buildOne report1 publisher Cloudflare starts measuring Verified bots against robots.txt and 429 responses over time
Cloudflare has introduced a system that scores Verified bots on robots.txt compliance and on whether they slow down after an HTTP 429. It reports the result as a trust band, and Cloudflare says it will share scores on Radar later.
Reality
- Evidence35
- Adoption10
- Hype gap+10
- Incentives60
- Confidence65
buildOne report1 publisher Propaganda trackers saw no dip when Yandex's automated traffic fell about 94%
Cloudflare Radar shows Yandex's automated traffic fell sharply after the strikes, but researchers saw no matching drop in known propaganda networks. Cloudflare counts crawlers, scanners and malware as bots, so the dip cannot be read as a count of political accounts.
Reality
- Evidence58
- Adoption70
- Hype gap+65
- Incentives
- Not scored
- Confidence50
buildOne report1 publisher One site's Next.js logs show OpenAI's crawlers running JavaScript from September 25
OAI-SearchBot and GPTBot began rendering JavaScript on September 25, 2026, according to IP-verified logs from a Japanese Next.js marketplace. OpenAI has not announced it, so the case rests on prefetch URLs that only a JavaScript run can produce.
Reality
- Evidence45
- Adoption
- Not scored
- Hype gap+15
- Incentives30
- Confidence40
buildOne report1 publisher AI-agent requests on Cloudflare's network grew more than 1,700% in a year
Cloudflare says AI-agent requests on its network grew more than 1,700% in a year as non-human traffic passed half the total. It now wants sites to identify and price agents as customers, after advising last year that new domains block AI training crawlers.
Reality
- Evidence35
- Adoption50
- Hype gap+25
- Incentives85
- Confidence40
buildOne report1 publisher Cloudflare's new AI training opt-out is backed by network-level enforcement Apple, Google and Microsoft have agreed to honor
Fewer than 1% of Cloudflare sites block search crawlers while 17% block training. A single mixed-use crawler used to collapse those two into one decision, and the new setting splits it for three named operators.
Reality
- Evidence55
- Adoption35
- Hype gap+20
- Incentives70
- Confidence60
buildOne report1 publisher HTTP/2 gives a lossy mobile link one TCP connection to stall instead of six
A dev.to guide walks Laravel apps from HTTP/1.1 to HTTP/3 on nginx, and the part worth reading twice is its admission that the middle step can hurt, because one connection carrying 40 streams stalls on one lost packet.
Reality
- Evidence62
- Adoption75
- Hype gap+5
- Incentives50
- Confidence66
buildOne report1 publisher Cloudflare splits search from training by publishing a no-training line in your robots.txt
Cloudflare's Disallow AI Training control lets Googlebot and Applebot keep indexing a site while a directive Cloudflare writes into robots.txt tells them not to train on it. Bingbot is expected to honor it in early 2027.
Reality
- Evidence30
- Adoption25
- Hype gap+25
- Incentives70
- Confidence35
Raptor Train burns through roughly 3,500 consumer devices a day to hold 60,000 online
Black Lotus Labs assesses the botnet as Chinese state work under Flax Typhoon, assembled from SOHO routers, NVRs, NAS boxes and IP cameras whose 17-day average lifespan makes the infrastructure disposable by design.
Publishers:lumen.com
Reality
- Evidence58
- Adoption62
- Hype gap+15
- Incentives68
- Confidence57
buildOne report1 publisher Stringifying toDataURL is one of several cheap anti-detect browser checks a buyer can run
CHEQ and Cloudflare both published their detection methods this year. Read next to the anti-detect vendor blogs, they show that a buyer outside the vendor can falsify about two things and has to take the rest on trust.
Reality
- Evidence47
- Adoption38
- Hype gap+8
- Incentives74
- Confidence52
buildOne report1 publisher Cloudflare attaches a status and a rejection reason to every BotBase submission
The bot submission form moves into Application Security and grows a history tab, which means the entry describing your crawler becomes a record you are expected to keep matching your traffic rather than a form you filed once.
Reality
- Evidence47
- Adoption20
- Hype gap+12
- Incentives72
- Confidence56
buildConfirmed2 publishers Bot Preference Sync writes Cloudflare's AI bot settings into your robots.txt from the Free tier up. The file becomes a rendering of dashboard state, and Cloudflare's bot database decides what it says.
Reality
- Evidence55
- Adoption22
- Hype gap+12
- Incentives78
- Confidence58
buildOne report1 publisher Route leak prevention moves into the protocol, and two Tier-1s are stripping the signal
Cloudflare says its RFC 9234 tracking found two large Tier-1 networks removing the Only to Customer attribute from routes they forward, blanking the leak signal for everyone behind them.
Reality
- Evidence55
- Adoption25
- Hype gap+12
- Incentives55
- Confidence50