Agents can now set up your website’s security with Turnstile Spin

What happened

Misconfiguring Turnstile by skipping backend validation leaves sites exposed to bots. Turnstile Spin fixes incomplete setups by using your preferred AI coding agent to wire up server-side verification.

Turnstile is free to use, works on any site (no need to proxy traffic through Cloudflare), and never asks a visitor to solve a puzzle. Initially built with developers in mind, Turnstile requires a basic two-step implementation and understanding of frontend and backend development.

First, you modify your frontend code to render the Turnstile widget; this allows Cloudflare to run the client-side challenges and issue a token. You can then act on this decision, like gating the login button until the visitor successfully solves a Turnstile challenge.

Key facts

• Initially built with developers in mind, Turnstile — requires: a basic two-step implementation and understanding of frontend and backend development