How to Set Up Bot Protection for Your Job Board?
To reduce unwanted bot traffic, we recommend enabling advanced bot protection features through Cloudflare. This guide walks you through the steps to configure bot protection rules using Cloudflare.
In order to apply any Cloudflare security rules, your domain must be connected to and proxied through Cloudflare. If your domain is not yet behind Cloudflare, please follow the steps in this help guide before proceeding.
This tool blocks known bots from accessing your job board. To enable it, go to Security > Bots in your Cloudflare dashboard and toggle on Bot Fight Mode.
If you want to further enhance bot detection, go to Security > WAF in your Cloudflare dashboard, then click on + Create Rule under the Custom Rules tab.
Rule Name: Provide an internal name for your rule.
Edit Expression: Under Expression Preview, click on Edit Expression in the top-right and paste the following expression:
not (cf.client.bot)
This expression targets traffic that is not from verified bots.
Actions: From the Actions dropdown, choose Managed Challenge.
Deploy the Rule
Once the rule is enabled, suspicious or unverified traffic will be challenged by Cloudflare before it can access your site. Visitors that trigger the rule will see a security verification screen, like the one below, to confirm they are human.
In order to apply any Cloudflare security rules, your domain must be connected to and proxied through Cloudflare. If your domain is not yet behind Cloudflare, please follow the steps in this help guide before proceeding.
Bot Fight Mode
This tool blocks known bots from accessing your job board. To enable it, go to Security > Bots in your Cloudflare dashboard and toggle on Bot Fight Mode.
Advanced: Enable Firewall Protection
If you want to further enhance bot detection, go to Security > WAF in your Cloudflare dashboard, then click on + Create Rule under the Custom Rules tab.
Rule Name: Provide an internal name for your rule.
Edit Expression: Under Expression Preview, click on Edit Expression in the top-right and paste the following expression:
not (cf.client.bot)
This expression targets traffic that is not from verified bots.
Actions: From the Actions dropdown, choose Managed Challenge.
Deploy the Rule
Once the rule is enabled, suspicious or unverified traffic will be challenged by Cloudflare before it can access your site. Visitors that trigger the rule will see a security verification screen, like the one below, to confirm they are human.
Updated on: 13/05/2025
Thank you!