Cloudflare launches Precursor to detect agentic bot behavior across full user sessions

Cloudflare has launched Precursor, a client-side verification system that continuously collects behavioral signals throughout a user's session to distinguish human traffic from automated or agentic bots. The system uses dynamically injected JavaScript to process signals in real time and feed them into Cloudflare's bot protection, extending client-side detection beyond individual challenge points like login or checkout to the entire user journey. Precursor operates as an optional complement to Turnstile, Cloudflare's managed challenge system, and both are features of the company's Enterprise Bot Management offering. Cloudflare says modern automation increasingly executes JavaScript, uses real browser environments, and can pass individual CAPTCHAs without raising suspicion, making continuous session-based detection necessary. The company analyzes over 1 trillion requests per day across more than 20% of the web at the network level. The product reflects an escalating adversarial dynamic in bot mitigation where short-burst verification is no longer sufficient. Cloudflare positions Precursor as a privacy-minded system built to close the visibility gap between discrete challenge points.