Compare available Cloudflare plans
Cloudflare bot solutions
Identify and mitigate automated traffic to protect your domain from bad bots.
Available on all plans
Bots — automated software that sends requests to your site — can scrape content, stuff stolen credentials into login forms, hoard inventory, and inflate server costs. Cloudflare's bot solutions detect this automated traffic and let you decide how to respond.
Cloudflare offers three bot-specific products: Bot Fight Mode, Super Bot Fight Mode, and Bot Management for Enterprise.
If you need a simple toggle that challenges detected bots across your entire domain, use Bot Fight Mode (Free) or Super Bot Fight Mode (Pro, Business, Enterprise without Bot Management add-on). These products are included with your plan but do not allow you to write rules based on bot score or target specific endpoints. Super Bot Fight Mode adds configurable actions per bot category and supports WAF custom rule exceptions, but does not offer the granular per-request scoring of Bot Management.
If you need granular control — per-request bot scores, custom rules, per-endpoint handling, and detailed analytics — use Bot Management for Enterprise. This is recommended for ecommerce, banking, and security use cases. To enable Bot Management for Enterprise, contact your account team.
To see the differences in features and functionality, visit Plans.
Bot Fight Mode
Challenge detected bot traffic across your entire domain with a single toggle.
Super Bot Fight Mode
Identify traffic matching patterns of known bots, challenge or block bots, protect static resources, and view analytics to help you understand bot traffic using Super Bot Fight Mode.
Firewall variables
Access several new variables within the Firewall expression builder.
API Shield
Identify and address API vulnerabilities using API Shield.
DDoS Protection
Detect and mitigate Distributed Denial of Service (DDoS) attacks using Cloudflare's Autonomous Edge.
Turnstile
Use Cloudflare's smart CAPTCHA alternative to run less intrusive challenges.
WAF
Get automatic protection from vulnerabilities and the flexibility to create custom rules.