最終更新日:2026-08-21 17:47:29
Reading time: About 6 minutes
Prerequisites: The hostname has been onboarded, and the Bot Management master switch is enabled.
Navigation Path: Security Settings > Policies > [Target Hostname] > Bot Management > Bot Tag
Bot Tag Forwarding to Origin lets you send Bot detection results to your origin server through custom HTTP request headers, so the origin can apply its own business logic for secondary risk control.
Use when:
| Tag Type | Description | Forwarded Value | Value Description | Sample Data |
|---|---|---|---|---|
| Custom Bots | Tags the name of the matched Custom Bots policy in the custom HTTP request header. If multiple policies match, the names are separated by semicolons. | Custom Bots policy name | Text, made up of 2 fields separated by a comma: The first field is always the policy type ( Custom Bots);The second field is the Custom Bots policy name (if multiple policies match, separated by semicolons). |
X-Custom-Bots:Custom Bots,name1;Custom Bots,name2 |
| AI Bots | Tags the matched AI Bots policy category in the custom HTTP request header. | AI Assistant AI Search Crawler AI Data Scraper Undocumented AI Agent |
Text, made up of 2 fields separated by a comma: The first field is always the policy type ( AI Bots);The second field is the AI Bots category ( AI Assistant/AI Search Crawler/AI Data Scraper/Undocumented AI Agent). |
X-AI-Bots:AI Bots,AI Assistant |
| Public Bots | Tags the matched Public Bots policy category in the custom HTTP request header. | Search Engines Site Monitor Page Viewer Marketing Analysis Feed Fetcher Practical Tools |
Text, made up of 2 fields separated by a comma: The first field is always the policy type ( Public Bots);The second field is the Public Bots category ( Search Engines/Site Monitor/Page Viewer/Marketing Analysis/Feed Fetcher/Practical Tools). |
X-Public-Bots:Public Bots,Search Engines |
| Bot Score | Tags the matched Bot Score in the custom HTTP request header. | 1–100 | An integer value — the higher the score, the more likely the traffic is a bot. 100: Definite Bots (100% automated) 80–99: Likely Bots (highly likely automated) 2–79: Likely Human (anomalies detected, possibly human) 1: Likely Human (no anomalies detected, highly likely human) |
X-Bot-Score:100 |
| Bot Tag | Tags the matched Bot Tag(s) in the custom HTTP request header. | 1,2,3,4,5,6,7,8,9,10,30,31,32,33,34,35,36,60 | Requests are tagged based on the anomalies detected during the access request. 1: Cloud provider IP 2: Threat-intelligence risk IP 3: Proxy IP 4: Forged User-Agent 5: Outdated browser or OS version 6: Client type in the request header does not match the declared User-Agent 7: Browser request headers severely incomplete 8: Browser request headers partially incomplete 9: Known bot tool/library fingerprint 10: Abnormal browser JA4 fingerprint 30: HTTP library 31: Browser automation testing tool 32: Command-line HTTP request tool 33: Scanning tool 34: Crawler tool 35: Proxy tool 36: Fake spider 60: Abnormal clustered behavior |
X-Bot-Tags:1 |
Note:
- If the Bot Score is 1, no anomalies were detected and there is no corresponding Bot Tag.
- If the Bot Score is between 2 and 99, the corresponding Bot Tags are: 1, 2, 3, 4, 5, 6, 7, 8, 9, 10, 60.
- If the Bot Score is 100, the corresponding Bot Tags are: 30, 31, 32, 33, 34, 35, 36.