Announcing Cloudflare Fraud Detection
Cloudflare Fraud Detection uses machine learning models to better protect businesses from fake account signups, account takeover attacks, and carding attacks to ensure businesses can operate online safely
Cloudflare’s Channel Partner Award winners of 2022
Cloudflare announces our Partner Award winners, in recognition of their outstanding achievements during the course of 2022, delivering the technical expertise, solutions, and services needed to solve customers’ challenges and to help build a better Internet
Using the power of Cloudflare’s global network to detect malicious domains using machine learning
Cloudflare has developed proprietary models leveraging machine learning and other advanced analytical techniques to detect security threats that take advantage of the domain name system (DNS)
Announcing WAF Attack Score Lite and Security Analytics for business customers
We are making the machine learning empowered WAF and Security analytics view available to our Business plan customers, to help detect and stop attacks before they are known
Analyze any URL safely using the Cloudflare Radar URL Scanner
Try our URL Scanner. Cloudflare Radar’s newest free tool for an under-the-hood look at any webpage
The state of application security in 2023
One year ago we published our first Application Security Report. For Security Week 2023, we are providing updated insights and trends around mitigated traffic, bot and API traffic, and account takeover attacks.
No hassle migration from Zscaler to Cloudflare One with The Descaler Program
Cloudflare is excited to launch the Descaler Program, a frictionless path to migrate existing Zscaler customers to Cloudflare One. Cloudflare is making it even easier for enterprise customers to make the switch to a faster, simpler, and more agile foundation for security and network transformation
Cloudflare One DLP integrates with Microsoft Information Protection labels
Today, we are excited to announce that Cloudflare One now offers Data Loss Prevention (DLP) detections for Microsoft Purview Information Protection labels. Simply integrate with your Microsoft account, retrieve your labels, and build rules to guide the movement of your labeled data
Adding Zero Trust signals to Sumo Logic for better security insights
The Cloudflare App for Sumo Logic now supports Zero Trust logs for out of the box, ready-made security dashboards
How sophisticated scammers and phishers are preying on customers of Silicon Valley Bank
In order to breach trust and trick unsuspecting victims, threat actors overwhelmingly use topical events as lures. The news about what happened at Silicon Valley Bank is the latest event to watch out for and stay vigilant against opportunistic phishing campaigns using SVB as the lure
Scan and secure Atlassian with Cloudflare CASB
Cloudflare CASB can now integrate and scan Atlassian products, Confluence and Jira, for critical security issues, like misconfigurations, data exposure, and third-party app risks. Start scanning in just a few clicks!
Zero Trust security with Ping Identity and Cloudflare Access
Cloudflare Access and Ping Identity offer a powerful solution for organizations looking to implement Zero Trust security controls to protect their applications and data.
Locking down your JavaScript: positive blocking with Page Shield policies
Starting today, using Page Shield, Cloudflare’s client side security solution, you can ensure only vetted and secure JavaScript is being executed by your user’s browsers. Stop unwanted JavaScript and keep your end user data safe with Page Shield policies.
Top 50 most impersonated brands in phishing attacks and new tools you can use to protect your employees from them
We’re expanding the phishing protections available to Cloudflare One customers by automatically identifying—and blocking—so-called “confusable” domains.
How to stay safe from phishing
Phishing attacks come in all sorts of ways to fool people. Email is definitely the most common, but there are others. Here are some tips to help you catch these scams before you fall for them.
Using Cloudflare Access with CNI
We are thrilled to introduce an innovative new approach to secure hosted applications via Cloudflare Access without the need for any installed software or custom code on your application server.
Mutual TLS now available for Workers
Mutual TLS is used to secure a range of network services and applications: APIs, web applications, microservices, databases and IoT devices. With mTLS support for Workers you can use Workers to authenticate to any service secured by mTLS directly!
Cloudflare Aegis: dedicated IPs for Zero Trust migration
Lock down your services with Cloudflare Aegis: dedicated IPs for Cloudflare egress back to your applications.
Welcome to Security Week 2023
Welcome to Security Week 2023. This week we’ll demonstrate how Cloudflare is making it as easy as possible to shift from protecting applications, to protecting employees, and making sure they are protected everywhere.
Deploying firmware at Cloudflare-scale: updating thousands of servers in more than 285 cities
We have a huge number of servers of varying kinds, from varying vendors, spread over 285 cities worldwide. We need to be able to rapidly deploy various types of firmware updates to all of them, reliably, and automatically, without any kind of manual intervention.
Cloudflare's network expansion in Indonesia
Building a world class network isn’t always easy, otherwise everyone would do it. I wanted to share with you some of the challenges that we’ve faced and how we’ve gone about overcoming them to become a leader for network performance in Indonesia.
Embrace equity on International Women’s Day (and every day)
Happy International Women’s Day! The global theme for 2023 is #EmbraceEquity, which is part of an ongoing effort to raise awareness around “Why equal opportunities are no longer enough.” Today is a time to highlight achievements made by women, but also an opportunity to become better informed.
Accelerate building resiliency into systems with Cloudflare Workers
In this blog post we’ll discuss how Cloudflare Workers enabled us to quickly improve the resiliency of a legacy system
New Zero Trust navigation coming soon (and we need your feedback)
The Zero Trust dashboard navigation will be getting a visual refresh on March 20, 2023.
Keeping the Cloudflare API 'all green' using Python-based testing
Scout is an automated system providing constant end to end testing and monitoring of live APIs over different environments and resources. Scout does it by periodically running self explanatory Python tests
The White House’s National Cybersecurity Strategy asks the private sector to step up to fight cyber attacks. Cloudflare is ready
The White House released the National Cybersecurity Strategy aimed at securing the Internet. Cloudflare welcomes the Strategy, and congratulates the White House on this much-needed policy initiative.
How Cloudflare runs Prometheus at scale
Here at Cloudflare we run over 900 instances of Prometheus with a total of around 4.9 billion time series. Operating such a large Prometheus deployment doesn’t come without challenges . In this blog post we’ll cover some of the issues we hit and how we solved them
Oxy is Cloudflare's Rust-based next generation proxy framework
In this blog post, we are proud to introduce Oxy - our modern proxy framework, developed using the Rust programming language
How we built an open-source SEO tool using Workers, D1, and Queues
In this blog post, I’m excited to show off some of the new tools in Cloudflare’s developer arsenal, D1 and Queues, to prototype and ship an internal tool for our SEO experts at Cloudflare.
How Rust and Wasm power Cloudflare's 1.1.1.1
Introducing a new DNS platform that powers 1.1.1.1 and various other products.
ROFL with a LOL: rewriting an NGINX module in Rust
Cloudflare engineers rewrote cf-html, an old NGINX module, in Rust. This project revealed much about NGINX, potentially leading to its full replacement in Cloudflare's infrastructure.
One year of war in Ukraine: Internet trends, attacks, and resilience
This blog post reports on Internet insights during an historical war in Europe that has been seen and shared online, and discusses how Ukraine's Internet remained resilient in spite of dozens of disruptions in three different stages of the conflict.
The Chief Zero Trust Officer: a new role for a new era of cybersecurity
Implementing Zero Trust can be challenging, and efforts may stall. The need for a Chief Zero Trust Officer (CZTO) is driven by the increasing importance of Zero Trust security in the face of escalating cyber attacks.
So long, and thanks for all the deployments: deprecating Wrangler v1
Version 1 of Wrangler has served us well for years. But with a new major version to focus on, it’s time to say goodbye
Cloudflare mitigates record-breaking 71 million request-per-second DDoS attack
This was a weekend of record-breaking DDoS attacks. Over the weekend, Cloudflare detected and mitigated dozens of hyper-volumetric DDoS attacks. The majority of attacks peaked in the ballpark of 50-70 million requests per second (rps) with the largest exceeding 71 million rps
A look at Internet traffic trends during Super Bowl LVII
We look at who the biggest winners were among Super Bowl advertisers, and examine traffic trends for food delivery services, social media, and sports and betting sites. We also review city and state-level traffic trends, as well as related email threat volume in the weeks ahead of the game
Welcome to Wildebeest: the Fediverse on Cloudflare
Today we're announcing Wildebeest, an open-source, easy-to-deploy ActivityPub and Mastodon-compatible server built entirely on top of Cloudflare's Supercloud.
How Cloudflare erroneously throttled a customer’s web traffic
Today’s post is a little different. It’s about a single customer’s website not working correctly because of incorrect action taken by Cloudflare.
Manage and control the use of dedicated egress IPs with Cloudflare Zero Trust
Administrators can now use Gateway traffic egress policies to determine which egress IPs are used when.
Get notified about the most relevant events with Advanced HTTP Alerts
Today we’re adding more flexibility to HTTP alerting, enabling customers to customize the types of activity they’re alerted on and how those alerts are organized.
Uptick in healthcare organizations experiencing targeted DDoS attacks
Over the past few days, Cloudflare, as well as other sources, have observed healthcare organizations targeted by a pro-Russian hacktivist group claiming to be Killnet.
Cloudflare's handling of a bug in interpreting IPv4-mapped IPv6 addresses
Recently, a vulnerability was reported to our bug bounty about a bug in the way some of our code interprets IPv4 addresses mapped into IPv6 addresses.
CVE-2022-47929: traffic control noqueue no problem?
In the Linux kernel before 6.1.6, a NULL pointer dereference bug in the traffic control subsystem allows an unprivileged user to trigger a denial of service (system crash) via a crafted traffic control configuration that is set up with "tc qdisc" and "tc class" commands.
Towards a global framework for cross-border data flows and privacy protection
In our third and final blog post leading up to Data Privacy Day, we drill down into the challenges for cross-border data flows, in particular personal data transfers from the EU to the US.
Inside Geo Key Manager v2: re-imagining access control for distributed systems
Using the story of Geo Key Manager v2 as an example, let’s re-imagine access control for distributed systems using a variant of public-key cryptography, called attribute-based encryption.
Cyberattacks on Holocaust educational websites increased in 2022
Today, 78 years after the liberation of the Auschwitz death camp, we mark the International Holocaust Remembrance Day. With Cloudflare’s Project Galileo, we protect Holocaust educational websites and at risk public interest groups. Read more to see how attacks on these groups increased in 2022.
Navigating the changing data localization landscape with Cloudflare’s Data Localization Suite
We continue to expand and improve our data localization suite to help support our customers who have to comply with data localization requirements
Cloudflare incident on January 24, 2023
Several Cloudflare services became unavailable for 121 minutes on January 24th, 2023 due to an error releasing code that manages service tokens. The incident degraded a wide range of Cloudflare products
Armed to Boot: an enhancement to Arm's Secure Boot chain
Enhancing the Arm Secure Boot chain to improve platform security on modern systems.
Intelligent, automatic restarts for unhealthy Kafka consumers
At Cloudflare, we take steps to ensure we are resilient against failure at all levels of our infrastructure. This includes Kafka, which we use for critical workflows such as sending time-sensitive emails and alerts.
Internet disruptions overview for Q4 2022
In this post, we review selected Internet disruptions observed by Cloudflare during the fourth quarter of 2022, supported by traffic graphs from Cloudflare Radar and other internal Cloudflare tools, and grouped by associated cause or common geography.
Introducing Waiting Room Bypass Rules
Waiting Room now offers customers more fine-tuned control over what traffic a waiting room covers. Queue only the traffic you want to with Bypass Waiting Room Rules, now available to all Enterprise customers with an Advanced Purchase of Waiting Room.
Three new winners of Project Jengo, and more defeats for the patent troll
Announcing three new winners of Project Jengo, and a major case update in our ongoing fight against the patent troll Sable Networks.
CIO Week 2023 recap
Learn about all the new products, partnerships, and innovations Cloudflare announced during CIO Week to help organizations modernize their IT and security.
Cloudflare Zero Trust for managed service providers
Adding new features to Cloudflare Zero Trust for Managed Service Providers using Gateway DNS.
Give us a ping. (Cloudflare) One ping only.
Now Zero Trust administrators can use the familiar debugging tools that we all know and love like ping, traceroute, and MTR to test connectivity to private network destinations running behind their Tunnels
China Express: Cloudflare partners to boost performance in China for corporate networks
China Express is a suite of connectivity and performance offerings designed to improve application performance for users in China.
Cloudflare Application Services for private networks: do more with the tools you already love
Today, we’re excited to announce new integrations that make it possible to unlock operational and cost efficiencies for IT teams by allowing them to do more with fewer tools, and enable new use cases that are impossible without Cloudflare’s “every service everywhere” architecture.
Announcing SCIM support for Cloudflare Access & Gateway
Cloudflare Access & Gateway now support the System for Cross-domain Identity Management (SCIM) protocol.
Zone Versioning is now generally available
Safely configure and deploy updates to zone configuration with Zone Versioning now Generally Available for Enterprise customers