Introducing Adaptive Intelligence: undermining the economics of every bot attack

Introduces Adaptive Intelligence, a new bot detection engine that shifts from deterministic rule-based systems to a continuously adapting, non-deterministic approach. Key components include: 1) Continuous ML retraining on live traffic, incorporating new bypass tools and bot frameworks without scheduled releases. 2) Disposable rule generation, where rules are deployed and retired at random intervals to prevent attackers from learning and adapting. 3) Learning from traffic it protects, using customer feedback and internal measurements to tune protection against real-world threats. The engine aggregates signals like JA4 TLS fingerprints, request structures, challenge outcomes, session behavior, network reputation, and client-side telemetry from Turnstile and Precursor. It evaluates traffic over multiple time windows to detect both sudden bursts and slow, distributed attacks. Future components will focus on automatically building new detections from labeled traffic and maintaining a memory of past attacks.
More from the Website Security & Threat Management trail
- We tested our own WAF with frontier AI models. Here’s what we found
- When scanners miss the attack: how Cloudflare Client-Side Security protects storefronts
- Introducing automatic remediation policies with Cloudflare CASB
- Introducing context-aware vulnerability discovery and remediation with Cloudflare Managed Defense and OpenAI Daybreak Models
- Say it once: introducing Bot Preference Sync