Cloudflare Browser Run
Run by Cloudflare
How to detect Cloudflare Browser Run
Cloudflare Browser Run signs its requests, so you detect it by verifying the cryptographic signature on each request. A valid signature proves the request came from Cloudflare; a copied user agent without the signature does not.
- Detection method
- SignedThe agent signs its requests, so its identity is verified cryptographically.
- Signals that identify it
- CryptographicA signed request verified cryptographically
- DeviceHeadless or automated browser markers in the device fingerprint
- BehavioralScripted navigation with no human input
Every signal Verisoul checks for Cloudflare Browser Run
Cloudflare Browser Run signs its requests, so we verify who it is cryptographically, then check the rest of the session.
- Used
Cryptographic
A signed request verified cryptographically
- Not used
Network
Not needed to identify it
- Used
Device
Headless or automated browser markers in the device fingerprint
- Used
Behavioral
Scripted navigation with no human input
How often you'll see it
Uncommon
Seen on some sites, in small volumes
More from Cloudflare
- AI SearchAn AI crawler run by Cloudflare that signs its requests.SignedHow common: Very uncommon
- AI Search ExternalAn AI crawler run by Cloudflare that signs its requests.SignedHow common: Very uncommon
- Cloudflare CrawlerAn AI crawler run by Cloudflare that signs its requests.SignedHow common: Very uncommon
- Cloudflare CustomerSLO ProberAn automated service from Cloudflare that signs its requests.SignedHow common: Very uncommon
- Cloudflare CustomerSLO Prober (Staging)An automated service from Cloudflare that signs its requests.SignedHow common: Very uncommon
- Cloudflare Radar URL ScannerAn automated service from Cloudflare that signs its requests.SignedHow common: Very uncommon
Questions about Cloudflare Browser Run
How do you detect Cloudflare Browser Run?
Cloudflare Browser Run signs its requests, so you detect it by verifying the cryptographic signature on each request. A valid signature proves the request came from Cloudflare; a copied user agent without the signature does not.
What is Cloudflare Browser Run?
Cloudflare Browser Run is Headless browsers hosted on Cloudflare's network, used for automation, rendering, scraping and AI agents.
Does Cloudflare Browser Run identify itself?
Yes. Cloudflare Browser Run signs its requests cryptographically, which is the strongest way an agent can identify itself.
Can a bot pretend to be Cloudflare Browser Run?
Not convincingly. A bot can copy Cloudflare Browser Run's user agent, but without Cloudflare signing keys its requests fail verification and it is not labeled Cloudflare Browser Run.
How common is Cloudflare Browser Run?
Uncommon. Seen on some sites, in small volumes.
What does the Verisoul API return for Cloudflare Browser Run?
Every session Verisoul identifies as Cloudflare Browser Run carries an agent block with id "cloudflare_browser_run", name, provider, type "headless_automation", detection_method "signed" and the detection_signals used (cryptographic, device, behavioral). Build rules on the id, type and detection method.