diff --git a/modules/security/bot-analyzer.sh b/modules/security/bot-analyzer.sh
index 0d79385..f372b05 100755
--- a/modules/security/bot-analyzer.sh
+++ b/modules/security/bot-analyzer.sh
@@ -1812,7 +1812,7 @@ calculate_threat_scores() {
             header_score=${header_anomalies[$ip]:-0}
             if [ "${header_score:-0}" -ge 12 ]; then
                 score=$((score + 8))  # Multiple header suspicions
-            elif [ "$header_score" -ge 8 ]; then
+            elif [ "${header_score:-0}" -ge 8 ]; then
                 score=$((score + 5))  # Moderate header anomalies
             fi
         fi