Companies Using PerimeterX

I spent years on crawling systems at Google, and bot defence is the one category where the thing we measure fights back. While checking this page our own browser was told to "Press & Hold" on HUMAN's newsroom, which is a fair summary of the product. Our October 2026 crawl finds PerimeterX's script on 9,488 live domains. After removing the ones on other companies' accounts, 2,672 remain, 1,011 of them matched to a company. Most of what follows is about who chose it.

What the 2,672 is made of

PerimeterX's script names its account: the address carries an app ID, PX plus eight characters. Grouping domains by it showed that about two thirds of the raw count ran on someone else's account. beehiiv's newsletters (2,870), SkipTheDishes' restaurant pages (1,246), AVB's dealer websites (754) and sahibinden.com's store pages (708) were the big four, and we removed them along with smaller platform groups. What's left is mostly brands, several of them counted many times: Flutter's FanDuel and PokerStars sites about 159, Target and its typo domains 129, Change.org 64 and Skyscanner 59.

The usage chart has a single October reading, so there is no curve to interpret yet. Earlier monthly figures moved with our crawl's coverage and a capture change in August, and the domains we crawl turn over every month, so I wouldn't read growth into them.

"Two thirds of the domains carrying PerimeterX's script were on someone else's account. The buyer list is a few thousand domains long, and a few hundred brands own most of it." - David Thomson, CTO at TechnologyChecker.io

Sales signal: count brands, not domains. A FanDuel or a Target is one conversation however many hostnames it protects.

Who the buyers are

144 matched companies (15.37%) have more than 1,000 staff, and 18.22% were founded before 1960. That's an old-economy, large-company base: Sam's Club, Texas Instruments, Ralph Lauren, 7-Eleven, Bloomberg, Skechers, Pep Boys and The RealReal, each on an app ID of its own. The 38.53% at 1 to 10 employees is real but spread thin, led by retail, real estate and restaurant businesses. HUMAN's merger announcement in July 2022 put the combined company at more than 500 customers. That counts customers, not domains, but it fits a base where a few hundred brands run several domains each.

Sales signal: the PerimeterX buyer is a consumer brand with a login, a checkout or limited stock to protect. Account takeover, scalping and scraping are the pains, and the security team owns the budget.

Industries and countries

Retail leads at 13.15%, with Restaurants at 3.81%: Arby's, Jimmy John's and Buffalo Wild Wings protect their ordering sites. News is the second cluster. Newspaper Publishing is 5.07%, and 29 of those 44 companies are regional papers from different publishers sharing one app ID, while 11 of the 28 broadcast companies are Nexstar's TV stations. Food delivery runs through group accounts: Delivery Hero uses one across talabat, foodpanda, foodora and HungerStation, and Deliveroo has its own. By country the United States leads with 660 matched companies, eleven times the United Kingdom's 60, with Australia (47) and Canada (32) next.

Sales signal: for bot management, territory is American consumer commerce. Europe is thin here: France has 20 matched companies and Germany 18.

Overlaps and exits

There's no switching table on this page because none of the pairs passed our tests: most domains seen with PerimeterX and a rival still run both. On the clean set, 364 PerimeterX domains also run reCAPTCHA, usually on a form, 47 run DataDome and 14 run AWS WAF's challenge. Exits are real but softer than they look. 2,869 domains dropped PerimeterX on at least one hostname since we started tracking it on 16 March 2026, and when we checked, 477 of them still ran it on another hostname.

"Bot-defence vendors rarely share a site. When a PerimeterX domain runs a second tool, it's nearly always a free CAPTCHA on a form, not another bot manager." - David Thomson, CTO at TechnologyChecker.io

Sales signal: displacement deals are rip-and-replace, not add-ons. A PerimeterX domain that adds a rival's challenge script is unusual enough to suggest an evaluation.

What the stack says

Across the clean set Google Analytics runs on 63.47% of domains, and Cloudflare fronts 44.12%, Amazon CloudFront 27.06% and Akamai 8.42%. Google Tag Manager is on 2,027 of the 2,672 domains and Adobe Experience Platform Launch on 393, and on some sites, adn.com among them, the PerimeterX sensor itself arrives through a GTM container. The commerce rows read like enterprise retail: Salesforce Commerce Cloud on 7.82%, its recommendation service CQuotient on 5.76%, Adobe Analytics on 6.77% and Braze on 5.39%. Several large customers, Zillow and sahibinden.com among them, serve the sensor through their own domain, the first-party set-up HUMAN documents for sites whose third-party scripts get blocked.

Sales signal: a PerimeterX customer already pays for a CDN, a consent manager (OneTrust is on 23.32%) and an enterprise commerce platform. Sell into that stack, not around it.

Key takeaways

1. 9,488 domains load PerimeterX's script; 2,672 run it on their own account after removing platform fleets, copies and for-sale pages.
2. The buyers are large US consumer brands: 144 matched companies have 1,000-plus staff and 18.22% were founded before 1960.
3. Retail (13.15%) and news are the two clusters, and the US has eleven times the UK's matched companies.
4. Rival bot managers almost never share a site with it; reCAPTCHA does, on 364 domains, for a different job.

How I'd use this list

Targeting: start from the 50 named companies, all checked by hand, then group the rest of the list by brand and app ID so each company appears once.

Outreach: "Your site runs HUMAN's Bot Defender (PerimeterX) on your own account, so you already pay to keep bots out. This is what we see on sites like yours, including which ones also run a CAPTCHA."

Competitive angle: sellers of DataDome, Akamai Bot Manager or AWS WAF should watch the 2,869 domains that dropped PerimeterX on at least one hostname, after removing the 477 that still run it elsewhere. For the wider context on automated traffic, see our bot traffic statistics.

The full list of PerimeterX domains, with company data for 1,011 of them, is on TechnologyChecker.io.