Subscribe to receive notifications of new posts:

Security Week 2025: in review

2025-03-24

Security Week 2025 has officially come to a close. Our updates for the week included a deep dive on our AI offering, a unified navigation experience, and an introduction to our AI Agent Cloudy....

Continue reading »
Security Week 2025: in review

Detecting sensitive data and misconfigurations in AWS and GCP with Cloudflare One

2025-03-21

Security WeekCloudflare OneCASBDLPAWSGoogle CloudZero Trust

Using Cloudflare’s CASB, integrate, scan, and detect sensitive data and misconfigurations in your cloud storage accounts....

Prepping for post-quantum: a beginner’s guide to lattice cryptography

2025-03-21

Security WeekCryptographyPost-QuantumResearch

This post is a beginner's guide to lattices, the math at the heart of the transition to post-quantum (PQ) cryptography. It explains how to do lattice-based encryption and authentication from scratch....

Improving Data Loss Prevention accuracy with AI-powered context analysis

2025-03-21

Security WeekZero TrustDLPSASEData ProtectionCloudflare OneWorkers AI

Cloudflare’s Data Loss Prevention is reducing false positives by using a self-improving AI-powered algorithm, built on Cloudflare’s Developer Platform....

Cloudflare is now IRAP assessed at the PROTECTED level, furthering our commitment to the global public sector

2025-03-21

Security WeekCompliancePublic SectorIRAP

Cloudflare is now assessed at the IRAP PROTECTED level, bringing our products and services to the Australian Public Sector....

Cloudflare named a leader in Web Application Firewall Solutions in 2025 Forrester report

2025-03-20

Security WeekApplication SecurityWAFWeb Application FirewallAPI SecurityForrester

Forrester Research has recognized Cloudflare as a Leader in its The Forrester Wave™: Web Application Firewall Solutions, Q1 2025 report....

HTTPS-only for Cloudflare APIs: shutting the door on cleartext traffic

2025-03-20

Security WeekHTTPSAPIAddressingResearch

We are closing the cleartext HTTP ports entirely for Cloudflare API traffic. This prevents the risk of clients unintentionally leaking their secret API keys in cleartext during the initial request. ...

Simplify allowlist management and lock down origin access with Cloudflare Aegis

2025-03-20

Security WeekAegisEgressIPv4IPv6

Cloudflare Aegis provides dedicated egress IPs for Zero Trust origin access strategies, now supporting BYOIP and customer-facing configurability, with observability of Aegis IP utilization soon....

Making Application Security simple with a new unified dashboard experience

2025-03-20

Security WeekApplication SecurityDashboardWAFBot Management

We’re introducing a new Application Security experience in the Cloudflare dashboard, with a reworked UI organized by use cases, making it easier for customers to navigate and secure their accounts....

Improved support for private applications and reusable access policies with Cloudflare Access

2025-03-20

Security WeekCloudflare AccessCloudflare OneCloudflare Zero Trust

We are excited to introduce support for private hostname and IP address-defined applications as well as reusable access policies. ...

Cloudflare for AI: supporting AI adoption at scale with a security-first approach

2025-03-19

Security WeekAISecurity

With Cloudflare for AI, developers, security teams and content creators can leverage Cloudflare’s network and portfolio of tools to secure, observe and make AI applications resilient and safe to use....

Improved Bot Management flexibility and visibility with new high-precision heuristics

2025-03-19

Security WeekBotsBot ManagementApplication SecurityMachine LearningHeuristicsEdge RulesSecurity

By building and integrating a new heuristics framework into the Cloudflare Ruleset Engine, we now have a more flexible system to write rules and deploy new releases rapidly....

Take control of public AI application security with Cloudflare's Firewall for AI

2025-03-19

Security WeekSecurityLLMWeb Asset Discovery

Firewall for AI discovers and protects your public LLM-powered applications, and is seamlessly integrated with Cloudflare WAF. Join the beta now and take control of your generative AI security....

Trapping misbehaving bots in an AI Labyrinth

2025-03-19

Security WeekBotsBot ManagementAI BotsAIMachine LearningGenerative AI

How Cloudflare uses generative AI to slow down, confuse, and waste the resources of AI Crawlers and other bots that don’t respect “no crawl” directives....

An early look at cryptographic watermarks for AI-generated content

2025-03-19

Security WeekAICryptographyResearch

It's hard to tell the difference between web content produced by humans and web content produced by AI. We're taking new approach to making AI content distinguishable without impacting performance. ...

How we train AI to uncover malicious JavaScript intent and make web surfing safer

2025-03-19

Security WeekPage ShieldAIMachine LearningMalicious JavaScriptJavaScript

Learn more about how Cloudflare developed an AI model to uncover malicious JavaScript intent using a Graph Neural Network, from pre-processing data to inferencing at scale. ...