Cloudflare, Inc., the leading connectivity cloud company, today announced the general availability of Precursor, a next-generation, continuous behavioral validation engine for bot management. Built directly on Cloudflare's edge, Precursor runs seamlessly inside web browsers to monitor entire user sessions in order to detect bot automation. Unlike traditional, static CAPTCHAs, it analyzes ongoing interactions in real time to catch advanced bots, improving detection precision without interrupting legitimate users.
Automated bot traffic now generates roughly 57% of all web requests.
Precursor provides session-level continuous behavioral validation, not one-time checks.
Zero-code, one-click setup requires no modifications to underlying code.
Privacy-led defense logs aggregate behavioral patterns, never keystrokes.
Evaluates mouse movement, scrolling rhythm, typing cadence, clipboard activity, and page visibility.
Sessions cannot reset behavioral signatures by refreshing a page.
For the first time, automated bot traffic has eclipsed human activity on the Internet, now generating roughly 57% of all web requests. This milestone emphasizes a seismic evolution from an Internet built for human clicks to a digital landscape now dominated by AI agents. For organizations and everyday consumers, this means that legacy defenses are blind to a new breed of automated threats that drive up infrastructure costs, manipulate inventory, and compromise data.
Dane Knecht, CTO of Cloudflare, stated: "Traditional security checks look at a single moment in time, but modern bots have gotten smart enough to fake their way through the front door. Instead of just checking an ID at the gate, we are looking at behavior over the entire visit. This makes life seamless for real users, while making it incredibly difficult and expensive for bad actors to fake human behavior."
Precursor provides a session-level view of site activity by continuously collecting robust browser signals through a privacy-led defense that logs aggregate behavioral patterns rather than recording specific user inputs. It features zero-code, one-click setup with a compact, dynamic script that evaluates interaction trails including mouse movement, scrolling rhythm, typing cadence, clipboard activity, and page visibility duration. A real-time analysis engine unpacks telemetry data and scans for signs of faked or computer-generated activity. Session-long security measures ensure automated agents cannot reset their behavioral signatures by refreshing a page.
Cloudflare's servers instantly unpack the telemetry data sent from a user's browser and scan it for signs of faked or computer-generated activity. The system validates whether interaction streams map rationally to human behavior, such as cross-referencing that pointer activity aligns with page visibility or text fields are focused during typing events. Unlike traditional defense challenges that reset per every request, Precursor continuously evaluates the visitor's user journey across a web or single page application, allowing defensive algorithms to adjust a session's Bot Score with compounding context.
About Cloudflare
Cloudflare, Inc. is the leading connectivity cloud company. It empowers organizations to make their employees, applications and networks faster and more secure everywhere, while reducing complexity and cost. Cloudflare's connectivity cloud delivers the most full-featured, unified platform of cloud-native products and developer tools. Powered by one of the world's largest and most interconnected networks, Cloudflare blocks billions of threats online for its customers every day. It is trusted by millions of organizations globally.
