Agents can now set up your website’s security with Turnstile Spin
Sep 25, 2026Jules Lemee
Summary
This post introduces Turnstile Spin, an agent-mediated workflow for setting up and managing Cloudflare Turnstile. It automates the integration of Turnstile's frontend widget and backend Siteverify API calls, adapting to fresh installs, fixing existing implementations, and migrating from other CAPTCHA providers. Spin leverages AI coding agents to modify codebases directly, simplifying the security setup for developers and non-developers alike. The post highlights the shift in web development towards AI-driven workflows and how Spin bridges the gap for seamless security integration.
More from the AI-assisted Vulnerability Discovery trail
- Adaptive application security for the AI era: how Cloudflare connects code, traffic, and intelligence to stop attacks
- Introducing Threat Signals: agentic skills for open-source threat intelligence, free for every Cloudflare account
- Project Glasswing: what Mythos showed us
- From reactive to proactive: closing the phishing gap with LLMs
- A simpler path to a safer Internet: an update to our CSAM scanning tool