What Cloudflare's new AI defaults mean for you

In short

Cloudflare changed what AI bot controls exist and what is on by default in 2026. Since 1 July every plan can block Search, Agent and Training traffic separately. From 15 September new domains block Training and Agent bots on pages with ads, and a Disallow AI Training setting keeps search while refusing training. Check your own settings.

What to check

  1. Which zone settings exist for Search, Agent and Training traffic, and whether each is allowed, blocked on pages with ads or blocked everywhere.
  2. Whether the domain was added after 15 September 2026. If so, the new defaults may be on and nobody chose them.
  3. Whether Bot Preference Sync is writing your choices into robots.txt, so the stated preference and the enforced rule match.
  4. Whether the Disallow AI Training setting matches the position you decided in which AI bots to let in.

If your site runs elsewhere, ask your host or CDN the same four questions in its own words.

What the evidence says

Explain the July and September 2026 Cloudflare changes to a leader whose site runs on Cloudflare.

Sources

  1. Cloudflare: The Internet has a second audience (30 Sep 2026) (blog.cloudflare.com/agentic-web), read 4 Nov 2026.
  2. Cloudflare: Disallow AI Training, Accountable crawlers (15 Sep 2026) (blog.cloudflare.com/accountable-mixed-use-ai-crawlers), read 4 Nov 2026.
  3. Cloudflare: Bot Preference Sync (21 Aug 2026) (blog.cloudflare.com/bot-preference-sync), read 4 Nov 2026.
  4. Cloudflare changelog: New options to manage AI traffic (1 Jul 2026) (developers.cloudflare.com/changelog/post/2026-07-01-ai-traffic-options), read 4 Nov 2026.

Last reviewed