Cloudflare Precursor: When AI agents use real browsers, bot detection shifts to session-long behavior

Cloudflare Precursor：AI Agent 用上真实浏览器之后，Bot Detection 看什么

Cloudflare launched Precursor on July 13, 2026, a session-level behavior detection system inside Enterprise Bot Management. Instead of relying on browser fingerprints or single-request signals, it continuously collects pointer movement, keystroke timing, focus changes, and page visibility, then cross-checks whether the whole session is internally consistent. The shift matters because Playwright-driven agents now run inside real browsers, making old shortcuts like checking navigator.webdriver unreliable. Precursor injects scripts into HTML responses, compresses event streams, and evaluates them at the edge, updating Bot Score and challenge clearance as behavior changes. Cloudflare states it does not record actual keystrokes or bind signals to user identities. The post also covers the FP-Agent paper, where an XGBoost classifier distinguished seven browser agents in a controlled lab setting, but notes that doesn't translate to production accuracy. Independent accuracy rates, false-positive data by user group, and accessibility testing are not yet public. Official materials conflict on rollout scope. Behavior detection alone doesn't solve agent identity, user delegation, or business authorization—Precursor only addresses runtime risk.

Why it matters: Precursor marks a clear shift in bot detection targets — from 'does the environment look automated' to 'is a human or an agent driving this real browser.' Directly relevant to agent builders and web security folks. Score held at 78 because it's a third-party analysis, not a fi...