Banish bots from your Waiting Room and improve wait times for real users
Mar 3, 2025Rachel Wyatt, Piper McCorkle, Brad Swenson
Summary
This post introduces two new capabilities for Cloudflare Waiting Room: the integration of an invisible Turnstile challenge to quantify bot traffic within the queue, and the Infinite Queue feature for Advanced Waiting Rooms, which redirects failing bot traffic to a custom page to waste their resources. It also details Session Revocation, allowing for dynamic session termination to open up spots and improve queue throughput. The post explains how Turnstile's challenge outcomes are categorized as 'Likely Bots', 'Bots', and 'Likely Humans', and how these metrics are available in Waiting Room Analytics.
More from the Website Security & Threat Management trail
- We tested our own WAF with frontier AI models. Here’s what we found
- When scanners miss the attack: how Cloudflare Client-Side Security protects storefronts
- Introducing automatic remediation policies with Cloudflare CASB
- Introducing context-aware vulnerability discovery and remediation with Cloudflare Managed Defense and OpenAI Daybreak Models
- Introducing Adaptive Intelligence: undermining the economics of every bot attack