Agents Can Now Set Up Your Website's Security with Turnstile Spin
Cloudflare, Friday, September 25th, 2026
Cloudflare launched Turnstile Spin, an AI-agent-driven tool that automatically wires up correct server-side bot verification.
Cloudflare launched Turnstile Spin, an agent-mediated implementation of its Turnstile CAPTCHA-free bot challenge that uses an AI coding agent to complete both the frontend widget setup and backend Siteverify token validation, fixing a common failure where sites skip server-side verification and remain exposed to bots.
Turnstile now processes about three billion verifications on a typical weekday, with over 23,000 accounts creating a new widget in one recent week, prompting Cloudflare to simplify correct implementation as AI makes app-building more accessible to non-developers.
Spin can also fix improperly installed widgets and handle migrations from other CAPTCHA providers.