Cloudflare just shipped Precursor, and it effectively kills the oldest trick in web scraping.
It stops judging just the landing request and starts scoring the whole session behaviourally like mouse arcs, keystroke timing, human hand tremors.
The bot score now follows the session. Refreshing, rotating identity, and starting over doesn't reset a thing.
Proxy rotation and header fuzzing were built for a world where the unit of detection was a single request. Whereas now, the defenders are looking at 5-minute behavioural coherence.
The real question isn't whether detection evolves. It's whether your stack is still thinking in requests.
Top comments (1)
Some comments may only be visible to logged-in visitors. Sign in to view all comments.