Precursor

Cloudflare says it can spot bots by how you move — commenters are not fully buying it

TLDR: Cloudflare launched Precursor, a tool that watches behavior across a whole website visit to better spot bots pretending to be people. Commenters were split between curiosity, jokes about endless verification, and skepticism that smarter bots will simply fake human quirks next.

Cloudflare has unveiled Precursor, a new system that tries to tell humans from bots by watching how people behave across an entire visit to a website — not just at a single login box or checkout screen. In plain English: instead of asking you to prove you're human once, it quietly studies things like timing and movement patterns during your whole session. Cloudflare says that helps catch smarter bots that can already beat old-school tests.

But the comments? Instant side-eye. One of the biggest reactions was simple confusion: is this just Cloudflare’s version of Google’s fraud-fighting product, as one commenter asked with a link, while another replied with a blunt, baffled “Huh?” That pretty much set the tone.

The real drama came from the contradiction watchers. One commenter called it “weird” that Cloudflare sells AI-style “agent” products while also launching tools to block “agentic” web behavior. In other words: sell the robots, then sell the robot repellent? That irony clearly hit a nerve.

And then came the jokes. The thread’s funniest line mocked the creeping vibe of endless online checks with: “please drink verification can to continue.” Meanwhile, skeptics zeroed in on the mouse-movement angle, arguing that adding fake human-like “jitter” doesn’t sound all that hard for determined bot makers. So yes, Cloudflare says this raises the bar — but the crowd is already betting the bot builders are taking notes.

Key Points

  • Cloudflare launched Precursor, a client-side session verification system designed to improve bot detection across an entire user journey.
  • Cloudflare says it analyzes over 1 trillion requests per day across more than 20% of the web and uses that network visibility alongside client-side signals for bot mitigation.
  • Cloudflare Turnstile is described as running nearly 3 billion times per day on sensitive endpoints such as login, signup, and checkout.
  • Precursor uses dynamically injected JavaScript to collect behavioral signals in real time and feed them into Cloudflare’s bot protection systems.
  • The article says session-level human behavior is harder for bots to replicate than isolated interactions, improving detection precision while reducing unnecessary challenges for legitimate users.

Hottest takes

"please drink verification can to continue" — nullc
"sells agentic products alongside this new service" — sudb
"just adding 'jitter' to their movements" — reluctant_dev
Made with <3 by @siedrix and @shesho from CDMX. Powered by Forge&Hive.