Category
65.6% of the 32 Food & deliverysites we tested run a managed anti-bot or WAF. That is a homepage-level reading — the listing, search, and account pages people actually scrape are usually more protected.
| Site | Protected | Anti-bot / WAF |
|---|---|---|
| allrecipes.com | Protected | Cloudflare |
| bbcgoodfood.com | Open | Google reCAPTCHA |
| blueapron.com | Protected | Cloudflare |
| bonappetit.com | Protected | Cloudflare |
| chick-fil-a.com | Open | — |
| chipotle.com | Open | — |
| delish.com | Open | — |
| dominos.com | Open | — |
| doordash.com | Protected | Cloudflare |
| eatingwell.com | Protected | Cloudflare |
| epicurious.com | Open | — |
| food.com | Open | — |
| foodnetwork.com | Protected | Unidentified WAF / bot protection |
| grubhub.com | Open | — |
| hellofresh.com | Protected | Cloudflare |
| instacart.com | Open | — |
| jamieoliver.com | Protected | Cloudflare |
| mcdonalds.com | Protected | Akamai Bot Manager |
| opentable.com | Open | — |
| pizzahut.com | Open | — |
| resy.com | Protected | Imperva (Incapsula) + 1 more |
| seriouseats.com | Protected | Cloudflare |
| simplyrecipes.com | Protected | Cloudflare |
| skipthedishes.com | Protected | Cloudflare |
| starbucks.com | Open | — |
| subway.com | Open | — |
| swiggy.com | Protected | AWS WAF + 1 more |
| tacobell.com | Protected | Akamai Bot Manager |
| takeaway.com | Protected | Cloudflare |
| talabat.com | Protected | Cloudflare |
| tasteofhome.com | Protected | Cloudflare |
| thekitchn.com | Protected | PerimeterX (HUMAN) |
| ubereats.com | Protected | Cloudflare + 2 more |
| wendys.com | Open | — |
| yelp.com | Protected | DataDome |
| zomato.com | Open | — |
Compare with the rest of the full Anti-Bot Adoption Index (of 960 reachable top sites, 55.6% are protected).