Category
72.2% of the 36 Food & deliverysites we tested run a managed anti-bot or WAF. That is a homepage-level reading — the listing, search, and account pages people actually scrape are usually more protected.
Vendors in this category
| Site | Protected | Anti-bot / WAF |
|---|---|---|
| allrecipes.com | Protected | Cloudflare |
| bbcgoodfood.com | Open | — |
| blueapron.com | Protected | Cloudflare |
| bonappetit.com |
| Protected |
| Cloudflare |
| chick-fil-a.com | Protected | Cloudflare |
| chipotle.com | Open | — |
| delish.com | Open | — |
| dominos.com | Open | — |
| doordash.com | Protected | Cloudflare |
| eatingwell.com | Protected | Cloudflare |
| epicurious.com | Open | — |
| food.com | Open | — |
| foodnetwork.com | Protected | Akamai (edge) |
| grubhub.com | Open | — |
| hellofresh.com | Protected | Cloudflare |
| instacart.com | Open | — |
| jamieoliver.com | Protected | Cloudflare |
| mcdonalds.com | Protected | Akamai Bot Manager |
| opentable.com | Protected | Akamai Bot Manager |
| pizzahut.com | Protected | Akamai Bot Manager |
| resy.com | Protected | Imperva (Incapsula) + 1 more |
| seriouseats.com | Protected | Cloudflare |
| simplyrecipes.com | Protected | Cloudflare |
| skipthedishes.com | Protected | Cloudflare |
| starbucks.com | Open | — |
| subway.com | Protected | Akamai Bot Manager |
| swiggy.com | Protected | AWS WAF + 1 more |
| tacobell.com | Protected | Akamai Bot Manager |
| takeaway.com | Protected | Cloudflare + 1 more |
| talabat.com | Protected | Cloudflare |
| tasteofhome.com | Protected | Cloudflare |
| thekitchn.com | Protected | PerimeterX (HUMAN) |
| ubereats.com | Protected | Cloudflare |
| wendys.com | Open | — |
| yelp.com | Protected | DataDome |
| zomato.com | Protected | Akamai Bot Manager |
Compare with the rest of the full Anti-Bot Adoption Index (of 1005 reachable top sites, 57.2% are protected).