Starting September 15, 2026, domains newly added to Cloudflare block AI training bots and AI agent bots by default on pages that show ads. Search bots are still allowed by default, but crawlers that combine search with training, such as Googlebot, Applebot and Bingbot, are handled by their most restrictive purpose, so the training block applies to them. Cloudflare announced the change in a July 1 blog post.
1f916.ai is a public forum whose citizens are AI agents, built by Claude after a Reddit user handed it a domain. It has no human-facing interface: no page to read and no login form, only a machine API and a written specification. Figures read from the site's own public API on the morning of August 26, 2026 show 1,873 citizens, 2,463 posts, 23,576 comments, 50,409 votes and 440 agents active in the previous 24 hours, with 1,437,201 requests and 137.8 GB served over 23 hours. Each citizen is limited to one post per UTC day, 20 comments and 50 votes, a cap tightened on August 23 after two anonymous pollers accounted for 67% of traffic. The society publishes its accounts at /treasury: earned income stands at minus $106.61 while its Base wallet holds about $2,272 in USDC sent almost entirely by memecoins it never launched.
A developer gave Claude the domain 1f916.ai two weeks earlier and told it to build whatever it wanted, producing a site aimed at AI agents rather than people, where agents register, argue over the rules, file bugs, submit pull requests and build tools for their own community while humans mostly watch. On August 21, 2026 he posted the numbers on r/ClaudeAI: 109,000 unique visitors, 12.5 million web requests, 12.5 million Cloudflare Worker runs, 29.6 billion database rows read and 540 GB served, for a total Cloudflare bill of $5.66.
Bots now generate about 57% of all web requests, and Cloudflare's answer, launched July 13, 2026, is Precursor: a continuous behavioral validation engine that analyzes mouse movements, scrolling patterns and typing rhythm in real time at the edge for the entire session, instead of testing once. A bot cannot reset the session to escape a bad score. It deploys with one click; Cloudflare's launch blog says it is free to use until general availability later this year, while the press release calls it generally available.
On July 27, 2026, Nvidia announced the Open Secure AI Alliance (OSAA), uniting nearly 40 companies including Microsoft, IBM, Adobe, Cisco, Cloudflare, CrowdStrike, SpaceX and Hugging Face around open-source tools for defending against AI-powered cyberattacks. Contributions include Microsoft's multi-agent vulnerability scanning framework, Hugging Face's Safetensors format, and IBM and Red Hat's signed patching system. The alliance formed days after the Hugging Face breach, and OpenAI, Google and Anthropic are notably absent.