April 01, 2022 1:31 PM
We decided we’re going to stop using CAPTCHAs. Before we talk about how we did it, and how you can help, let's first start with a simple question. Why in the world is CAPTCHA still used anyway?...
March 18, 2022 9:03 PM
Being a single pane of glass for all network activity has always been one of Cloudflare’s goals. Today, we’re outlining the future vision for Cloudflare observability....
March 16, 2022 12:58 PM
Our customers can choose to allowlist any bot that is verified. Unfortunately, new bots are popping up faster than we can verify them. So today we’re announcing a solution: Friendly Bots...
December 03, 2021 6:59 PM
Bots moved quickly this holiday season, launching over 1 trillion requests on Black Friday but quickly receding after the weekend....
October 15, 2021 1:01 PM
We’ve devised novel methods to detect multi-user IP addresses, and today we’re excited to announce their integration into our global threat intelligence products. These will improve the quality of our detection techniques and reduce false positives for our customers, and the clients that visit them....
March 26, 2021 1:00 PM
The word “bots” on the Internet is a fairly loaded one. My earliest ‘bot’ experience was on IRC, where bots were quite helpful in making sure your favorite channel didn’t get taken over by malicious users and allowed for fun games of trivia....
March 26, 2021 1:00 PM
Today, we are announcing early access to API Abuse Detection. This technology will identify, secure, and protect API endpoints with unsupervised learning....
March 12, 2021 3:48 PM
Anomaly Detection uses an algorithm called Histogram-Based Outlier Scoring (HBOS) to detect anomalous traffic in a scalable way. While HBOS is less precise than algorithms like kNN when it comes to local outliers, it is able to score global outliers quickly (in linear time)....
December 09, 2020 12:00 PM
Cloudflare is deprecating the __cfduid cookie. While we have never tracked end-users across sites or sell their personal data, we don’t want any customer to think they need a cookie banner because of what we do....
October 29, 2020 12:00 PM
Nearly 40% of Internet traffic is automated. Today, Cloudflare is taking its Bot Management product to new heights with the release of Bot Analytics....
October 20, 2020 11:00 AM
Automated traffic makes up almost 40% of total Internet traffic. Let’s take a look at how bots behaved over 2020 so far....
October 19, 2020 11:00 AM
Monday Mornings with Customer Success: A monthly series brought to you by our Customer Success Team. This month's post is all about how a customer trusted Cloudflare to help them fight bots and improve their customer experience....
September 16, 2020 11:00 AM
On July 3, Cloudflare’s global DDoS protection system, Gatebot, automatically detected and mitigated a UDP-based DDoS attack that peaked at 654 Gbps. The attack was part of a ten-day multi-vector DDoS campaign targeting a Magic Transit customer and was mitigated without any human...
May 06, 2020 11:00 AM
This is the ongoing story of Bot Management at Cloudflare and also an introduction to a series of blog posts about the detection mechanisms powering it...
September 23, 2019 1:00 PM
From the very beginning Cloudflare has been stopping bots from scraping websites, or misusing APIs. Over time we’ve improved our bot detection methods and deployed large machine learning models that are able to distinguish real traffic (be it from humans or apps) from misbehaving...
December 22, 2017 2:17 PM
During 2017 Cloudflare published 172 blog posts (including this one). If you need a distraction from the holiday festivities at this time of year here are some highlights from the year....
December 14, 2017 7:41 PM
This post provides a retrospective analysis of Mirai — the infamous Internet-of-Things botnet that took down major websites via massive distributed denial-of-service using hundreds of thousands of compromised Internet-Of-Things devices....
August 28, 2017 2:00 PM
On August 17th, 2017, multiple Content Delivery Networks (CDNs) and content providers were subject to significant attacks from a botnet dubbed WireX. ...
