Network
Bot Management review
Score: 6/10Works, but it's Enterprise-priced for a score you can't fully audit.
The breakdown explains the score. It is not an average. How to read these.
Last updated
There are really two products here. The free “Bot Fight Mode” is a blunt instrument. It will challenge your own API clients and monitoring, and without exceptions it is nearly unusable on anything with programmatic traffic. Super Bot Fight Mode on paid plans adds a few controls but keeps much of the same rigidity.
Full Bot Management gives each request an ML-driven score from 1 to 99 that you can use in WAF rules. It works well, especially alongside JA4 fingerprints and custom rules. But it is Enterprise-only, priced accordingly, and the score remains a black box you are asked to trust.
If your traffic includes legitimate automation such as launchers, game clients, or CLI tools, expect to spend time building allow-lists. Verified bots coverage is decent but not exhaustive.
Status page incidents
Published under Bot Management, plus incidents whose title names it.
- Last 3 years
- 33
- 3 from the title
- Major or critical
- 3
- Median time open
- 4.3 h
- Since December 2022
- 45
Counts what Cloudflare published, not what broke: time open is how long the status entry stayed open, and nothing before December 2022 is tracked at all. Incidents Cloudflare tagged against nothing but named in the title are counted too. The caveats in full.