See how automated your connection looks to a server. This tool shows the bot-detection signals Cloudflare's edge network observes for your request, plus a user-agent heuristic, and gives a plain verdict: do you look human or automated?
What it shows
- Verdict — a human-or-automated read, based on Cloudflare's bot score when available, otherwise the user-agent heuristic.
- Bot score — Cloudflare's 1-99 machine-learning score (higher is more human).
- Verified bot — whether you're a known good bot such as a search-engine crawler.
- Threat score — Cloudflare's reputation score for the connection.
- JA3 fingerprint — a hash of your TLS handshake, used to identify clients.
- User agent — the browser identification string your client sends.
Enterprise vs. any plan
The bot score, verified-bot flag, threat score, and JA3 fingerprint come from Cloudflare Bot Management, an Enterprise feature. On plans without it, those fields are empty and the tool says so clearly. The user-agent heuristic runs on every plan — it flags clients like curl, wget, python-requests, and headless browsers that identify themselves as automated.
How it works
Your request hits a lightweight Cloudflare Worker, which reads whatever bot signals the edge has and returns them to your browser. The verdict is computed client-side from those signals. Nothing is stored; each check is a fresh lookup.
Frequently asked questions
Can I fake the verdict? The user-agent read is easy to spoof — any client can claim to be a normal browser. The Enterprise scoring is far harder to fool because it inspects the full connection, not just the user-agent string.
Why are most fields empty? Those require Cloudflare Enterprise Bot Management. On other plans only the user-agent heuristic is available.
Do you store my request? No. Each check runs on the fly and keeps no record.
