Announcing advanced bot signals to detect automation without CAPTCHAs
Arcjet Signals are evaluated without a CAPTCHA and enforced when the request passes through a critical flow. The browser gives us signals. The application gives us intent.
What's new in Arcjet (2026-06-12). New versions for each of our JS, Python, and Go SDKs to improve performance and detect proxies.
This week we released new versions for each of the Arcjet JS, Python, and Go SDKs to improve performance and detect proxies.
Although not recommended, some users run multiple proxies in front of their application deployments e.g. Cloudflare in front of Vercel. This makes it impossible to detect the client IP because we can't trust the forwarded headers.
The Arcjet JS SDK now includes support for configuring Cloudflare as a trusted proxy which allows proper detection of client IPs. This is in the 1.5.0 JS SDK release - check out the docs for details.
We published new releases for each of our SDKs (JS, Python, Go) to roll up various minor bug fixes and dependency updates, as well as the proxy functionality. Our goal is one release per month.
As we wrote about yesterday, we have rebuilt the secure Wasm bot detection component built into our SDKs. This includes optimizations to per-request performance and reduces overall bundle size. These changes are in main and will be in the next stable SDK releases.
🚀
Arcjet Signals are evaluated without a CAPTCHA and enforced when the request passes through a critical flow. The browser gives us signals. The application gives us intent.
What's new in Arcjet (2026-05-22). Unified coding agent skills, expanded Python docs, email notification management.
What's new in Arcjet (2026-05-15). The Arcjet CLI and team management in the web dashboard.
Get the full posts by email every week.