Agents can now set up your website’s security with Turnstile Spin
Cloudflare's Turnstile Spin lets coding agents install and repair its bot-protection widget.
Cloudflare launched Turnstile Spin, an agent-guided workflow that creates a Turnstile widget, embeds it in frontend code, and wires the Siteverify API into the backend. Spin can also fix widgets that served traffic without server-side validation and migrate sites off other CAPTCHA providers, using agents such as Claude Code, Cursor, or Codex. The agent edits the local codebase after approval and does not send application code to Cloudflare. Since a July release, Cloudflare recorded more than 65,000 successful Spin widget creations; Turnstile handles about three billion verifications on a typical weekday.
- Spin installs the Turnstile widget and the Siteverify check via a coding agent.
- It can repair widgets missing backend validation and migrate other CAPTCHAs.
- Application code stays local; Cloudflare only creates the widget.
- More than 65,000 Spin widgets were created since the July release.
- Vendors
- Cloudflare
- Products
- TurnstileTurnstile SpinWrangler
- Organizations
- Cloudflare
From the original article
4 min read at blog.cloudflare.com
Misconfiguring Turnstile by skipping backend validation leaves sites exposed to bots. Turnstile Spin fixes incomplete setups by using your preferred AI coding agent to wire up server-side verification.
By Jules Lemee · blog.cloudflare.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.