November 2, 2026 · Cloudflare
Bots - New Account Abuse Protection Dashboard
Account Abuse Protection customers in Early Access can now investigate login and sign up activity in a dedicated dashboard under Security > Account Abuse Protection.
- Population overview: See total login and sign up events, unique accounts, IPs and devices, top countries and ASNs, and leaked credential check results. Filter accounts by signals such as leaked credential events and unique IPs to find the accounts that need review.
- Individual Account overview: Review a single Hashed User ID's activity, including its top networks, locations and devices, and an event log with the Ray ID for each event. Mitigate the account with a Security Rule on its Hashed User ID.
- New roles: The Account Abuse Protection role grants access to the dashboard. Account Abuse Protection PII role grants access to the dashboard as well as account-level PII, such as email address, and is required to create or edit Logpush jobs that include PII. The dashboard includes all login and sign up events from the date the feature was enabled.
For more information, refer to Account Abuse Protection.
More Bots changes
Per-agent actions for top Personal Agents; setting renamed AI Crawler and Agent access policies
BYOIP destination subrequests now keep Workers context and original client signals
Turnstile widgets now hosted in Mainland China, avoiding cross-border requests for visitors
Adds Monitor mode that leaves bot score unchanged; interstitial now set separately
Enterprise customers can control whether JavaScript Detections API results are used for bot scoring