I think part of the problem is the SS bypass function is just not great. Another part might be not having everything whitelisted that needs to be. For example, using the NoScript browser plugin I can see that this webpage right here attempts connections to reddit.com, redditmedia.com, redditstatic.com, datadome.co, google.com and sentry.io. Source: over 1 year ago

We have AWS enterprise support, after weeks of trying to mitigate with WAF under the direction of AWS, they finally recommended DataDome to us (via AWS MarketPlace) and admitted that Shield/WAF isn't as advanced as their solution. Source: about 2 years ago

There are specialized products like https://datadome.co/ (disclaimer: I know them) which are specialized in bot protection, they're probably too expensive for a personal use but maybe you can try reaching their support to see if there'd be a way to get it cheap for personal use. Source: over 2 years ago

DataDome | NYC / Paris | Full Time | Onsite or Remote https://datadome.co https://docs.datadome.co/ Bot hunters is a full time job! With our SaaS cybersecurity technology, we detect and manage non-human traffic in real-time to protect our clients’ websites and APIs. Named as a Strong Performer by Forrester, DataDome is a growing cybersecurity pioneering in bot detection and protection for content publishers,... - Source: Hacker News / about 3 years ago

I tried Imunify at beta/launch and wasn't impressed. We went with BitNinja for a few years and it worked well enough. It seemed to have pretty significant resource requirements despite a lot of the heavy lifting being done off network. We switched to Imunify360 a year or so back after seeing how polished it has become. It integrates well with cPanel (user management of scanning/etc.) and JetBackup (restoring... Source: about 1 year ago

Bitninja.io — Botnet protection through a blacklist, free plan only reports limited information on each attack. - Source: dev.to / almost 3 years ago