I will stop ai bots from hammering your drupal site


About this gig
Slow site, hosting bill that jumped, traffic that doesn't look like people: usually AI crawlers. I find out what's hitting your site and stop what shouldn't reach your server.
I've worked with Drupal since 2008 and I'm on the Drupal MCP module core team, so I work both sides of this: AI tools that ask to read your content, and crawlers that don't.
WHAT I DO
Audit (all packages). I read your logs, identify the traffic (search filter URLs, exploit probes, bulk networks, spoofed browsers), and write out the Cloudflare rules to fix it.
Cloudflare defense (Standard and Premium). I deploy the rules: challenges for suspect networks, rate limits on search paths, a tuned robots.txt, and alerts so you hear about the next spike first. Before-and-after report.
Drupal hardening (Premium). Bot-blocking modules in Drupal, a fix for the feature feeding the crawlers, two weeks of tuning, and a team walkthrough.
WHAT I NEED FROM YOU
Server logs and, for Standard and up, access to your Cloudflare account. The Cloudflare work applies to any site; the Drupal work needs Drupal 10 or 11.
Not sure which package fits? Message me with your host and a traffic graph and I'll tell you.
Respect third-party rights
Please be aware that it is against Fiverr's policies for sellers to include themes, templates, or any other elements that infringe third-party rights or applicable laws in the delivered work. Read more about in our Guide to Responsible Digital Creation.
Get to know Josh M
Technology Leader and Consultant
- FromUnited States
- Member sinceAug 2026
- Avg. response time1 hour
Languages
English
Other Website Maintenance Services I Offer
FAQ
Do you need access to my live site?
For the audit, only logs. Cloudflare rules go on the live account because that's where the traffic is, and I start with challenge pages rather than blocks. Drupal modules go to staging first, then to production on a schedule we agree on.
Will this block Google or real visitors?
The rules target patterns, not everyone. Known search engines stay allowed, suspect traffic gets a challenge page instead of a block, and we watch the numbers during tuning. If something legitimate gets caught, it's a settings change, not a rebuild.
I don't have Cloudflare. Can you still help?
Yes. Basic is log analysis and works anywhere. For Standard or Premium, add the Cloudflare setup extra and I'll move DNS over, or if your host has its own firewall (Pantheon, Acquia), message me first and I'll tell you what applies.
Will this block all AI tools from reading my site?
Your call, and the report includes a recommendation. Many publishers and nonprofits want ChatGPT and Claude to cite them; the problem is the volume, not the reading. Rules can allow bots that identify themselves and behave, and challenge the ones that don't.
My site isn't on Drupal. Does this still apply?
The audit and the Cloudflare work apply to any CMS. Only the Premium module work is Drupal-specific. If you're on WordPress or another platform, Basic or Standard is the fit.
Will this lower my hosting bill?
Requests stopped at Cloudflare never reach your host, so they don't count against most plans. Traffic blocked inside Drupal still reaches the server, and hosts differ on whether blocked requests count. I check your host's policy in the audit.
What's the difference between Basic and Standard?
Basic tells you what's happening and hands you the rules written out, which works if your IT team controls Cloudflare. Standard is me putting the rules in place, watching the result, and reporting it. Have someone to hand a report to? Basic. Otherwise Standard.
What do I need to have ready before ordering?
Your host, whether you use Cloudflare, and a way for me to get server logs (most hosts can export them). A screenshot of your traffic over the last month helps. If you're not sure how to get logs, message me before ordering and I'll walk you through it.

