# What changes when Cloudflare lists an AI agent Cloudflare listed our agent as a signed agent on 24 Oct 2026. We tested what that changes on our own site, and we're driving again the 11 products that stopped it at a Cloudflare challenge. First edition 24 Oct 2026 · updated 24 Oct 2026 · driven again: 4 so far, 11 queued · Source: https://agentdrives.com/research/signed-agent-cloudflare?via=md · CC BY 4.0 ## On our own site, the rule decides Our test on agentdrives.com (Free plan), 24 Oct 2026, 19:26–19:28 UTC: 3 challenge rules, 4 kinds of visitor, 13 requests. Bot Fight Mode and the AI bot policies were off, so only these rules acted. | Rule | Challenged when | Our agent, signed | Unsigned, our user agent | Unsigned, a Chrome user agent | Cloudflare Browser Rendering | |---|---|---|---|---|---| | Challenge everyone | Every request | Challenged | Challenged | Challenged | Challenged | | Challenge all but known bots and agents | `not cf.client.bot` | Through | Challenged | Challenged | Through | | Challenge all but AI assistants | `cf.verified_bot_category ne "AI Assistant"` | Through | Challenged | Challenged | Through | An unsigned request from the same IPv4 address as our signed ones was challenged by “Challenge all but known bots and agents”. The signature got our agent through, not its address or its user agent. Cloudflare logged every signed request as “AI Assistant”, the challenged one too. ## The products we're driving again 4 driven again so far, with 11 queued. This note updates as the rest come in. - [ActiveCampaign](https://agentdrives.com/tools/activecampaign.md?via=md): before 6 Oct 2026, L1, stopped at sign-up; after 24 Oct 2026, L1, stopped at sign-up; a signed agent's visit (24 Oct 2026): The sign-up page opens. The check on the form still applies. - [beehiiv](https://agentdrives.com/tools/beehiiv.md?via=md): before 6 Oct 2026, L1, stopped at sign-up; after 24 Oct 2026, L1, stopped at sign-up; a signed agent's visit (24 Oct 2026): The sign-up page opens. - [Canva](https://agentdrives.com/tools/canva.md?via=md): before 16 Oct 2026, L1, stopped at sign-up; after not driven again yet; a signed agent's visit (24 Oct 2026): The sign-up page opens. - [Freshdesk](https://agentdrives.com/tools/freshdesk.md?via=md): before 6 Oct 2026, L1, stopped at sign-up; after not driven again yet; a signed agent's visit (24 Oct 2026): The sign-up page opens. - [Kit](https://agentdrives.com/tools/kit.md?via=md): before 6 Oct 2026, L1, stopped at sign-up; after not driven again yet; a signed agent's visit (24 Oct 2026): The sign-up page opens. The check on the form still applies. - [Later](https://agentdrives.com/tools/later.md?via=md): before 6 Oct 2026, L0, stopped at sign-up; after 24 Oct 2026, L0, stopped at key; a signed agent's visit (24 Oct 2026): The site opens. The check on the form still applies. - [Make](https://agentdrives.com/tools/make.md?via=md): before 6 Oct 2026, L1, stopped at sign-up; after not driven again yet; a signed agent's visit (24 Oct 2026): The sign-up page opens. The check on the form still applies. - [Memos](https://agentdrives.com/tools/usememos.md?via=md): before 23 Oct 2026, L1, stopped at sign-up; after not driven again yet; a signed agent's visit (24 Oct 2026): The sign-up page opens. - [Perplexity API](https://agentdrives.com/tools/perplexity.md?via=md): before 6 Oct 2026, L1, stopped at sign-up; after not driven again yet; a signed agent's visit (24 Oct 2026): The site opens. The check on the form still applies. - [Plain](https://agentdrives.com/tools/plain.md?via=md): before 6 Oct 2026, L1, stopped at sign-up; after not driven again yet; a signed agent's visit (24 Oct 2026): Not checked: its robots.txt asks crawlers to stay off the sign-up page. - [Wrike](https://agentdrives.com/tools/wrike.md?via=md): before 6 Oct 2026, L1, stopped at sign-up; after 24 Oct 2026, L1, stopped at sign-up; a signed agent's visit (24 Oct 2026): Stopped by a check before the sign-up page. ## What the new drives show so far 1 got further than before, out of 4 driven again. - ActiveCampaign: stopped at sign-up on 6 Oct 2026 (L1). On 24 Oct 2026 it stopped at sign-up again (L1). - beehiiv: stopped at sign-up on 6 Oct 2026 (L1). On 24 Oct 2026 it stopped at sign-up again (L1). - Later: stopped at sign-up on 6 Oct 2026 (L0). On 24 Oct 2026 it got further: stopped at key (L0). - Wrike: stopped at sign-up on 6 Oct 2026 (L1). On 24 Oct 2026 it stopped at sign-up again (L1). - Wrike's sign-up request page, 24 Oct 2026: signed, 403, cf-mitigated: challenge; unsigned, 403, cf-mitigated: challenge. The same answer either way. ## What a site owner can change - Challenge only when `not cf.client.bot`: that lets in every bot and agent Cloudflare knows. Our agent got through this rule. - Challenge only when `cf.verified_bot_category ne "AI Assistant"`: that lets in only the agents Cloudflare files as AI assistants. Our agent got through this rule. - Cloudflare counts signed agents as verified bots: since 2026-07-01, with a Direct or Intermediary label. Source: https://developers.cloudflare.com/bots/concepts/bot/verified-bots/index.md - The settings for each bot-check vendor: https://agentdrives.com/guides/let-signed-agents-past-your-bot-check.md?via=md · Web Bot Auth: https://agentdrives.com/standards/web-bot-auth · Bot checks: https://agentdrives.com/walls/bot-checks - Signed and unsigned at every product we list: https://agentdrives.com/research/signed-vs-unsigned-agents.md?via=md ## Method and limits - Each cell was sent once, from one server. - None of our clients tried to solve a challenge. - Bot Fight Mode, Super Bot Fight Mode and the AI bot policies were not tested. - The results cover one test site and the products driven again so far; other Cloudflare customers set their own rules. ## Updates - 24 Oct 2026: First edition: our test on our own site, and the first re-drive (Wrike).