Cloudflare's agentic web signal shows why bot traffic needs verification, not blanket blocking

Cloudflare data showed GoogleBot, AppleBot, BingBot, headless browsers, curl traffic, and abnormal paths such as /wp-admin/install.php. The site needs to separate useful crawling from attack-surface noise.

Back to this issue Open original source
Cloudflare's agentic web signal shows why bot traffic needs verification, not blanket blocking
Radar take

AI websites should not treat every bot as bad traffic, but they should not ignore abnormal paths. Track source, verify identity, keep sitemap and robots healthy, and watch 404 and 504 patterns.

Agent-ready web does not mean opening everything. It means helping legitimate crawlers understand the site while making abnormal access visible.

Agentic WebBot VerificationCloudflare