Cloudflare uses two main techniques to detect bots: passive and active detection methods.
Passive detection methods employ backend analyses to detect suspicious activities. They include TLS and HTTP/2 fingerprinting, IP reputation, and more. Active methods use client-side analyses, such as CAPTCHAs, JavaScript challenges, event tracking, and canvas fingerprinting.