{
  "id": "WEB-017",
  "slug": "web-017",
  "title": "The site must not be gated by geo, bot challenge or app wall",
  "statement": "A geo-gate, bot challenge, captive portal, or app-install wall blocking the reviewer is rejected.",
  "rationale": "Vetting fetches from a US datacentre IP, which aggressive bot protection frequently blocks outright. The site works perfectly for customers and returns a challenge page to the reviewer, so the failure is invisible from the brand's side.",
  "layer": "WEBSITE",
  "layerSlug": "website",
  "object": "brand website",
  "severity": "BLOCKING",
  "detectability": [
    "CRAWL"
  ],
  "failureClass": "TERMINAL_WEBSITE",
  "authorities": [
    "TCR",
    "Twilio",
    "Bandwidth"
  ],
  "applicabilityText": "Applies to every 10DLC registration.",
  "universal": true,
  "remediation": "Allowlist datacentre traffic for the policy and opt-in pages, or lower the bot-protection level on them. Confirm the pages load from a cloud IP, not just from your office.",
  "phase": "approval",
  "automated": true,
  "url": "https://ekas.io/rules/10dlc/website/web-017/",
  "markdown": "https://ekas.io/rules/10dlc/website/web-017.md",
  "registry": "https://ekas.io/rules/10dlc/",
  "updated": "2026-07-25",
  "licence": "CC BY 4.0 — https://creativecommons.org/licenses/by/4.0/"
}