Detect Cloudflare Turnstile
Turnstile is Cloudflare's smart CAPTCHA alternative.
Detection looks at vendor endpoints across 1 fingerprint rules among the site's public responses.
01
Websites using Cloudflare Turnstile
Loading website list…
02
Signal classes
PluginView evaluates public page signals in these classes when identifying Cloudflare Turnstile. Individual fingerprint rule bodies are proprietary and are not published.
- Vendor endpoints
03
Example public indicators for Cloudflare Turnstile
Illustrative indicators derived from public catalog metadata for Cloudflare Turnstile. A live scan may match additional proprietary rules beyond these examples.
- challenges.cloudflare.com/turnstile
04
What a detection means
- Establishes
- The listed vendor-controlled browser component was present and active on the scanned page at scan time.
- Does not establish
- It does not prove a sitewide installation, current commercial contract, backend-only use, exclusive use, or production transaction volume.
05
Minimum proof rule
Observe a live browser request, loaded script, or iframe to the listed unique vendor endpoint. Source-text-only matches do not qualify.
Best pages to check: Forms, signup, checkout
06
How to check a site for Cloudflare Turnstile
- 1. Enter the website URL in the scan form — homepage, pricing, checkout, or login pages usually expose the strongest Cloudflare Turnstile signals (prefer: Forms, signup, checkout).
- 2. PluginView reads only public responses (vendor endpoints) and scores them against the Cloudflare Turnstile signature set (1 rules).
- 3. Review the confidence score and text explanation for Cloudflare Turnstile on the results page.
07
FAQ: detecting Cloudflare Turnstile
- Can PluginView detect Cloudflare Turnstile without logging in?
- Yes. PluginView only reads publicly accessible responses when checking for Cloudflare Turnstile — typically vendor endpoints. It does not bypass authentication or paywalls.
- What category is Cloudflare Turnstile?
- Cloudflare Turnstile is classified under Security, Consent, CAPTCHA & Accessibility in the PluginView directory.
- How many fingerprint rules cover Cloudflare Turnstile?
- This reference currently tracks 1 fingerprint rule across vendor endpoints. Individual rule bodies are proprietary and are not published.
- What public signals suggest a site uses Cloudflare Turnstile?
- Illustrative public indicators for Cloudflare Turnstile include challenges.cloudflare.com/turnstile. A live scan may match additional proprietary rules beyond these examples.
- Which pages are best for detecting Cloudflare Turnstile?
- For Cloudflare Turnstile, start with: Forms, signup, checkout.
