Security Week

ASPA is the cryptographic upgrade for BGP that helps prevent route leaks by verifying the path network traffic takes. New features in Cloudflare Radar make tracking its adoption easy.

Mingwei Zhang and Bryton Herdes

We serve 7.6 billion challenges daily. Here’s how we used research, AAA accessibility standards, and a unified architecture to redesign the Internet’s most-seen user interface.

Leo Bacevicius, Ana Foppa, and Marina Elmore

Security Week 2025 has officially come to a close. Our updates for the week included a deep dive on our AI offering, a unified navigation experience, and an introduction to our AI Agent Cloudy.

Kim Blight, Adam Martinetti, and Alex Dunbrack

Using Cloudflare’s CASB, integrate, scan, and detect sensitive data and misconfigurations in your cloud storage accounts.

Alex Dunbrack and Michael Leslie

Customers can now easily safeguard sensitive data in Microsoft Outlook with our new DLP Assist feature.

Ayush Kumar, Noelle Kagan, and Warnessa Weaver

Cloudflare’s Data Loss Prevention is reducing false positives by using a self-improving AI-powered algorithm, built on Cloudflare’s Developer Platform.

Warnessa Weaver, Tom Shen, and Joshua Johnson

Cloudflare now provides clientless, browser-based support for the Remote Desktop Protocol (RDP). It enables secure, remote Windows server access without VPNs or RDP clients.

Ann Ming Samborski, Gabriel Bauman, Athanasios Filippidis, and Mike Borkenstein

Cloudflare is now assessed at the IRAP PROTECTED level, bringing our products and services to the Australian Public Sector.

Wesley Evans and Damien Lhuilier

This post is a beginner's guide to lattices, the math at the heart of the transition to post-quantum (PQ) cryptography. It explains how to do lattice-based encryption and authentication from scratch.

Christopher Patton and Peter Schwabe

Forrester Research has recognized Cloudflare as a Leader in its The Forrester Wave™: Web Application Firewall Solutions, Q1 2025 report.

Daniele Molteni

We are excited to introduce support for private hostname and IP address-defined applications as well as reusable access policies.

Kenny Johnson and Eduardo Gomes

We are closing the cleartext HTTP ports entirely for Cloudflare API traffic. This prevents the risk of clients unintentionally leaking their secret API keys in cleartext during the initial request.

Suleman Ahmad, Ash Pallarito, and Algin Martin

Cloudflare Aegis provides dedicated egress IPs for Zero Trust origin access strategies, now supporting BYOIP and customer-facing configurability, with observability of Aegis IP utilization soon.

Mia Malden and Adrien Vasseur

We’re introducing a new Application Security experience in the Cloudflare dashboard, with a reworked UI organized by use cases, making it easier for customers to navigate and secure their accounts.

Michael Tremante, Pete Thomas, and Jessica Tarasoff

With Cloudflare for AI, developers, security teams and content creators can leverage Cloudflare’s network and portfolio of tools to secure, observe and make AI applications resilient and safe to use.

Michael Tremante

It's hard to tell the difference between web content produced by humans and web content produced by AI. We're taking new approach to making AI content distinguishable without impacting performance.

Teresa Brooks-Mejia and Christopher Patton

Firewall for AI discovers and protects your public LLM-powered applications, and is seamlessly integrated with Cloudflare WAF. Join the beta now and take control of your generative AI security.

Radwa Radwan, Clement Bertier, and Zhiyuan Zheng

By building and integrating a new heuristics framework into the Cloudflare Ruleset Engine, we now have a more flexible system to write rules and deploy new releases rapidly.

Curtis Lowder, Brian Mitchell, and Adam Martinetti