Here’s a reality check for anyone building scrapers in 2026:
If you’re still treating scraping as a scripting problem, you’re going to have a bad time.
The gap between “scraping works on my laptop” and “scraping works in production” has never been wider . Here’s why — and what to do about it.
The Shift
Cloudflare now protects over 24 million active websites and began blocking AI crawlers by default in July 2025 . Reddit filed a lawsuit in October 2025 against multiple data collection companies . And the number of web security services nearly doubled from 36 to 60 between 2022 and 2024.
What worked five years ago doesn’t work today.
The Five Layers You Actually Need
Most teams build a scraper and call it a day. At scale, you need five layers:
- Orchestration Layer
Job scheduler (what gets scraped, when)
Request router (HTTP client vs. headless browser vs. managed API)
Retry logic with backoff
- Extraction Layer
HTTP clients for static content (0.5-2s/request)
Headless browsers for JavaScript (3-15s/request, 200-500MB RAM each)
Managed APIs for the hard stuff
- Validation Layer — This is the one most teams skip, and it’s the one that causes the most damage.
A blocked scraper doesn’t always return an HTTP error. It might return a CAPTCHA page that looks valid. Or a soft block that looks like real data but isn’t .
You need:
Schema validation before storage
Content fingerprinting (detect block pages)
Field completeness checks
- Observability Layer Track:
Success rate per domain (not just HTTP 200)
Cost per successful payload
Selector health
Latency distribution
- Storage and Delivery Layer Deduplication, timestamping, schema evolution.
The Economics
The metric that matters is cost per successful payload, not cost per GB of proxy traffic .
Why? Because residential proxies cost roughly 10x datacenter proxies. And headless browsers add another 5-10x multiplier . The share of requests that need these heavy extraction methods has grown substantially.
Build vs. Buy
The breakeven math looks like this:
Factor Build Buy
Maintenance High (proxy rotation, browser updates, anti-bot adaption) Low
Anti-bot speed Weeks to months Hours to days
Breakeven Below ~500K requests/month Above ~500K requests/month
How Thordata Helps
Thordata provides the infrastructure that handles these layers:
100M+ residential IPs across 190+ countries, ethically sourced
Web Scraper API and SERP API for structured data
Scraping Browser that automates CAPTCHA solving, fingerprinting, and IP rotation — compatible with Puppeteer/Playwright
SDKs for Python, Node.js, Go, and Java
Compliance: GDPR, CCPA, SOC 2 Type 1
Bottom Line
If your scraper works on your laptop but fails in production, it’s not your code — it’s your infrastructure.
Try Thordata free: https://www.thordata.com/?ls=dev.to&lk=02-de
Use code thor020 for 10% off.
Top comments (0)