Improved Bot Management flexibility and visibility with new high-precision heuristics

The post details the migration of Cloudflare's Bot Management heuristics engine from a Lua-based system within an openresty reverse proxy to the Cloudflare Ruleset Engine. This change allows for more complex rules written in YAML, incorporating multiple characteristics and arbitrary sub-conditions. A key improvement is the reduction of false positives, exemplified by a Golang TLS fingerprint heuristic that was refined to have a 0.0001% false positive rate by incorporating network context. The new engine also provides Bot Detection IDs to customers, offering granular visibility into why a request was flagged as a bot and enabling custom rule creation based on these IDs. New detection IDs for monitoring login failures and attempts have been added to help identify account takeover risks.