Built on one of the world’s largest networks, Precursor is designed to replace disruptive checkpoints and stop evasive bots without slowing down legitimate users.
Cloudflare, Inc. announced the general availability of Precursor, a next-generation, continuous behavioral validation engine for bot management. Built directly on Cloudflare’s edge, Precursor runs seamlessly inside web browsers to monitor entire user sessions and detect bot automation. Unlike traditional, static CAPTCHA, it analyzes ongoing interactions in real time to catch advanced bots, improving detection precision without interrupting legitimate users.
For the first time, automated bot traffic has eclipsed human activity on the internet, now generating roughly 57% of all web requests. This milestone marks a seismic shift from an internet built for human clicks to a digital landscape now dominated by AI agents. For organizations and everyday consumers, this means legacy defenses are blind to a new breed of automated threats that drive up infrastructure costs, manipulate inventory, and compromise data.Â
While a modern bot can easily fake a single action to pass a one-time security check, replicating an entire human journey remains a significant engineering hurdle. To protect the integrity of the global internet, organizations must move away from static, point-in-time defenses and embrace continuous behavioral validation — analyzing telemetry across an entire session to unmask automated impostors trying to blend into the crowd.
“Traditional security checks look at a single moment in time, but modern bots have gotten smart enough to fake their way through the front door,” said Dane Knecht, CTO of Cloudflare. “Instead of just checking an ID at the gate, we are looking at behavior over the entire visit. This makes life seamless for real users, while making it incredibly difficult and expensive for bad actors to fake human behavior. Cloudflare already protects users billions of times a day at critical moments like login and checkout, but until now, the space between those moments was a black box. With Precursor, we’re now eliminating that blind spot.”
Also Read: Why Cybersecurity’s Biggest Risks Are Getting Simpler
Now generally available, Precursor provides a session-level view of site activity by continuously collecting robust browser signals to block unwanted automated traffic through:
- Privacy-led defense: Built to protect end-user confidentiality, Precursor logs aggregate behavioral patterns rather than recording specific user inputs. For example, keyboard activity is recorded exclusively as timing rhythm and cadence — it never captures actual keystrokes.
- Zero-code, one-click setup: Precursor is enabled with a single click, allowing Cloudflare to automatically inject a compact, dynamic script into the network, with no modifications to the underlying code required. The script evaluates interaction dimensions such as mouse movement, scrolling rhythm, typing cadence, clipboard activity, and page visibility duration.
- A real-time analysis engine: Cloudflare’s servers instantly unpack the telemetry data sent from a user’s browser and scan it for signs of faked or computer-generated activity, validating whether interaction streams map rationally to human behavior — for example, by cross-referencing that pointer activity aligns with page visibility, or that text fields are focused during typing events.
- Session-long security measures: Unlike traditional defense challenges that reset with every request, Precursor continuously evaluates the visitor’s journey across a website or single-page application. Automated agents cannot reset their behavioral signatures by refreshing a page, allowing defensive algorithms to adjust a session’s Bot Score with compounding context.
