Web Bot Auth
In short
Web Bot Auth lets you tell a customer's agent from a script that borrows its name. How to tell verified agents from unknown bots goes into the detail. Cloudflare said operators including OpenAI, Google and AWS sign their agents' requests (30 Sep 2026).
Definition
A proposed standard in which an agent signs its requests so a site can check who operates it, rather than trusting the name it claims.
A dated example
- Read 4 Nov 2026
Cloudflare said operators including OpenAI, Google and AWS sign their agents' requests (30 Sep 2026).
Where it matters
It lets you tell a customer's agent from a script that borrows its name.
Related terms
- Verified botA bot whose operator has proven its identity to your CDN or bot vendor, through signatures, published IP ranges or a directory.
- User agentThe name a browser or bot gives itself with each request.
Sources
- Cloudflare: The Internet has a second audience (30 Sep 2026) (blog.cloudflare.com/agentic-web), read 4 Nov 2026.
Last reviewed