The Cloudflare Bug Bounty program and Cloudflare Pages
The Cloudflare Bug Bounty has resulted in numerous security improvements to Cloudflare Pages
Arkansas engineer wins round 3 of Project Jengo, and Cloudflare continues to win at the Patent Office
The latest winner of Cloudflare’s Project Jengo, along with some important case updates
Tracking shifts in Internet connectivity in Kherson, Ukraine
Over this past week, we observed an outage in the occupied city of Kherson, south Ukraine, coupled with an apparent shift in who controls the Internet within the region
The deluge of digital attacks against journalists
In Uruguay today, UNESCO’s World Press Freedom Day Global Conference is underway, with a 2022 theme of “Journalism under Digital Siege.” It is a fitting and timely theme
Wildcard proxy for everyone
Today we’re announcing the availability of proxied wildcard DNS records on all plan levels
Cloudflare Relay Worker
We are excited to open source a Cloudflare Worker that will make notifications available to any communication service that has webhook integration by transforming a generic webhook response to any required format
The Cloudflare network now spans 275 cities
Today, we are announcing the addition of 4 new cities, bringing our network to 275 cities globally.
Cloudflare blocks 15M rps HTTPS DDoS attack
Earlier this month, Cloudflare’s systems automatically detected and mitigated a 15.3 million request-per-second (rps) DDoS attack — one of the largest HTTPS DDoS attacks on record
Building many private virtual networks through Cloudflare Zero Trust
Starting today, we are thrilled to announce that you can start building many segregated virtual private networks over Cloudflare Zero Trust, beginning with virtualized connectivity for the connectors Cloudflare WARP and Cloudflare Tunnel
Two voting days, a debate and a polling rule in France impacts the Internet
We blogged previously about some trends concerning the first round of the 2022 French presidential election, held on April 10. Here we take a look at the run-off election this Sunday, April 24, that ended up re-electing Emmanuel Macron as President of France
Marcelo Affonso and Rebecca Weekly: why we joined Cloudflare
Marcelo Affonso (VP of Infrastructure Operations) and Rebecca Weekly (VP of Hardware Systems) recently joined our team. Here they share their journey to Cloudflare, what motivated them to join us, and what they are most excited about
Email Routing Insights
Insights and Logs are now available to everyone using Cloudflare Email Routing
Happy Earth Day: Announcing Green Compute open beta
Today, we are happy to announce that we are bringing Green Compute to all our developers
US Tax Day 2022. How leaving it to the last day impacts tax sites
How tax related websites were impacted by the Tax Day 2022 (the April 18 deadline to fill federal and state taxes)? With the highest growth in April
Breaking down broadband nutrition labels
We commend Congress for including broadband nutrition labels in the Infrastructure Investment and Jobs Act, and the FCC for moving quickly to implement the labels
Cloudflare partners with Kentik to enhance on-demand DDoS protection
We are excited to announce that as of today, network security teams can procure and use Magic Transit, Cloudflare’s industry-leading DDoS mitigation solution, and Kentik’s network observability as an integrated solution
DDoS Attack Trends for 2022 Q1
Welcome to our first DDoS report of 2022, and the ninth in total so far. This report includes new data points and insights both in the application-layer and network-layer sections — as observed across the global Cloudflare network between January and March 2022
The 2022 French Presidential election leaves its mark on the Internet
What happens to the Internet trends in France when an election like the 2022 French presidential happens? Here are some answers.
PIPEFAIL: How a missing shell option slowed Cloudflare down
This post tells the story of how a missing shell option called “pipefail” slowed Cloudflare down.
Internet disruptions overview for Q1 2022
In this post, we review selected Internet disruptions observed by Cloudflare during the first quarter of 2022, supported by traffic graphs from Cloudflare Radar and other internal Cloudflare tools, and grouped by associated cause
What Cloudflare is doing to keep the Open Internet flowing into Russia and keep attacks from getting out
Following Russia’s unjustified and tragic invasion of Ukraine in late February, the world has watched closely as Russian troops attempted to advance across Ukraine, only to be resisted and repelled by the Ukrainian people
The end of the road for Cloudflare CAPTCHAs
We decided we’re going to stop using CAPTCHAs. Before we talk about how we did it, and how you can help, let's first start with a simple question. Why in the world is CAPTCHA still used anyway?
WAF mitigations for Spring4Shell
Cloudflare Managed Ruleset updates for the recent vulnerabilities affecting the Java Spring framework and related software components
Future-proofing SaltStack
This blogpost chronicles the recent CVEs investigation, our findings, and how we are helping secure Salt now and in the Quantum future
Area 1 Security Announces the Most Spoofed Brand of 2021: WHO is Back Again?
From Jan. 2021 to Jan. 2022, more than 8.5 million (of 56 million in total) brand phishing emails blocked by Area 1 impersonated the World Health Organization
CVE-2022-1096: How Cloudflare Zero Trust provides protection from zero day browser vulnerabilities
CVE-2022-1096 is yet another zero day vulnerability affecting web browsers. Cloudflare zero trust mitigates the risk of zero day attacks in the browser and has been patched
Optimizing Magic Firewall’s IP lists
More and more users are using Magic Firewall’s IP lists to filter network traffic en route to their infrastructure. In response to that growth, we improved how our systems handle large sets of IPs
How the Oscars impacted the Internet (at least in the US)
How the Internet was impacted by the Oscars 2022 moments, including the Will Smith incident
2022 March Hackness: The Return of the Phishing Bracket - What 56 Million Emails Reveal about the Most Impersonated Brands
Learn who made the list of the top brands that attackers use in phishing lures. This bracket is based on an analysis of more than 56 million phishing emails blocked by Area 1’s solution in the preceding 12 months since Feb 2022.
Ridiculously easy to use Tunnels
Today, we’re thrilled to announce that we have launched a new solution to remotely create, deploy, and manage Tunnels and their configuration directly from the Zero Trust dashboard. This new solution allows our customers to provide their workforce with Zero Trust network access in 15 minutes or less
Cloudflare Radar’s new ASN pages
Autonomous Systems (ASes) are a group of routable IP prefixes belonging to a single entity or organization, and is one of the fundamental building blocks of the Internet
Zero Trust for SaaS: Deploying mTLS on custom hostnames
SaaS providers can now enable mutual TLS authentication on their customer’s domains through our Access product
Cloudflare’s investigation of the January 2022 Okta compromise
Today at 03:30 UTC we learnt of a compromise of Okta. We use Okta internally for employee identity as part of our authentication stack. We have investigated this compromise carefully and do not believe we have been compromised as a result
Get updates on the health of your origin where you need them
We are thrilled to announce Health Checks availability within Cloudflare’s centralized Notification tab, available to all Pro, Business, and Enterprise customers. Now, you can get critical alerts on the health of your origin without checking your inbox!
Application security: Cloudflare’s view
In this post, we share some of the insights we’ve gathered from the 32 million HTTP requests/second that pass through our network
Network performance update: Security Week
Today, we’re proud to report we are the fastest provider in 71% of the top 1,000 most reported networks around the world
New cities on the Cloudflare global network: March 2022 edition
Today, we are announcing the addition of 18 new cities in Africa, South America, Asia, and the Middle East, bringing our network to over 270 cities globally
Unlocking QUIC’s proxying potential with MASQUE
We continue our technical deep dive into traditional TCP proxying over HTTP
A Primer on Proxies
A technical dive into traditional TCP proxying over HTTP
Using Cloudflare One to Secure IoT devices
We asked ourselves: can we use our own products to secure IoT devices themselves — even on the same network as production systems? Using Cloudflare One, the answer is yes.
Commitment to Customer Security
Cloudflare has been hooked on securing customers globally since its inception. Our services protect customer traffic and data as well as our own, and we are continuously improving and expanding those services to respond to the changing threat landscape of the Internet
A bridge to Zero Trust
Today, we’re excited to announce the ability to route traffic from user devices with our lightweight roaming agent (WARP) installed to any network connected with our Magic IP-layer tunnels
Managing Clouds - Cloudflare CASB and our not so secret plan for what’s next
Right now we’re working on making the out-of-band CASB product a seamless part of the Zero Trust platform
Zero Trust client sessions
Starting today, you can build Zero Trust rules that require periodic authentication to control network access
Cloudflare partners with Microsoft to protect joint customers with a Global Zero Trust Network
As a company, we are constantly asking ourselves what we can do to provide more value to our customers, including integrated solutions with our partners.
Domain Scoped Roles - Early Access
Cloudflare is making it easier for enterprise account owners to manage their team’s access to Cloudflare by allowing user access to be scoped to sets of domains.
Securing Cloudflare Using Cloudflare
Cloudflare is committed to bolstering our security posture with best-in-class solutions — which is why we often turn to our own products as any other Cloudflare customer would.
Cloudflare Observability
Being a single pane of glass for all network activity has always been one of Cloudflare’s goals. Today, we’re outlining the future vision for Cloudflare observability.
Introducing SSH command logging
We built SSH command logging into Cloudflare Zero Trust to provide SSH visibility at a network layer instead of relying on software on individual machines
Cloudflare and CrowdStrike partner to give CISOs secure control across devices, applications, and corporate networks
We're very excited to announce multiple new integrations with CrowdStrike. These integrations combine the power of Cloudflare’s expansive network and Zero Trust suite, with CrowdStrike’s Endpoint Detection and Response (EDR) and incident remediation offerings
Protect all network traffic with Cloudflare
Today, we’re extending the availability of Magic Transit to customers with smaller networks by offering Magic Transit-protected, Cloudflare-managed IP space
Congratulations Cloudflare 2021 Partner Award Winners
We’re thrilled to announce the winners of our annual Channel and Alliance Partner Awards for 2021
Evolving our machine learning to stop mobile bots
How Cloudflare has evolved our Machine Learning models to identify automated traffic in mobile apps
Packet captures at the edge
Today, we’re excited to announce the general availability of on-demand packet captures from Cloudflare’s global network
Cloudflare and Aruba partner to deliver a seamless global secure network from the branch to the cloud
Today we are excited to announce that Cloudflare and Aruba are working together to develop a solution that will enable Aruba customers to connect EdgeConnect SD-WAN’s with Cloudflare's global network to further secure their corporate traffic with Cloudflare One
Clientless Web Isolation is now generally available
Today, we’re excited to announce that Clientless Web Isolation is generally available
Announcing the Cloudflare API Gateway
Today we’re announcing the Cloudflare API Gateway. We’re going to completely replace your existing gateway at a fraction of the cost
WAF for everyone: protecting the web from high severity vulnerabilities
We are excited to provide our new Cloudflare Web Application Firewall, with a Free Managed Ruleset to all Cloudflare users
Improving the WAF with Machine Learning
Today we are excited to complement managed rulesets (such as OWASP and Cloudflare Managed) with a new tool aimed at identifying bypasses and malicious payloads without human involvement, and before they are exploited
IDC MarketScape positions Cloudflare as a Leader among worldwide Commercial CDN providers
We are thrilled to announce that Cloudflare has been positioned in the Leaders category in the IDC MarketScape: Worldwide Commercial CDN 2022 Vendor Assessment
