Cloudflare Unveils Session-Level Anti-Automation Solution
Cloudflare Blog · rss · 2026-07-13
Cloudflare has launched Precursor, utilizing continuous client-side behavioral signals to detect automated or agentic activities, bridging the blind spots of traditional per-request analysis.
Core Concept
- Dynamically injects lightweight scripts into website responses to continuously capture signals like pointer movement, keyboard activity, focus changes, and visibility.
- Analyzes the entire session at the edge, rather than just looking at individual requests.
- Distinguishes between human and automated behavior through session-level patterns, improving bot detection accuracy and reducing false positives for legitimate users.
Why It Matters
- Modern automation increasingly mimics human behavior and can even pass single challenges or CAPTCHAs.
- What remains difficult to fake is the rhythm of behavior throughout an entire session, such as mouse trajectories, reaction delays, and micro-corrections.
- Cloudflare believes this will significantly raise costs for bot developers, forcing them to simulate complete human sessions rather than single interactions.
Privacy by Design
- Collects only the minimum necessary signals without logging actual keystrokes.
- Behavioral signals are used in aggregate, meaning they are neither exposed on customer dashboards nor tied to user identities or persistent profiles.
The article also notes that Security Analytics now includes a session view, making it easier to review typical, anomalous, and suspected automated sessions.
More from coding & agent
- A better path to agent autonomy is running waves, finding friction, and iterating — JnBrymn · 2026-07-22
- Coding agents are heading toward an AI-writes, AI-reviews, human-approves workflow — aftahi_ai · 2026-07-22
- oMLX 0.5.2 adds Mac menu-bar stats, low-bit decode kernels, and faster downloads — awnihannun · 2026-07-22
- GitHub review bot hits its PR limit and forces a 39-minute cooldown — DanielLockyer · 2026-07-22
- Max reasoning effort appears to be mobile-only in Codex Remote, not desktop — GabGarrett · 2026-07-22
- A Reddit demo argues online stores should expose carts and pricing through MCP — gelembjuk · 2026-07-22