FEATUREDComputing Life · Share (鸭哥 research reports)· rssZH00:00 · 07·16
→Cloudflare Precursor: When AI agents use real browsers, bot detection shifts to session-long behavior
Cloudflare launched Precursor on July 13, 2026, a session-level behavior detection system inside Enterprise Bot Management. Instead of relying on browser fingerprints or single-request signals, it continuously collects pointer movement, keystroke timing, focus changes, and page visibility, then cross-checks whether the whole session is internally consistent. The shift matters because Playwright-driven agents now run inside real browsers, making old shortcuts like checking navigator.webdriver unreliable. Precursor injects scripts into HTML responses, compresses event streams, and evaluates them at the edge, updating Bot Score and challenge clearance as behavior changes. Cloudflare states it does not record actual keystrokes or bind signals to user identities. The post also covers the FP-Agent paper, where an XGBoost classifier distinguished seven browser agents in a controlled lab setting, but notes that doesn't translate to production accuracy. Independent accuracy rates, false-positive data by user group, and accessibility testing are not yet public. Official materials conflict on rollout scope. Behavior detection alone doesn't solve agent identity, user delegation, or business authorization—Precursor only addresses runtime risk.
#Cloudflare#Precursor#FP-Agent
why featured
Featured · importance 78 · hook + knowledge + resonance
editor take
Cloudflare Precursor shifts bot detection from single fingerprints to session-long behavioral consistency, because Playwright-driven agents now run inside real browsers.
sharp
The useful bit here is the problem shift it names: Playwright-driven agents run in real Chrome with normal fingerprints, so checking `navigator.webdriver` no longer cuts it. Precursor stretches detection across the whole session—pointer movement, keystroke timing, focus changes, page visibility—and cross-checks whether these signals explain each other. A cursor moving while the page is hidden, or keyboard events on an unfocused field, is harder to fake than a single property.
I'd discount the accuracy claims for now. Cloudflare hasn't published independent accuracy rates, false-positive data by user group, or accessibility testing results. The FP-Agent paper got near-perfect classification on seven agents in a controlled lab with 56 students and fixed software versions—that doesn't translate to production. Precursor also only addresses runtime behavior consistency. It doesn't touch agent identity, user delegation, or what an agent is authorized to do.
HKR breakdown
hook ✓knowledge ✓resonance ✓