Bot Management
Bot management dynamically protects websites against automated threats from malicious bots while letting good bots (search crawlers) through.

The Bot Management Rules table (ID, Name, Description, Websites, Operation) lists your rules. Click Add Bot Management Rule to create one — classify traffic and choose an action (allow / block / challenge) for a website. Typical targets: credential stuffing on login, inventory scraping, checkout/gift-card abuse, content scraping.
Challenges (e.g. JS/interactive checks) let genuine users through while stopping cheap automation — often better than an outright block for borderline traffic.
Bot Management is a paid feature. On a plan that doesn't include it, Add Bot Management Rule shows an Upgrade required prompt instead of the rule editor — see Plans & settings.

Related
For non-bot mitigation, see Programmable Mitigation (custom block/rate-limit rules) and Emergency Mitigation (break-glass switches for an active attack).