Cloudflare verified bots y signed agents (Web Bot Auth)
Stable
Cloudflare verifies the cryptographic signature (Web Bot Auth) of bots and agents and lets you apply access policies by agent type.
- Vendor
- Cloudflare
- Status
- Stable
- Levels covered
- Level 5: Trustworthy (Partial coverage)
- Platforms
- Any
- Protocols
- Pricing
- Freemium
- Effort
- Low
- Regions
- Global
For business
You tell identified agents apart from anonymous traffic without touching your store.
For technical teams
Based on RFC 9421 and IETF drafts not yet final. Distinguishes direct from intermediary access (agents operated by many users).
Official site: Cloudflare verified bots y signed agents (Web Bot Auth)
Alternatives
Sources
Verified on
Verification note: Requires the store to sit behind Cloudflare. The site owner does nothing for verification (effort 1); agent policies are «across all plans». The docs label it neither GA nor beta. The current IETF draft revision could not be confirmed (Datatracker returns 403).