Improved Bot Management flexibility and visibility with new high-precision heuristics
Blog post from Cloudflare
The Cloudflare Application Security team has moved its Bot Management heuristics engine to the Cloudflare Ruleset Engine, which provides a more expressive and flexible platform for writing rules. This move allows for more nuanced detection of bot traffic, increased accuracy, and better visibility into bot activity for customers. The new engine supports complex rules with arbitrary sub-conditions, making it easier to detect sophisticated bots. Additionally, customers can now see the specific heuristic that caught each request, providing greater granular explainability and control over their bot traffic. This change also enables more advanced features such as account takeover detection IDs, which help security teams identify suspicious login activity. The new heuristics engine is available for Bot Management customers to use in analytics, logs, firewall events, custom rules, rate limiting rules, transform rules, and workers.