Cloudflare Security & compliance Stability Cost

Browser Integrity Check off

Part of the WAF & rate limiting check · fix arrives as a guide

What it is

Browser Integrity Check is disabled.

Why it matters

It filters requests with headers characteristic of scrapers and abusive bots, at essentially no cost to real browsers. With it off, the cheapest layer of bot filtering is not running.

How to fix it

Re-enable Browser Integrity Check. If a legitimate API client is being caught by it, add a skip rule for that path rather than turning it off for the whole zone.

Run them all on your app

Connect your repo and your live services with read-only scopes. The first scan is free, and nothing changes without your approval.