Cloudflare Docs
Bots
Edit this page on GitHub
Set theme to dark (⇧+D)

Get started with Super Bot Fight Mode (Business)

Super Bot Fight Mode is included in your Business or Enterprise subscription. When enabled, the product:

  • Identifies traffic matching patterns of known bots and likely bots
  • Can challenge or block bots
  • Offers protection for static resources
  • Provides robust analytics to help you understand bot traffic

​​ Enable Super Bot Fight Mode

To start using Super Bot Fight Mode:

  1. Log in to the Cloudflare dashboard and select your account and domain.
  2. Go to Security > Bots.
  3. Click Configure Super Bot Fight Mode.
  4. Choose how your domain should respond to various types of traffic:

In parts of your site where you want bot traffic, you can use the Skip action in WAF custom rules to specify where Super Bot Fight Mode should not run.

You can use the Rules language and its operators and fields in custom rules to configure a scoped rule for approved automated traffic in Super Bot Fight Mode.

​​ Disable Super Bot Fight Mode

If you find that Super Bot Fight Mode is causing problems with your application traffic, you may want to disable it.

To disable Super Bot Fight Mode:

  1. Log in to the Cloudflare dashboard and select your account and domain.
  2. Go to Security > Bots.
  3. Click Configure Super Bot Fight Mode.
  4. For all bot groupings (Definitely automated, Verified bots, etc.), set the value to Allow.
  5. For all other options (Static resource protection, JavaScript Detections), make sure the toggles are Off.

In parts of your site where you want bot traffic, you can use the Skip action in WAF custom rules to specify where Super Bot Fight Mode should not run.

You can use the Rules language and its operators and fields in custom rules to configure a scoped rule for approved automated traffic in Super Bot Fight Mode.

​​ Analytics

For more on analytics, see Bot Analytics.

​​ Ruleset Engine

Super Bot Fight Mode runs during the http_request_sbfm phase of the Ruleset Engine.