Cloudflare has joined forces with the developers of Google Chrome, Microsoft Edge, and Mozilla Firefox to create a new system that helps websites distinguish legitimate visitors from unwanted traffic without compromising user privacy.
Cloudflare directly announced this partnership on its official News page.

The company’s CTO, Dane Knecht, explained that existing tools are too generic for the current traffic abuse problems. The CTO at Mozilla, Bobby Holley, also supported this move, noting that automated traffic pushes websites towards blunt defense moves such as paywalls.

The system they’ve developed to combat these issues is called “Private Access Control Tokens” (PACTs). It allows trusted websites to issue anonymous digital tokens. Users can present these tokens to other websites. This reduces the need for repeated CAPTCHA and other methods of human verification that users find annoying.
This move also addresses the problem of AI-powered agents scraping data from a website without authorization. Traditional security tools often don’t work very well for this, since they have a tendency to block legitimate traffic or force real users to perform cumbersome verification steps.
PACTs solve this problem by letting websites quickly verify the legitimacy of the user. Since the tokens used for verification are anonymous, it’s also a private system.
While the technical details of this collaboration are still being finalized, the basic concept is that websites with strong confidence in the legitimacy of a user issue tokens (PACTs), and other sites accept these tokens.
Once the work on this project is complete, it’s a positive for both sides. Users don’t have to go through hoops just to visit a website. Website owners don’t have to worry about automation abuse.
However, the folks at The Register (who reported on this earlier) have cautioned that unfinished implementation might create new barriers. If users are still denied access despite being legitimate, the entire system’s worth becomes questionable. Additionally, they also claim that the security benefits might be overstated in the original report.
The real-world impact of this project depends on how Cloudflare implements the new system of verification going forward without running into issues.
Disclaimer: The Featured image was generated with AI.