Cloudflare Precursor adds continuous behavioral bot detection between checkpoints

Category: Infrastructure
Status: confirmed
Sources: Cloudflare blog, HN 48893446
Summary: Cloudflare announced Precursor on 2026-07-13, a session-scoped validation layer that injects JavaScript to collect mouse, keyboard, and pointer signals continuously and score human-versus-bot behavior between discrete checkpoints such as login, signup, and checkout. It is part of Bot Management and Turnstile, enabled from the dashboard, free during a beta rolling out now, with general availability planned later in 2026. Cloudflare states it captures timing and rhythm rather than keystroke content and persists signatures across page refreshes.
Why it matters: It extends bot detection from single challenge points to whole sessions, raising the cost of automated abuse while adding always-on client-side behavioral instrumentation.