What did Cloudflare announce on November 4, 2026?
Cloudflare now offers site owners two things for personal AI agents: separate analytics and a per agent switch. According to the Cloudflare Blog, the new traffic category, the per agent widget and the expanded AI Crawler and Agent access policies let publishers decide, agent by agent, whether a personal assistant can read their pages. For SEO and GEO teams the change is practical rather than symbolic. AI search visibility in 2026 no longer depends only on being crawled and cited. If an agent is blocked on a page, that page drops out of the task for the person the agent works for.
What did Cloudflare announce on November 4, 2026?
Cloudflare launched analytics for personal AI agents plus per agent access policies that let site owners allow or block each supported agent.
Cloudflare published the update on its official blog on November 4, 2026. The release has two halves that reinforce each other. On the reporting side, Cloudflare is launching analytics on how personal agents access sites on behalf of humans. On the policy side, Cloudflare is adding more granular access controls so publishers can act on what those reports show. The existing Agents policy is expanded with per agent controls, and the setting is renamed AI Crawler and Agent access policies.
How do personal agents show up in Cloudflare’s analytics?
Cloudflare’s Bot Analysis chart now lists Personal Assistants as a separate traffic category next to Verified Bot, Likely Human and Automated.
Inside Security Analytics, Personal Assistants appear as a peer of Verified Bot, Likely Human, Likely Automated and Automated. That placement turns a vague worry about assistant traffic into a measurable line in a report. A dedicated widget lists every agent that visits the site and the number of requests each one sends. Filter on a single agent and the other widgets follow, showing the paths it requests, the status codes it receives and the networks it comes from.
What agent access options can publishers choose?
Cloudflare offers three per agent options: Allow, Block on pages with ads and Block, while Search and Training policies keep their current settings.
The structure is layered, and that layering is the part worth memorizing before you touch anything in the dashboard.
| Setting | Scope described by Cloudflare |
|---|---|
| Overall Agents policy | Applies to the site as a whole |
| Per agent policy | Set separately for each supported personal agent |
| Search policy | Unchanged |
| Training policy | Unchanged |
The Cloudflare Blog describes publishers making different calls for the same agent. One publisher may allow a supported personal agent throughout its site so readers can find its articles, while another may block that same agent on pages where ads support the content. During onboarding, Cloudflare asks whether pages are monetized with ads and then tailors the recommended policies to the answer.
Why does per agent access matter for SEO and GEO?
Personal AI agents act for individual users, so a blocked agent cannot read a page during that person’s task even when AI search cites it.
Personal agents sit between a user and a page, and that position is the structural reason this update matters for generative engine optimization. RAG pipelines behind Google AI Overviews, Perplexity and ChatGPT Search still need to fetch a page to summarize or cite it, and an agent that has been blocked cannot complete a task that needs your content. Our reading: a site can be fully indexed, cited and still out of reach for a specific user’s agent, which means crawling and agent access need to be checked as two separate questions. Per agent status codes give the first concrete signal of whether agents can actually finish tasks on your site.
What should publishers do today, and what should they avoid?
Publishers on Cloudflare should open AI Crawler and Agent access policies, review the current Agents setting and read Personal Assistants traffic.
- Open Security Settings, find AI Crawler and Agent access policies, and check what the Agents policy is set to right now.
- Open the Personal Assistants traffic, note which paths agents request and which status codes they receive, and start with errors on revenue and support pages.
- Set access per page type (articles, product, support, checkout) based on how each page earns value.
- Record crawler decisions for search and training separately from personal agent decisions, so changes to one never silently move the other.
- Treat any link between agent access and rankings or AI citations as an untested assumption, not a result.
- Keep the granular controls scoped to supported personal agents, which is how Cloudflare describes them.
- Keep personal agents distinct from search and training crawlers, since Cloudflare manages them as separate policies.
- Quote agent traffic numbers only from your own Security Analytics data.
Frequently Asked Questions
The questions below cover how Cloudflare’s personal agent controls affect publishers, ad supported pages and AI search visibility in 2026.
Can publishers allow one personal agent and block another?
Yes. According to the Cloudflare Blog, site owners set an overall Agents policy and then choose a different policy for each supported personal agent, picking between Allow, Block on pages with ads and Block.
Do these settings change how search and training crawlers are handled?
Search and Training policies stay as they are according to Cloudflare, so the new controls sit next to existing crawler settings rather than replacing them. Review both sets, because they answer different questions about who can read your pages.
Which pages should stay open to personal agents?
Start from how each page earns value. Product, support and checkout pages usually benefit from staying readable so an agent can finish a task, while ad funded articles are the pages publishers most often restrict. Map the decision page by page instead of applying one site wide rule.
How do I know whether an agent can complete a task on my site?
Check the status codes the agent receives, not only the visit count. The per agent widget shows the paths an agent requests and the responses it gets, so error codes on key pages reveal exactly where a user’s task breaks.
What is our reading of Cloudflare’s personal agent controls?
Personal agents add a third access decision beside search and training, and publishers who set policies per page type keep AI visibility intentional in 2026.
We read this as the moment agent access becomes a publishing decision rather than a server setting nobody reviews. It seems likely that teams who separate agent access from crawler access will spot task failures faster than teams working from a single site wide rule. We would expect ad supported articles and transactional pages to diverge first, because they earn value in different ways. Being reachable by a user’s agent may become as routine a checkpoint as indexing itself.
Sources
Related reading
This article was written and published with ChimpanSEO
Write SEO/AEO articles and publish them to WordPress: it usually takes 1-2 minutes. Try it free, no card required.