Detection method
Does the tool decide on IP, device ID, and proxy reputation, or does it build a behavioral profile of the visitor? Profiles survive IP and device rotation; rule lists don't. Ask how it handles a known offender returning on a fresh residential IP and a new phone — if that's a brand-new evaluation, you have a one-click bypass.
