Documentation

Cloudflare Is Blocking Access to Your Site

Learn how Cloudflare's bot protection may be preventing AI assistants from accessing your content.

If you're seeing this page, our crawler detected that Cloudflare is blocking bot access to your site. This affects not just our AI visibility analysis, but also AI assistants like ChatGPT, Claude, and Perplexity.

The Problem: Bot Protection Blocking AI Assistants

Cloudflare's security features are designed to protect your site from malicious bots. However, overly aggressive settings can also block legitimate bots, including:

  • AI assistant crawlers (GPTBot, ClaudeBot, PerplexityBot)
  • Our Spyglasses analysis bot
  • Search engine crawlers
  • SEO monitoring tools

When these bots try to access your site, Cloudflare returns a challenge page instead of your actual content. AI assistants cannot solve these challenges, which means they cannot access or cite your content.

Why This Matters

When AI assistants are blocked by Cloudflare:

  • Your content cannot be cited in ChatGPT, Claude, or Perplexity responses
  • Your brand cannot be recommended when users ask AI for solutions
  • You're invisible in AI-powered search and recommendations
  • Competitors who allow AI access gain a significant visibility advantage

In the age of AI-powered search, blocking AI crawlers is like blocking Google—you're removing yourself from a major discovery channel.

How to Check Your Settings

1. Verify Bot Protection Level

  1. Log into your Cloudflare dashboard
  2. Select your domain
  3. Go to SecurityBots
  4. Check your Bot Fight Mode setting

High or aggressive settings will block AI assistants.

2. Check WAF Rules

  1. Go to SecurityWAF
  2. Review your Custom Rules and Rate Limiting Rules
  3. Look for rules that might be blocking crawlers

Common problematic rules:

  • Blocking all non-browser user agents
  • Very low rate limits (< 10 requests per minute)
  • Challenge or block on "Known Bots"

3. Review Firewall Rules

  1. Go to SecurityFirewall Rules
  2. Look for rules that challenge or block based on:
    • User Agent patterns
    • ASN (Autonomous System Numbers)
    • Country blocking

How to Fix It

Create a Custom Rule to allow verified AI crawlers:

  1. Go to SecurityWAFCustom Rules
  2. Click Create Rule
  3. Set up the rule:
Rule name: Allow AI Assistants
Field: User Agent
Operator: contains
Value: GPTBot OR ClaudeBot OR PerplexityBot OR anthropic-ai OR Spyglasses
Action: Skip → All remaining custom rules
  1. Save and deploy

This allows AI assistants while keeping your other security measures active.

Option 2: Adjust Bot Fight Mode

If you have Bot Fight Mode enabled:

  1. Go to SecurityBots
  2. Change from "Fight" to "Allow Verified Bots"
  3. Save changes

This is less precise but easier to configure.

Option 3: Create Verified Bot Allowlist

For more control:

  1. Go to SecurityWAFCustom Rules
  2. Create a rule for verified bots:
Rule name: Verified Bot Allowlist
Expression: 
  cf.client.bot OR 
  cf.bot_management.verified_bot
Action: Allow

This uses Cloudflare's own bot verification system.

Here are the user agents you should allow:

AI AssistantUser Agent Pattern
ChatGPTGPTBot
ClaudeClaudeBot or anthropic-ai
PerplexityPerplexityBot
Google GeminiGoogle-Extended
Microsoft CopilotBingbot
SpyglassesSpyglasses

Full Allowlist Example

(http.user_agent contains "GPTBot") or 
(http.user_agent contains "ClaudeBot") or 
(http.user_agent contains "anthropic-ai") or 
(http.user_agent contains "PerplexityBot") or 
(http.user_agent contains "Google-Extended") or 
(http.user_agent contains "Bingbot") or
(http.user_agent contains "Spyglasses")

Testing Your Fix

After updating your Cloudflare settings:

1. Test with Curl

curl -A "GPTBot" https://yoursite.com

You should see your page content, not a Cloudflare challenge.

2. Request a New Report

Once you've updated your settings:

  1. Return to Spyglasses AI Visibility Report
  2. Request a new analysis
  3. Our crawler will verify the changes

3. Check Cloudflare Analytics

Monitor your Cloudflare analytics to ensure AI crawlers can access your site:

  1. Go to AnalyticsSecurity
  2. Look for requests from AI crawler user agents
  3. Verify they're not being challenged or blocked

Best Practices

Balance Security and Visibility

  • Do: Allow verified AI crawlers
  • Do: Use rate limiting to prevent abuse
  • Do: Monitor analytics for suspicious patterns
  • Don't: Block all bots indiscriminately
  • Don't: Use overly aggressive challenge modes

Monitor AI Crawler Activity

Set up alerts for AI crawler traffic:

  1. Use Cloudflare's Notifications
  2. Track verified bot traffic patterns
  3. Adjust rules if you see unusual activity

Rate Limiting Guidelines

If you use rate limiting:

  • Allow at least 30 requests per minute for crawlers
  • Use longer time windows (5-10 minutes)
  • Whitelist verified bot user agents

Need More Help?