cyber.hendryadrian.com
Security News · blog.cloudflare.com

Cloudflare Adds Personal-Agent Analytics and Granular Access Controls

· Original article ↗

Summary

Cloudflare announced analytics to identify personal-agent traffic and controls to allow or block supported agents. Account Abuse Protection users can associate agents with accounts and investigate suspicious logins.

Key points

  • Cloudflare added a Personal Assistants category to Security Analytics and a widget listing visiting agents and their request counts.
  • Site owners can filter agent traffic to inspect requested paths, response status codes, and network sources.
  • For Account Abuse Protection, currently in early access, site owners and fraud teams can see which agents are associated with users and login or sign-up activity.
  • Fraud analysts can mitigate a suspicious account with a WAF rule on its Hashed User ID without blocking the agent for other users.
  • The renamed AI Crawler and Agent access policies setting allows overall and per-agent choices: Allow, Block on pages with ads, or Block.

Article Details

Event Type
Cloudflare launched analytics and granular access policies for personal agents.
Impact
Site owners can identify personal-agent traffic, review its activity and account associations, and allow or block supported agents with more granular policies. Fraud teams can investigate unusual agent-related logins and mitigate an affected account without blocking the agent for other users.

Vendors

Cloudflareis behind a request turns unexplained automated traffic into traffic you can act on with confidence. Cloudflare maintains the largest verified bot directory in the world, and we are now bringing that intelligence

Products

Account Abuse Protectionvisit your site and how many requests each sends.For sites that protect user accounts with Account Abuse Protection (currently in early access), site owners and fraud teams are able to see which user each agentSecurity Analyticsbot directory in the world, and we are now bringing that intelligence into your traffic details. In Security Analytics, the Bot Analysis chart now shows Personal Assistants as a new category, next to Verified Bot,WAFIf it looks like an attacker is using an agent on an account, fraud analysts can mitigate that account directly, with a WAF rule on its Hashed User ID, without blocking the agent for everyone else who relies on it.

Related Articles