From what I’ve tested, a mix of light filtering and basic behavior checks usually does the job without making the demo feel locked down. When I opened the
aviamaster demo, it greeted me with a quick verification screen before loading anything else, and it reminded me of a similar setup I used last year. My own demo was constantly hit by automated scripts until I added a simple gate like that. It wasn’t perfect, but it cut out most of the junk traffic without messing up the flow for real users.