into RAG.

Zapier

Connect with 7,000+ apps. Automate workflows easily.

Make

Visual workflow automation. Connect with 1,000+ apps easily.

Start building with Scrappey

Try It For Free. No Subscription Required. No Credit Card Required. Instant Set-Up. 150 Free Requests Are Waiting For You!

Join our ✨ Discord ✨ community