Building unique, per-customer defenses against advanced bot threats in the AI era
Sep 23, 2025Jin-Hee Lee, Oliver Payne, Bob AminAzad, Viktor Chynarov, Aleksandar Pavlov Hrusanov, Prajjwal Gupta

Summary
Introduces a new platform for per-customer behavioral anomaly detection using machine learning models to identify unique bot behaviors. This platform establishes dynamic baselines of normal traffic for each customer, identifies deviations from these baselines, and generates actionable findings through new Bot Detection IDs for WAF rules. It also details improvements in globally scalable bot fingerprinting, including heuristics for HTTP/2 and Client Hello extensions, and enhanced detection for residential and commercial proxy networks by combining network data with client-side information from challenge solves.
More from the Website Security & Threat Management trail
- We tested our own WAF with frontier AI models. Here’s what we found
- When scanners miss the attack: how Cloudflare Client-Side Security protects storefronts
- Introducing automatic remediation policies with Cloudflare CASB
- Introducing context-aware vulnerability discovery and remediation with Cloudflare Managed Defense and OpenAI Daybreak Models
- Introducing Adaptive Intelligence: undermining the economics of every bot attack