Get started with Super Bot Fight Mode (Pro)
Super Bot Fight Mode is included in your Pro subscription. When enabled, the product:
- Identifies traffic matching patterns of known bots
- Can challenge or block bots
- Offers protection for static resources
- Provides limited analytics to help you understand bot traffic
Enable Super Bot Fight Mode
To start using Super Bot Fight Mode:
- Log in to the Cloudflare dashboard and select your account and domain.
- Go to Security > Bots.
- Click Configure Super Bot Fight Mode.
- Choose how your domain should respond to various types of traffic:
- For more details on verified bots, refer to Verified Bots.
- For more details on supported file types, refer to Static resource protection
- For more details on invisible code injection, refer to JavaScript detections.
In parts of your site where you want bot traffic, you can use the Skip action in Custom Rules to specify where Super Bot Fight Mode should not run.
To enable the Skip action in Custom Rules, refer to the WAF documentation. Skip rules are only available to customers who have migrated from Firewall Rules to Custom Rules.
Disable Super Bot Fight Mode
If you find that Super Bot Fight Mode is causing problems with your application traffic, you may want to disable it.
To disable Super Bot Fight Mode:
- Log in to the Cloudflare dashboard and select your account and domain.
- Go to Security > Bots.
- Click Configure Super Bot Fight Mode.
- For all bot groupings (Definitely automated, Verified bots, etc.), set the value to Allow.
- For all other options (Static resource protection, JavaScript Detections), make sure the toggles are Off.
In parts of your site where you want bot traffic, you can use the Skip action in Custom Rules to specify where Super Bot Fight Mode should not run.
To enable the Skip action in Custom Rules, refer to the WAF documentation. Skip rules are only available to customers who have migrated from Firewall Rules to Custom Rules.
Analytics
Bot Report
Use the Bot Report to monitor bot traffic for the past 24 hours.
To access the Bot Report, go to Security > Bots. If you see a double-digit percentage of automated traffic, you may want to upgrade to Bot Management to save money on origin costs and protect your domain from large-scale attacks.
Security events
You can see bot-related actions by going to Security > Events. Any requests challenged by this product will be labeled Super Bot Fight Mode in the Service field. This allows you to observe, analyze, and follow trends in your bot traffic over time.
Ruleset Engine
Super Bot Fight Mode runs during thehttp_request_sbfm phase of the Ruleset Engine.