Cloudflare’s AI Bot Blocking Plan Gets Google & Shopify Backing

Google, Shopify, and major browser developers are throwing their weight behind a new PACT protocol deployed “on Cloudflare’s network” to police and restrict AI bot access to web content. The coalition’s goal is to give publishers and platforms a standardized way to signal which automated agents are welcome and which should be blocked, addressing growing concerns over unauthorized data scraping and content harvesting.

The initiative marks a significant shift in how the web manages AI bot traffic. Rather than relying on fragmented, site-by-site rules, the PACT protocol creates a unified gatekeeping layer that participating networks can enforce at scale. This means that when an AI crawler attempts to access a site behind Cloudflare, the network can check the bot’s credentials against PACT’s shared policies and either allow or deny entry instantly.

For publishers, this could be a game-changer. Many have watched helplessly as generative AI companies vacuum up their content without permission or payment. By backing PACT, Google and Shopify signal that even the largest platforms recognize the need for a more orderly, consent-based system for AI data collection. Browser vendors are also on board, suggesting that future browsing experiences might include native support for these bot-blocking signals.

The practical impact remains to be seen. Enforcement relies on widespread adoption of the protocol across hosting providers, content management systems, and AI model trainers. Still, with heavyweights like Google and Shopify endorsing the approach, the PACT protocol has a strong chance of becoming the de facto standard for AI bot governance on the open web.