How does Themerella detect Cloudflare Turnstile?
Themerella reads public evidence such as challenges.cloudflare.com/turnstile resource urls, then reports the match with a confidence level.
Technology
Cloudflare Turnstile detection
Category: Security / Bot Protection. Themerella detects this technology from public website evidence and shows confidence in the report.
Definition
What is Cloudflare Turnstile?
Cloudflare Turnstile is a CAPTCHA-alternative bot-protection widget that verifies visitors without intrusive puzzles, typically on forms and logins.
Detection evidence
How Themerella detects Cloudflare Turnstile
- challenges.cloudflare.com/turnstile resource URLs
- cf-turnstile markup or classes
- Turnstile runtime markers when rendered scanning is enabled
Report value
Every detected technology should include category, confidence, evidence, and practical risk/context so the result is useful beyond logo recognition.
False-positive boundary
What to verify before acting on Cloudflare Turnstile evidence
- Turnstile can load only on protected forms or high-risk sessions.
- Cloudflare edge evidence alone does not prove Turnstile is used on the page.
Next workflow
- Confirm Turnstile evidence on forms and authentication pages.
- Review Cloudflare, CSP, and accessibility findings together.
- Monitor protected pages for bot-protection drift.
FAQ
Common questions
Can Cloudflare Turnstile detection be a false positive?
Yes. Turnstile can load only on protected forms or high-risk sessions. Themerella reports detection as public evidence with a confidence level, not a guaranteed inventory.
What category does Cloudflare Turnstile fall under?
Cloudflare Turnstile is detected as a Security / Bot Protection technology and grouped with related signals in the Themerella report.
Is the Cloudflare Turnstile detector free?
Yes. Enter any public website URL, run the scan, and review the technology evidence and confidence before any paid monitoring or API layer.
Related technologies