---
title: Static resource protection · Cloudflare bot solutions docs
description: Pro, Business, and Enterprise customers can use Cloudflare's bot solutions to protect their static resources from bots.
lastUpdated: 2025-04-29T15:53:32.000Z
source_url:
  html: https://zt-dark-mode-changelog.preview.developers.cloudflare.com/bots/additional-configurations/static-resources/index.md
  md: https://zt-dark-mode-changelog.preview.developers.cloudflare.com/bots/additional-configurations/static-resources/
---

Pro, Business, and Enterprise customers can use Cloudflare's bot solutions to protect their static resources from bots.

Warning

If you enable static resource protection, you may block good bots — like mail clients — that routinely fetch static resources. Make sure you understand your existing infrastructure before enabling this feature.

## Super Bot Fight Mode

To enable this feature as a Pro or Business customer or an Enterprise customer without Bot Management:

1. Go to **Security** > **Bots**.
2. Select **Configure Super Bot Fight Mode**.
3. For **Static resource protection**, select **On**.

Warning

The **Static Resource Protection** setting will only activate if at least one of the bot categories (definite, likely, or verified) is *not* set to `Allow`. If all categories are set to `Allow`, this setting will not have any impact since it works alongside these bot settings as part of the managed rules.

## Bot Management for Enterprise

Static resources are protected by default when you create [custom rules](https://developers.cloudflare.com/waf/custom-rules/) using `cf.bot_management.score`.



To exclude static resources, you would need to include `not (cf.bot_management.static_resource)` as part of your custom rule.

## Which files are protected?

Static resources are files with the following extensions:

`ico|jpg|png|jpeg|gif|css|js|tif|tiff|bmp|pict|webp|svg|svgz|class|jar|txt|csv|doc|docx|xls|xlsx|pdf|ps|pls|ppt|pptx|ttf|otf|woff|woff2|eot|eps|ejs|swf|torrent|midi|mid|m3u8|m4a|mp3|ogg|ts`
