Confirmed
Google says 'are you a bot' challenge screens can get real pages dropped from the index
On the Search Off the Record podcast's July 16, 2026 episode on the Indexing Report, Google's John Mueller and Martin Splitt explained that when a CDN or security layer serves an 'are you a bot' challenge screen to Googlebot with a 200 status code, Google indexes that screen instead of the real page. Because the same generic screen appears across many unrelated sites, Google's deduplication picks one as canonical and treats the rest, including the real content, as duplicates.
In plain termsIn plain terms: your site's 'prove you're human' screen can trick Google into thinking your real page doesn't exist, because Google saw the same block-everyone-out screen on other sites too and chose one of those as the 'real' version instead of yours.
Why it mattersAny site running aggressive bot-detection or CDN security rules risks losing indexed pages to a competitor's identical challenge screen, and a normal browser check will never reveal it because real visitors never see the flagged version.
Our takeI made this same point with Shopping's SSR/CSR split: what a real browser or a testing tool sees isn't always what Google's actual crawler receives, and here that single blind spot is enough to lose the canonical entirely, not just a ranking signal.