Bots, spy tools, proxies and invalid visits stay out. Only the right traffic reaches your offer.
free forever · 4-minute setup · no card
Meta Ads · iOS 17 · en-US
72 signals evaluated
Human confidence
97
72
signals per click
6ms
median verdict
50+
sources
99,99%
uptime
Ad reviewers see one page. Spies copy your best creative. Botnets burn your CPC. And when the reviewer lands on the real offer, compliance drops.
30–60%
of network traffic is IVT
48h
until rejection lands
6ms
to decide
0
evidence lost
30–60% of traffic is IVT
Robots, crawlers, scrapers and click farms arrive before your audience.
Spy tools track every creative
AdSpy, BigSpy, PiPiADS and competitors clone your landing in hours.
VPNs and proxies masked the country
Clean metrics require separating residential IPs from masks.
Rejection arrives in 48h
Without per-click evidence, you find out too late.
No fragile iframe. The verdict happens before the redirect, with fallback and evidence at every step.
Headers, UA, client hints, canvas, timezone, movement, ASN, country, referrer and parameters. 72 signals in parallel.
Weighted engine + your rules. Bots, headless, datacenter, VPN and inconsistencies lower confidence. Allow/block rules force the verdict.
High score goes to the offer. Uncertain gets a JS challenge. Low goes to the safe page. Everything logged with reason and latency.
Built for operations running multiple domains, geos and sources at once.
Bot and crawler detection
Signatures for 60+ robots, spy tools and AI crawlers, plus header consistency checks.
JS challenge + fingerprint
Canvas, plugins, timezone, touch and interaction. Only real browser behavior gets through.
Geo, device and language
Rules by country, region, device, OS and Accept-Language with list operators.
Anti-spy with a dedicated page
Detects AdSpy, BigSpy, PiPiADS and friends, and can send each tool to its own decoy.
A/B with up to 20 pages
AB Storm: free weights per page, real-time split and isolated counts per variant.
API + Worker + snippet
Server-side decisions via API key, Cloudflare integration and a one-line script.
4 delivery methods
Redirect, Pre Page, Mirror (serves the page on your link) and Unpack (PHP on your hosting).
Traditional cloakers sell redirects. Pombo sells auditable decisions.
| Capability | Typical cloaker | Pombo |
|---|---|---|
| Score across multiple signals | binary lists | 72 weighted signals |
| JS challenge with fingerprint | rare / iframe | native, with interaction proof |
| Evidence for every click | basic IP log | reason, score, latency, headers |
| Offer A/B | external | native and weighted |
| Operating cost | monthly fee by volume | free and unlimited |
| Edge integration | custom script | API, Worker, snippet, CNAME |
| Delivery methods | redirect only | Redirect, Pre Page, Mirror, Unpack |
| Offer testing | test parameter | Test Offer with a per-campaign token |
| Segmentation | manual country and device | country, device, required parameter |
No card, no 7-day trial, no hidden plan. Create your account and use the whole engine: unlimited clicks, every domain, every source, rules, challenge, A/B and per-click evidence.
Full access
R$ 0/forever
Every visit analyzed by the engine. Usage shows up in real time on the dashboard, but there is no charge and no cap: access is free and unlimited.
No. Ready-made link, one-line snippet, plugin and optional Worker. Setup is guided in 4 minutes.
Smart challenges the uncertain and blocks the bad. Strict only lets high scores through. Monitor logs without filtering, ideal for testing rules in production.
Yes. We read CF-Connecting-IP and CF-IPCountry from the headers, so the real IP is never lost behind the proxy.
It stays in your database for as long as the account exists. The dashboard shows the full history, and the API delivers the same data.
No. Pombo is free end to end: no card, no trial, no limit on clicks, domains or sources.
Go live in minutes, no card. See the difference on your first day of traffic.
Create account