To learn more about features and functionality, select a plan.
FreeProBusinessBot Management for Enterprise| Plan name | Bot Management for Enterprise |
| Availability | Added to Enterprise plans by your account team |
| Enablement | Quick onboarding with help from our Solutions Engineering team |
| Type of bots detected | Simple and sophisticated bots, headless browsers, and domain-specific anomalies |
| Actions | Customer chooses from several options, including block and various challenges |
| Analytics | Dedicated Bot Analytics tool, available in Security Analytics |
| Control | Ability to restrict by path, IP address, and more. |
| Additional features | Block AI bots, |
Bot Management customers have both bot settings (configured in Security Settings) and the ability to create custom rules using bot score fields. Start with the bot settings for baseline protection, then add custom rules only when you need additional control.
| Feature | Handled by bot settings | When to use custom rules instead |
|---|---|---|
| Block or challenge definitely automated traffic | No | Path-specific rules, custom thresholds, or combining with other fields |
| Block or challenge likely automated traffic | No | Path-specific rules, custom thresholds, or combining with other fields |
| Allow or block verified bots | No | Granular control by verified bot category |
| Block AI crawlers | Yes | Target individual AI crawlers using detection IDs |
| Protect static resources | No | Exclude static resources from specific rules |
| Optimize for WordPress | No | No |
| Forward bot data to origin | No | Use Transform Rules or Snippets |
| Detection ID targeting | No | Use cf.bot_management.detection_ids in custom rules |
| JA3/JA4 fingerprint rules | No | Use cf.bot_management.ja3_hash or cf.bot_management.ja4 in custom rules |
For more details on when custom rules are needed, refer to custom rules.
To get started, review our setup guides. If you have any questions, visit the community ↗ to engage with other Cloudflare users.