
With Cloudflare for AI, developers, security teams and content creators can leverage Cloudflare’s network and portfolio of tools to secure, observe and make AI applications resilient and safe to use.
MT
Michael Tremante·March 19, 2025Security 
In this blog post we talk about our approach and ongoing research into detecting novel web attack vectors in our WAF before they are seen by a security researcher.
MT
Michael Tremante·September 29, 2023Security 
We just deployed a number of updates to our Client-Side Security Product: Page Shield. As of today we support all major CSP directives, better suggestions, better violation reporting, Page Shield specific user role permissions, and domain insights
MT
Michael Tremante·September 15, 2023Security 
Starting today, using Page Shield, Cloudflare’s client side security solution, you can ensure only vetted and secure JavaScript is being executed by your user’s browsers. Stop unwanted JavaScript and keep your end user data safe with Page Shield policies.
MT
Michael Tremante·March 13, 2023Security 
Today, we’re making the job of application security teams easier, by providing a content scanning engine integrated with our Web Application Firewall (WAF), so that malicious files being uploaded by end users, never reach origin servers in the first place
MT
Michael Tremante·January 4, 2023Security 
Starting today, Page Shield can now watch for malicious outbound connections made by third-party JavaScript code
MT
Michael Tremante·October 21, 2022Frontend 
Forester has recognised Cloudflare as a Leader in The Forrester Wave™: Web Application Firewalls, Q3 2022 report. The report evaluated 12 Web Application Firewall (WAF) providers on 24 criteria across current offering, strategy and market presence.

Gartner has recognised Cloudflare as a Leader in the 2022 "Gartner® Magic Quadrant™ for Web Application and API Protection (WAAP)" report that evaluated 11 vendors for their ‘ability to execute’ and ‘completeness of vision’

We are excited to provide our new Cloudflare Web Application Firewall, with a Free Managed Ruleset to all Cloudflare users

Welcome to our first innovation week of the year: Security Week! In this post we will be going over Cloudflare’s security products’ history giving you an introduction to all the great announcements we have planned
MT
Michael Tremante·March 13, 2022Security 
To help identify and mitigate supply chain attacks in the context of web applications, today we are launching Page Shield in General Availability (GA).

On September 29th 2021, the Apache Security team was alerted of a path traversal vulnerability being actively exploited (zero-day) against Apache HTTP Server version 2.4.49. Customers running the affected Apache version, should update to 2.5.51 as soon as possible.
MT
Michael Tremante·October 8, 2021Security 
On August 25, 2021, Atlassian released a security advisory affecting their Confluence application. The Cloudflare WAF soon after started mitigating an increase in malicious traffic to vulnerable endpoints ensuring customers remained protected.
MT
Michael Tremante·September 8, 2021Security 
Today, we are making our Account Takeover Protection capabilities available to all paid plans at no additional charge.

End-user account security is always a top priority, but a hard problem to solve. In this post, we provide a summary of all the Cloudflare features that can help.
MT
Michael Tremante·March 30, 2021Security 
Today we are announcing a new Cloudflare Web Application Firewall for all Cloudflare paid zone customers.