Plans — FreeTo learn more about features and functionality, select a plan.
|Plan name||Bot Fight Mode|
|Availability||All Free customers|
|Enablement||Toggle in Firewall > Bots|
|Type of bots detected||Simple bots (from cloud ASNs) and headless browsers|
|Actions||Cloudflare issues a computationally expensive challenge|
|Additional control||Applied to all traffic across a domain|
Bot detection engines
HeuristicsThe Heuristics engine processes all requests. Cloudflare conducts a number of heuristic checks to identify automated traffic, and requests are matched against a growing database of malicious fingerprints.
JSD is automatically enabled with Bot Fight Mode.
Notes on detectionCloudflare uses the
__cf_bm cookieto identify bots. For more details, refer to .
- Protect entire domains without endpoint restrictions
- Cannot be customized, adjusted, or reconfigured via firewall rules