Cloudflare Inc. today released Adaptive Intelligence, a new detection engine within its Cloudflare Bot Management product that can create and retire its own blocking rules while an attack is happening. The engine trains continuously on live traffic flowing across Cloudflare鈥檚 network, which the company says handles more than a trillion web visits each day. As new bot frameworks and bypass methods appear, they are folded into the model, and the rules it produces are short-lived and narrowly targeted at specific threats. The rules rotate frequently enough that an attacker probing a site is mapping a defense that has already shifted.
Cloudflare鈥檚 pitch for the product centers on cost. Renting a network of compromised devices no longer requires much skill or money, and attackers can route traffic through real home internet addresses with free software handling the impersonation. Failed attempts are nearly free at volume, while security teams lack that margin. Cloudflare argues that conventional tools still rely on scheduled updates that can take weeks or months to deploy, even as attacker tooling changes in hours.
Chief Technology Officer Dane Knecht said that building taller walls fails when the cost of scaling an attack is effectively zero. He said a fixed defense is a problem attackers can eventually solve, and the goal of Adaptive Intelligence is to keep the target moving so that engineering work put into a bypass is obsolete before an operation can scale. The engine also expands the timeframe it examines, analyzing behavior across multiple windows at once. That approach, Cloudflare said, surfaces slow campaigns that stay under rate thresholds, including drawn-out credential stuffing and scraping runs.
Feeding the system is Precursor, the browser-level tool Cloudflare made generally available in July, which logs how a visitor moves, scrolls and types across an entire session rather than testing them once on arrival. Cloudflare said the combination of those session signals and telemetry from its global edge will let the system judge visitor intent beyond a simple pass or fail at the door. New detections test themselves against live traffic in the background, checking accuracy and screening for false positives before they deploy, with no downtime.
Automated traffic has been a growing share of Cloudflare鈥檚 product roadmap and of the web itself. Cloudflare said in July that bots accounted for roughly 57% of web requests when Precursor reached general availability. Bot management is also a wholesale business for Cloudflare, and WP Engine Inc. built the bot controls in its Global Edge Security service on top of the network. Adaptive Intelligence is available to Cloudflare Bot Management customers now, though Cloudflare did not disclose pricing.
More company and startup news from TechManNews.
