Please Enable Local Anti-Bot Challenge for Lite Users

I would like to suggest enabling the local Anti-Bot Challenge for the Lite license as well.

I am using SafeLine from Germany, and for EU users this can become a real privacy and compliance problem. Even though SafeLine itself is self-hosted, the Lite Anti-Bot functionality may still depend on Chaitin’s cloud service. That means information about website visitors can potentially leave the local infrastructure and be sent to an external service.

Depending on what is transmitted, this could include things like IP addresses, browser information, request metadata, challenge/session identifiers, or other device-related information. Under GDPR/DSGVO, this can create additional requirements for the website operator, especially if personal data are transferred outside the EU.

For German users there can also be additional questions under TDDDG/ePrivacy, especially if browser or device information is accessed for Anti-Bot or fingerprinting purposes.

The main issue for me is that I chose SafeLine because it is a self-hosted WAF. If the Anti-Bot feature still requires cloud processing, then it is no longer fully self-hosted from a privacy perspective.

Since a local Anti-Bot Challenge Service already exists, it would be very helpful if Lite users could use it as well. This would make SafeLine much easier to deploy in Germany and other EU countries where GDPR compliance and data transfers to third countries are important concerns.

Please consider making the local challenge option available in the Lite edition, even if it comes with some reasonable limitations compared with Pro.

Hi,

Thank you for the detailed feedback and the professional analysis of its GDPR/TDDDG implications.

To be transparent about our edition positioning: Lite is our entry-level edition. It makes SafeLine's core protection easy to adopt, covering Semantic Analysis, Custom Rules, Rate Limiting, and Anti-Bot, but it is not designed for compliance-driven deployments. As you correctly noted, the Anti-Bot Challenge in Lite is served by Chaitin's cloud service.

If keeping data on-premises is a hard requirement, Pro is the better fit: it ships a fully local Anti-Bot Challenge service, where challenge delivery, verification, and token issuance all complete within your own infrastructure, so visitor data never leaves your environment. The capability is available today, and upgrading will directly address the compliance concerns you raised.

Thanks again for choosing SafeLine, and feel free to reach out anytime.