Cloudflare Inc. today opened general availability for Precursor, a bot detection system that tracks how a visitor behaves across a whole browsing session as an alternative of testing them once on arrival.
Precursor runs contained in the browser. It streams interaction signals back to Cloudflare’s edge, where servers rating them in real time for evidence of automation. The goal is the CAPTCHA. A challenge page tests the visitor once, on the door. Every part the visitor does after that’s assumed good.
Cloudflare puts bot traffic at roughly 57% of web requests. By its count, automation now outweighs people on the web. Cloudflare’s argument is that a point-in-time check is simple to fake. A bot can fake a single motion. Faking a whole session, with the timing irregularities of an actual person, costs real engineering effort.
“As a substitute of just checking an ID on the gate, we’re taking a look at behavior over the whole visit,” said Chief Technology Officer Dane Knecht.
Customers turn Precursor on with a single click and no code changes. Cloudflare injects a small script into pages already passing through its network and the script logs mouse movement, scrolling rhythm, typing cadence, clipboard activity and the way long a page stays visible within the browser tab.
What happens next is a coherence check. Cloudflare’s evaluation engine unpacks the telemetry and appears for internal contradictions, reminiscent of pointer activity recorded while the page was hidden or typing events fired at a moment when no text field held focus. Suspicious sessions accumulate context reasonably than resetting, feeding a running Bot Rating that follows the visitor through a site or single-page application.
That closes off an ordinary evasion. Under per-request challenges, an automatic agent can wipe its behavioral signature by reloading the page. Precursor keeps scoring.
Cloudflare said the script records aggregate patterns and never the inputs themselves. Keyboard activity is stored as timing rhythm and cadence. The characters typed are never captured, in accordance with the corporate.
The launch extends an extended run of bot and crawler products out of Cloudflare. The corporate began blocking artificial intelligence scrapers by default for brand spanking new customers last 12 months, built the Pay Per Crawl marketplace so publishers can charge AI firms for access and shipped AI Crawl Control for per-crawler allow and block decisions. Bot management can also be a wholesale business. WP Engine Inc. built the bot controls in its Global Edge Security service on top of Cloudflare’s network.
Knecht said Cloudflare already protects users billions of times a day at login and checkout and described the stretch between those moments as “a black box” the corporate is now filling in.
Precursor is mostly available now. Cloudflare didn’t disclose pricing.
Image: SiliconANGLE/Ideogram
Support our mission to maintain content open and free by engaging with theCUBE community. Join theCUBE’s Alumni Trust Network, where technology leaders connect, share intelligence and create opportunities.
- 15M+ viewers of theCUBE videos, powering conversations across AI, cloud, cybersecurity and more
- 11.4k+ theCUBE alumni — Connect with greater than 11,400 tech and business leaders shaping the long run through a singular trusted-based network.
About SiliconANGLE Media
Founded by tech visionaries John Furrier and Dave Vellante, SiliconANGLE Media has built a dynamic ecosystem of industry-leading digital media brands that reach 15+ million elite tech professionals. Our recent proprietary theCUBE AI Video Cloud is breaking ground in audience interaction, leveraging theCUBEai.com neural network to assist technology corporations make data-driven decisions and stay on the forefront of industry conversations.