Skip to main content

Boteraser | Website and Server Security Solutions

CloudflareBrowserRenderingCrawler

Crawler User-Agent: cloudflarebrowserrenderingcrawler

🤖 Overview

CloudflareBrowserRenderingCrawler is the User-Agent identifier for outbound HTTP requests generated by Cloudflare Browser Rendering, the headless Chrome service bundled with Cloudflare Workers and documented at developers.cloudflare.com/browser-rendering/. It is not a Cloudflare-owned indexer: each request exists because a Cloudflare customer called the /crawl endpoint, the /scrape endpoint, or drove Puppeteer/Playwright bindings, and retrieved pages are returned to that customer's Workers script.

🌐 Technical Behavior

Browser Rendering executes real headless Chrome instances inside Cloudflare's edge, so requests carry full browser characteristics — TLS fingerprints, HTTP/2 or HTTP/3 negotiation, and JavaScript execution — rather than the simple GET pattern of a text crawler. The /crawl endpoint accepts a starting URL plus depth, limit, and format parameters, then fetches same-origin pages concurrently; Cloudflare documents tunable concurrency and page limits per job. Because one job can expand to hundreds of URLs, observed request rates are bursty and page-correlated instead of evenly spaced. Egress source addresses belong to Cloudflare's network, not the requesting customer, so target origins see shared Cloudflare IP space; that space also carries other Cloudflare services, making reverse DNS verification and static allow-listing unreliable identifiers.

📋 robots.txt Compliance

Compliance is a customer-side responsibility rather than a platform-enforced control: Cloudflare does not document an automatic Disallow parser inside Browser Rendering, so an aggressive integration can legitimately request paths a site has disallowed.

🔍 Detection Indicators

The published User-Agent contains CloudflareBrowserRenderingCrawler, which Cloudflare exposes so operators can separate customer-initiated render jobs from Cloudflare's own crawlers. Behavioral fingerprints include bursts of same-origin HTML requests with dependent subresources, full Chrome client hints, JavaScript and font loading, and no referrer chain — signatures of genuine browser rendering rather than a text-only fetch. Rate analytics flagging one client fingerprint pulling dozens of distinct URLs per second are a reliable secondary signal.

📊 Data Usage

Fetched content flows back to the requesting customer, who uses it for retrieval-augmented generation context, structured extraction through the Workers AI-powered /json endpoint, uptime and price monitoring, and private search indexes. Cloudflare positions Browser Rendering as a customer-controlled tool, so retention, storage, and downstream AI training decisions sit with the customer's Workers application.

<

🛡️

Stop Bots. Save Bandwidth. Protect Revenue.

Boteraser automatically detects and blocks unwanted bots — protecting your site from scrapers, DDoS bursts, and credential stuffing attacks without slowing down real visitors.

✅ Start Free Protection

Setup takes under a minute  ·  Free trial available

ⓘ Data Notice: The information presented above has been compiled from publicly available internet sources. Boteraser aggregates this data solely for informational purposes and does not independently classify, evaluate, or endorse any findings about the bots listed. The accuracy and completeness of this information is the sole responsibility of the original publishers. Boteraser and its operators accept no liability for any decisions made based on this data.

✓