Skip to content

Block AI Bots

Configure AI bot policies

New defaults on September 15, 2026

On September 15, 2026, Cloudflare will set updated defaults for new domains: bots classified as Training or as Agent will be blocked on pages that display ads, and Search will remain allowed. Mixed-purpose crawlers that combine Search and Training will also be blocked by all configurations to block AI training, including the legacy "Block AI bots" option. Before September 15, all customers can opt out of these new defaults.

All Cloudflare customers can choose to block AI bots and agents based on their behavior. Cloudflare offers presets for the most common AI behaviors to give customers the option to treat different AI use cases distinctly:

  • Search: crawlers that collect or index your content to answer questions about it later.
  • Agent: automated activity acting in real time on a person's behalf, such as chat fetch bots and browser-use agents.
  • Training: crawlers taking your content to train or fine-tune a model, including mixed-purpose crawlers that are used both for Training and for Search.

Each blocking option will block Verified bots classified with that behavior, plus additional unverified bots that fall under these classifications.

Each setting includes three mitigation options:

  • Block (on all pages) - Issues the block across the entire zone.
  • Block on pages with ads - Uses Cloudflare automated detection for pages that display ads on your zone to block only on those pages.
  • Allow (do not block) - Does not add any blocking.

To configure these policies, customers can go to Security Settings > Configure AI bot policies.

Block AI bots [Deprecating on September 15, 2026]

This setting blocks verified bots that are classified as crawling for the purpose of AI training, as well as a number of unverified bots that behave similarly.

To configure this setting and set their preference for blocking mixed-purpose bots, customers can go to Security Settings > Block AI bots.