Cloudflare adds personal agent analytics and site access controls
Tech

Cloudflare adds personal agent analytics and site access controls

TechNews Editorial
TechNews EditorialNov 4, 2026 · 1 min read
Share

Why it matters

Cloudflare says the new views and policies let site owners assess personal agent traffic and choose access rules for supported agents.

The facts

  • Cloudflare has launched analytics showing which personal agents visit a site and what they request.
  • Site owners can set separate access policies for supported personal agents, including blocking them on pages with ads.
  • Account Abuse Protection, in early access, links agent activity to user accounts.

Advertisement

Cloudflare has launched analytics that show site owners which personal agents visit their websites, alongside controls for deciding which supported agents can access them. Personal agents act on a person’s instructions to do things such as find information or complete a purchase.

In Security Analytics, a new Personal Assistants category lets teams isolate agent traffic over time. A new widget shows which agents visit a site and how many requests each sends. Filtering by agent also shows the paths it requests, the status codes it receives and the networks it uses, according to Cloudflare.

Account views link agents to users

For sites using Account Abuse Protection, which is in early access, Cloudflare says account views now show which agents act for each user. Login and sign-up events identify requests made by personal agents. Fraud teams can filter accounts by AI assistant activity and apply a web application firewall rule to a hashed user ID if they need to restrict one account.

Site owners can set policies by agent

Cloudflare has also expanded its Agents access policy. Site owners can set an overall policy and then choose a different one for each supported personal agent: allow it, block it on pages with ads, or block it entirely. Existing Search and Training policies stay as they are.

A fraud investigator presses a red security lock tag onto a modular server bay to restrict an abusive account.
Illustration: AI & Tech News

The setting is now called AI Crawler and Agent access policies. Cloudflare says the same choices appear when a site owner adds a new zone. During onboarding, it asks whether the site earns money from ads and uses the answer to recommend policies.

Cloudflare says it plans to work with agent operators and others on ways to pass user context through agents, assess reputation and establish accountability. It has not given a date for that work. Site owners can review the new analytics and set agent policies in Security Settings now; Account Abuse Protection remains in early access.

What this means

On October 27, 2026, IBM released Agent Identity and Vault 2.2 to track AI agents and limit their access to business systems. Under Cloudflare's update, Security Analytics allows teams to filter personal agent traffic by requested paths, status codes, and networks used, while fraud teams can apply web application firewall rules to hashed user IDs. Cloudflare further stated it plans to collaborate with agent operators to pass user context, assess reputation, and establish accountability, though it has not scheduled a date for that work.

Source: Cloudflare

Newsletter

Get the best AI & tech news daily

A concise daily digest. Unsubscribe anytime.

We use your email only to send this newsletter.

Keep reading